last executing test programs: 14m38.99994678s ago: executing program 4 (id=5512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14m38.91908218s ago: executing program 4 (id=5513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='max=00000000000000000010000,stats=global,stvts=glo']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xc, 0x0, 0x8, 0x20, 0x7}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0x2b, &(0x7f00000002c0)=@string={0x2b, 0x3, "fe9d9332e672d4b7c465a7788907f4186c3650f5fc10ba307658a00232da7e22b94ac606db4d378f49"}}]}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x1, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x10, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m37.132899063s ago: executing program 4 (id=5521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x0) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/bnep\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 14m35.772349725s ago: executing program 4 (id=5524): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021009020a0000002bbd7000fddbdf2508001200040007f06e83"], 0x50}}, 0x2000c800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d], [0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) readv(r4, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000580), 0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b46, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) 14m35.444308835s ago: executing program 4 (id=5529): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x10) io_uring_setup(0x17be, &(0x7f00000004c0)={0x0, 0x49a9, 0x0, 0x0, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r0, r0, 0x38, 0x20, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) 14m34.523135617s ago: executing program 4 (id=5533): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x91493000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x0, 0x0, 0x1, "e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prlimit64(r1, 0x7, 0x0, 0x0) 14m19.367858762s ago: executing program 32 (id=5533): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x91493000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x0, 0x0, 0x1, "e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prlimit64(r1, 0x7, 0x0, 0x0) 47.291632319s ago: executing program 0 (id=10179): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/kheaders.tar.xz', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 2) 45.927348382s ago: executing program 0 (id=10182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000aa450d741764ba00000000000000001500001318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffdffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x2, [@loopback, @multicast1]}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r10, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 44.941772854s ago: executing program 0 (id=10186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0xd1) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100001) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0x1b8, 0x0, 0x428, 0x428, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@loopback, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xfffffffe, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) 44.894181813s ago: executing program 0 (id=10187): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@default_permissions}], [], 0x2c}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x141000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x2823002, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_usb_connect(0x5, 0x7c9, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x7a, 0xca, 0x19, 0x20, 0xe41, 0x4252, 0x3941, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b7, 0x2, 0x7e, 0x0, 0x0, 0xa2, [{{0x9, 0x4, 0x2d, 0x9, 0xb, 0xb8, 0xec, 0x47, 0x3, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "5c68666dc9fb"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x2, 0x3ff, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x71}, @obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0x21, 0x24, 0x13, 0x2, "eca57d23b32b25a2fba694f3b2bef71ee5f51a5ba56ee6e55cbabb65cd"}, @mdlm={0x15, 0x24, 0x12, 0x4}]}], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0xd, 0xa, 0xb, [@generic={0x8e, 0x8, "a31556b5f456ef992d095e18ba7250b3a4cf3c8601efccaecfb2cf6c66fbafaa577d82b01536c7841b3ee45eeb00f12d69d6f27eadd3b619b28947fd36cd7a16b321fc4b4b5b06b3d87b4f7ba3006bb5688bbf428437c50e4af46a80a047fd007484df4817603fec7493d5b264613a8d4fc70f8a843616d444ef40dbce9bc50080d2cc8ae28a7aa994113402"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x2, 0xd8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x3, 0x5, [@generic={0xa4, 0x31, "a7844b83e3e3fce6a6d6b838e3edfd0c76b74716b649d3a3fa6f48c09af3e55c9c97675fab92c09d4209b7d06582e65cda9c89116c59bb6dfdde5568772140ce4627bf49772fd00b3988ac3d146cb07b2737601964daa5112d74b45fbb231982e82f444061c5e60ae8b3b94c28b6d70f05873f2de33ca789445b4f07633ef472e718c4732796d8132acf7933e9cf97dd3159eca9ded8d6c4223ebae90c7f790d5252"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x94, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x6, 0x9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0xd, 0x4, 0x1, [@generic={0x63, 0x8, "31839d56ec7307510d38c37ccffa12c0d8ba6480d321f7daa0890ceebd82b7c7a4379d3089e786da8490a7895880307cc42b51da53f2f8b00ee507262b01e32416abcd98814cdc4600adcd4ec8e4fd551a5b565fe9ea25a78b5fb436396bebff57"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x7f, 0x3, 0xb, [@generic={0x43, 0x24, "5536938cdbb1692c8fed0d8ba75af9ce6a6a7afe7fbc905b4468e16bf47989a3d4e127e39836dae79d4b3ee6edc3c026e33d2c131060f35bdf3d40329614b725ef"}, @generic={0x2f, 0x8, "bc1f7be2ca6d4ee9adbff6f769e3513ba176a71b782856edd1cc03cd9c06be6681821a0e43f6b136181e87bef9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x3, 0xa5, [@generic={0x9b, 0x0, "513c13361b459360ea44e4ff89065407d250eb187124d9ea874cf5632ee585c996c621732ef6cc0c78afaa7685c6071391746f3984c034feba44050ffbb49eedff50cf31aabf9a71bb50cda0cb9791182cf552d3f8c9740629ce62b0ea98ae3e072ddcce47ff79a64a3f8e81e434c380b9d14f8d16b398b2d05ecaecf41644d1a01b813f06151de7ed53aa43c01e55424f51942440a13f7ae4"}, @generic={0x23, 0x21, "f427ff1a552445d783878933f36810acc9fe87bdcda026fe01735abcd4df5e36cc"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x0, 0xe4, 0x1, [@generic={0xa1, 0x30, "6118f165a64ca73700d095a50335b8e45d2b6b0bd6b60c367632b57f71cdddc0aa76f6b64aa5697ee8768b92f8f87a8a3e17d0d46f026dd272c60b4a49a76079d385686fce2f48b5dcd9ad7d5a1c90814e932daec300195a20d57f55e581cc764071a5fadf90193a1d2cd3176065009842c8420f729a318a05a7e79274d21e26bf954318ad088b6b79f917606e33410bbeda794ab3478da06f228e5aa3f881"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0xe9, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0xfb, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x30, 0x7f}]}}]}}, {{0x9, 0x4, 0x62, 0x5, 0xa, 0x44, 0xdb, 0xad, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xffba, 0xf6}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0xdd, "77a08033cd4e"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x10, "4b625e3077ec"}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0x40, 0x7, [@generic={0xdc, 0x7, "c28b679701a3bca9722888ba756a6eb6220800ed371099a2372eb4f0f249615862707e241b1b4670eeacfea3634b9f8cce4d822faaed393fec96fec458d581b1597095089a855db39faf2eb4e279649d592126e3f050c807fe6ce86a7558f9d197e78761fff9ee8dcdb0bc3c9f2653503202627626f8f83ad2088930725db92c374753706ee1603ded245014e33d232aee5625ba90692efcee1072d233f498c44f453d25843586f090da87be9870e299dd207979534e6bfd95a2e41859afcd56ba54644beb4d5c6ac332091fd7800463f401bd20c6c6b150884f"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x1ff, 0x2, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1a, 0x3}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x3, 0x41, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x5, 0xff, 0x7, [@generic={0xb2, 0x31, "358ee23eb707d19deba5d8ba7ad156bad0f8869c25e083ea7558a56ca6c638f64710c98de214e9485bfb2aaa5b67f9dc7b7630428c6f45367d2331ac14e011b1651dba1f3b8ef88ee3a51114108edcf1f89a4fdb1dccf8335d475fc12df1d528d598042a0d9841f9d46ff6ee714c7b19905ad9e21dc4caabd11d1160691df3bb4111da76afe7c2ba168d89f3f413c4c2997932b03e34a6535c561575c97a6cb3c0ac23ec4eebd367a6e315a82354fdec"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8a, 0x81}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x3, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x1000}]}}, {{0x9, 0x5, 0xf, 0x0, 0x248, 0x8, 0x3, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfff9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x9, 0x7, 0x7, [@generic={0xda, 0x21, "c6cdd6aa64e1c70f0f98d805d2b9a4a527cbf1cf63048d1730f5907304b0c11db83177c5d62e4f57ff06561f2a4a67b44853ad85943233bb3e3f2278b154a0e8473b178468a3deaf4d4de7178ff7b1120932851d3afd4ceda956000477215c34aecc7077f5b2b85b072628230265b213c785c64dc83ad4efa121bc5092a2d4812d179acd1fd88a6a2149e8a2c4c3c3d0f1f10dfb6c14233e4d6d7f3b3a6da7a535feb576f010de0c5a9fc684aa479b22c47f035dc3d4a956140c7c0f491aeaaa1084eeff1fdc59582c8534d05f56b25974533a41141ef15e"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x30, 0xe, 0xb9, [@generic={0x25, 0x4, "0851224d57d69d3999332f6f8a0b6f0e2d97d756b7f0e4a79d03136afa9d7a97c2df40"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x10, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf3b9}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0xc1, 0x1, 0x4, 0x8}, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x3b, 0x8, 0x3}]}, 0x1, [{0xa2, &(0x7f00000003c0)=@string={0xa2, 0x3, "75c6c20be8aa7ffecc1e93a32f46f3e2dd92680bec48b106971baed0bbf1155e0b45398da8ae5a842cc52045e2000a9d5b11a0e1050c110483c61956cce7fad2c05317571ba280e528608e1b26f64846f195e46f458ff24fb1da915883addd3a1eb042b2fb4c8d82e6175f511354bfa8e483d1730f619d6f85a0447c85503f1a96a3eab1ffe74e3a83eabf74992feee91f114cc7e678d87b9c3d7a84be669401"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000005c0)={0x24, &(0x7f0000000f40)={0x40, 0x31, 0x101, {0x101, 0x2, "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"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f0000000500)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x9, "dadff884"}, @main=@item_012={0x2, 0x0, 0xb, "06d6"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "6148a8d9"}, @local=@item_4={0x3, 0x2, 0xa, "b3733c4f"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0xdda}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000600)={0x20, 0x0, 0x1b, "a37185da56a61246a4c3ff929eabb1a7742823e3d73e5b757c815d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x12}, &(0x7f00000010c0)={0x20, 0x1, 0xe, "13157b655093e2bddb802021f57f"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x2}}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd00000010000100060c10000000000000000000", 0x58}], 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) 41.790194979s ago: executing program 0 (id=10197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000c00)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0xd1) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) sendfile(r1, r2, 0x0, 0x100001) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0x1b8, 0x0, 0x428, 0x428, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@loopback, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xfffffffe, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) 41.56579159s ago: executing program 0 (id=10198): socket$inet6(0xa, 0x3, 0xff) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x156) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3474, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x8, 0xb, 0x5, 0x40, 0x10}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xed, 0x3, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000380)='./bus\x00', r7, &(0x7f00000000c0)='./file1\x00') openat(r7, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 41.50211301s ago: executing program 33 (id=10198): socket$inet6(0xa, 0x3, 0xff) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x156) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3474, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x8, 0xb, 0x5, 0x40, 0x10}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xed, 0x3, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000380)='./bus\x00', r7, &(0x7f00000000c0)='./file1\x00') openat(r7, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14.898299971s ago: executing program 5 (id=10317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071103300000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 14.381318562s ago: executing program 5 (id=10321): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_submit(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file0\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x32c, &(0x7f0000000140)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000004c) link(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/179, 0x25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket(0x2c, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) 13.071954745s ago: executing program 5 (id=10325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fe9000/0x3000)=nil, 0x3000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f000014e000/0x1000)=nil, 0x4000, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x7c, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x735c4fa0}, @ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000010b827ed010000000000010902240001000000000904000002030000000921000000012202000905810300000000002470357532dffe6dc40cc352c37edc4e5aa5faec3c2402e57021eadcec2595d2c0182ac53f5d1436e00645b7f8ac0a5907161a8d453275f0cb804ed77dae9ea567d87fed3402145863dd333c1814005a24624584c6ee4f304c0d183b88f959c9ca5e3b7b9d1460c521fb3e3ac71441430f568e403188d564a9172de7282e876a52325ad09549902e88479f9c9645"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x154, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffd94f}, @WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x8, 'l'}]}}, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000000), &(0x7f00000005c0)=r13}, 0x20) 11.206771188s ago: executing program 2 (id=10331): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ccaf9bd40b63f2120000000800000004000000b47c0000000000001b66aa1c7c0f4161b3f0030731216d6ffccd5794f18011de7309780906884f1de6158a0ba9f01c4237cf9aa5ee3620e62c3547dc5306cd6e5237704974fe466988d9b2d797faa00f8ea4b6a65565522c2c500ff7a6ea306641f8baf70783a5662e24f54c9c61ab0005102f3331d5b8e50306da00b440adb4aa89c3ced2e562bc9b644abea32de3c70f794def52b3815f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpid() sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) ioprio_set$pid(0x3, r0, 0x2007) 10.28620853s ago: executing program 2 (id=10337): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ccaf9bd40b63f2120000000800000004000000b47c0000000000001b66aa1c7c0f4161b3f0030731216d6ffccd5794f18011de7309780906884f1de6158a0ba9f01c4237cf9aa5ee3620e62c3547dc5306cd6e5237704974fe466988d9b2d797faa00f8ea4b6a65565522c2c500ff7a6ea306641f8baf70783a5662e24f54c9c61ab0005102f3331d5b8e50306da00b440adb4aa89c3ced2e562bc9b644abea32de3c70f794def52b3815f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) kcmp(r0, r0, 0x0, r3, r6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) 10.11383513s ago: executing program 5 (id=10339): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x7, 0x0) writev(r3, &(0x7f0000000280), 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) fallocate(r7, 0x8, 0x0, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000010801"], 0x4c}}, 0x0) 9.285551332s ago: executing program 2 (id=10342): pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206d3010243010902"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 9.267802232s ago: executing program 6 (id=10344): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ccaf9bd40b63f2120000000800000004000000b47c0000000000001b66aa1c7c0f4161b3f0030731216d6ffccd5794f18011de7309780906884f1de6158a0ba9f01c4237cf9aa5ee3620e62c3547dc5306cd6e5237704974fe466988d9b2d797faa00f8ea4b6a65565522c2c500ff7a6ea306641f8baf70783a5662e24f54c9c61ab0005102f3331d5b8e50306da00b440adb4aa89c3ced2e562bc9b644abea32de3c70f794def52b3815f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpid() ioprio_set$pid(0x3, r0, 0x2007) 8.292907694s ago: executing program 6 (id=10345): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000180)='pipefs\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d43"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, 0x0, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x4, 0x0, &(0x7f0000000500)=[0x9, 0x3, 0x9, 0x99], 0x101}}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4001008}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)={0x6d8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7459b389}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7f, 0x3, 0x2, 0x3ebe}, {0x2, 0x5, 0x9, 0x8}, {0xfcda, 0x7f, 0x8, 0x3}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x2, 0x0, 0x9}, {0x6, 0xa, 0xea, 0x1}, {0x3, 0x3, 0xfb, 0x80}, {0xe, 0x1, 0x69, 0x8}, {0x0, 0x3, 0x21, 0xc92f}, {0xba, 0x7, 0x9, 0x4c12}, {0x9, 0xb, 0xee, 0x400}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4f, 0x3, 0x81, 0x6}, {0x6, 0x7, 0x4d, 0x7}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x2, 0x18, 0x18376000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x4}, 0xc011) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0106000000000000000009000000240004801300010062726f61646342bc0500000000000000000000000000000000000000136925d106e946ba0cc153b105c903061e1fa0d395b9ef110d94f065cb94813dcd3c51fbc9bb7d2515c1529d596acfb3dcdeb6bb70a674a8f8c97deaa003ef9f084a3fba7cc6be699b16edde3d3eb4cd47dfcf6663ce2f13bfe45efae6989520"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="96000000891272b5e48c2161ae5324d13ee1f87fb4c4145f0484ab6ccf39dee5781a0af6ad057e5fc37705df5c7fbe4eb36ebb6c273c0dc8cb14bef8d23522070c966f4bbe16e6693a39948025aa95f585ed6936e1596f0a520948c14c29bdc16f6d0e357fb53b309b4fcd574909510a0882447de00744cbbf6d0d64b46f5a8698a12f4b77de999df6ea33a7d8f3f59b4d5caab248ee9b8a301550e81b4a85a5807a62cea6a70dd4f2f5a7894a1d82039b2d2410a8cd866bedf0a36363b7afcd", @ANYRES16=r15, @ANYBLOB="010000000000000000000f0000001800078008000200010100000c0003000000000000000000"], 0x2c}}, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x6, 0x0, 0x1, 0xf9, 0x6, @random="8e475489510f"}, 0x14) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r17}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 8.100661264s ago: executing program 6 (id=10346): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d9000200302f00fe8000000000000000000000000000aaff0200000000000000000000000000010000883e00"], 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x110, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) poll(&(0x7f0000000200)=[{r1, 0x20}], 0x1, 0x80) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000066be3dae004d816367bed353a06ec66ef79a226bd0d315e4d0d9ca94669ca514fb8636f577b4456611bd6207d2ca24a90133a31cc86f29608743899931aee333b2f148aa36a1c7d4b58dc0fbbe19084c4141101663613b9ea09db76774665d6654004d917a3ecf2fed49970c2a1602a7be629bbed68219ad0b450c8d08b308d02a84b96ecffda988b1d70d1842011c872c5ebacaab0385ef03007f129b3376efbc90"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) 7.581305975s ago: executing program 2 (id=10348): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x4e2, 0x80) syz_open_dev$hiddev(&(0x7f0000002140), 0x0, 0x14b200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x8, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) 7.047674556s ago: executing program 5 (id=10352): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9c) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3c, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0xfffffffffffffec5, 0x0) 6.237884848s ago: executing program 3 (id=10354): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ccaf9bd40b63f2120000000800000004000000b47c0000000000001b66aa1c7c0f4161b3f0030731216d6ffccd5794f18011de7309780906884f1de6158a0ba9f01c4237cf9aa5ee3620e62c3547dc5306cd6e5237704974fe466988d9b2d797faa00f8ea4b6a65565522c2c500ff7a6ea306641f8baf70783a5662e24f54c9c61ab0005102f3331d5b8e50306da00b440adb4aa89c3ced2e562bc9b644abea32de3c70f794def52b3815f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpid() sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) ioprio_set$pid(0x3, r0, 0x2007) 5.11033918s ago: executing program 1 (id=10355): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ccaf9bd40b63f2120000000800000004000000b47c0000000000001b66aa1c7c0f4161b3f0030731216d6ffccd5794f18011de7309780906884f1de6158a0ba9f01c4237cf9aa5ee3620e62c3547dc5306cd6e5237704974fe466988d9b2d797faa00f8ea4b6a65565522c2c500ff7a6ea306641f8baf70783a5662e24f54c9c61ab0005102f3331d5b8e50306da00b440adb4aa89c3ced2e562bc9b644abea32de3c70f794def52b3815f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpid() ioprio_set$pid(0x3, r0, 0x2007) 5.10992364s ago: executing program 3 (id=10356): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000180)='pipefs\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, 0x0, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x4, 0x0, &(0x7f0000000500)=[0x9, 0x3, 0x9, 0x99], 0x101}}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4001008}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)={0x6d8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7459b389}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7f, 0x3, 0x2, 0x3ebe}, {0x2, 0x5, 0x9, 0x8}, {0xfcda, 0x7f, 0x8, 0x3}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x2, 0x0, 0x9}, {0x6, 0xa, 0xea, 0x1}, {0x3, 0x3, 0xfb, 0x80}, {0xe, 0x1, 0x69, 0x8}, {0x0, 0x3, 0x21, 0xc92f}, {0xba, 0x7, 0x9, 0x4c12}, {0x9, 0xb, 0xee, 0x400}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4f, 0x3, 0x81, 0x6}, {0x6, 0x7, 0x4d, 0x7}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x2, 0x18, 0x18376000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x4}, 0xc011) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0106000000000000000009000000240004801300010062726f61646342bc0500000000000000000000000000000000000000136925d106e946ba0cc153b105c903061e1fa0d395b9ef110d94f065cb94813dcd3c51fbc9bb7d2515c1529d596acfb3dcdeb6bb70a674a8f8c97deaa003ef9f084a3fba7cc6be699b16edde3d3eb4cd47dfcf6663ce2f13bfe45efae6989520"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="96000000891272b5e48c2161ae5324d13ee1f87fb4c4145f0484ab6ccf39dee5781a0af6ad057e5fc37705df5c7fbe4eb36ebb6c273c0dc8cb14bef8d23522070c966f4bbe16e6693a39948025aa95f585ed6936e1596f0a520948c14c29bdc16f6d0e357fb53b309b4fcd574909510a0882447de00744cbbf6d0d64b46f5a8698a12f4b77de999df6ea33a7d8f3f59b4d5caab248ee9b8a301550e81b4a85a5807a62cea6a70dd4f2f5a7894a1d82039b2d2410a8cd866bedf0a36363b7afcd", @ANYRES16=r15, @ANYBLOB="010000000000000000000f0000001800078008000200010100000c0003000000000000000000"], 0x2c}}, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x6, 0x0, 0x1, 0xf9, 0x6, @random="8e475489510f"}, 0x14) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r17}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 5.02836754s ago: executing program 6 (id=10357): pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206d3010243010902"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 5.00986635s ago: executing program 3 (id=10358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000aa450d741764ba00000000000000001500001318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffdffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x2, [@loopback, @multicast1]}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = gettid() r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r10, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.152193572s ago: executing program 1 (id=10359): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8442a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deb200000000000000000000ac1d00", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 4.151573382s ago: executing program 1 (id=10360): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x43, @mcast1}, 0x1c) 4.130268822s ago: executing program 3 (id=10361): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) io_submit(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file0\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x32c, &(0x7f0000000140)="$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") r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000004c) link(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket(0x2c, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.067715982s ago: executing program 5 (id=10362): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x7, 0x0) writev(r3, &(0x7f0000000280), 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) fallocate(r7, 0x8, 0x0, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000010801"], 0x4c}}, 0x0) 4.067032652s ago: executing program 1 (id=10363): r0 = openat(0xffffffffffffff9c, 0x0, 0x183442, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() gettid() tkill(r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x6, 0x0, 0xffffffffffffffea, 0x10, 0x0, 0xffffffffffffffd4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/35, 0x23) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x14008, &(0x7f0000001200)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2000000009f0}}, {@stripe={'stripe', 0x3d, 0x7}}, {@noblock_validity}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@data_err_abort}]}, 0xd, 0x5e1, &(0x7f0000001c40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) shutdown(0xffffffffffffffff, 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.495529533s ago: executing program 1 (id=10364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001900)="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", 0x1000, r2}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r6, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e00001800028004001200050016"], 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") syz_open_procfs(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 2.969313984s ago: executing program 3 (id=10365): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ccaf9bd40b63f2120000000800000004000000b47c0000000000001b66aa1c7c0f4161b3f0030731216d6ffccd5794f18011de7309780906884f1de6158a0ba9f01c4237cf9aa5ee3620e62c3547dc5306cd6e5237704974fe466988d9b2d797faa00f8ea4b6a65565522c2c500ff7a6ea306641f8baf70783a5662e24f54c9c61ab0005102f3331d5b8e50306da00b440adb4aa89c3ced2e562bc9b644abea32de3c70f794def52b3815f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) kcmp(r0, r0, 0x0, r3, r6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) 2.967451544s ago: executing program 2 (id=10366): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ccaf9bd40b63f2120000000800000004000000b47c0000000000001b66aa1c7c0f4161b3f0030731216d6ffccd5794f18011de7309780906884f1de6158a0ba9f01c4237cf9aa5ee3620e62c3547dc5306cd6e5237704974fe466988d9b2d797faa00f8ea4b6a65565522c2c500ff7a6ea306641f8baf70783a5662e24f54c9c61ab0005102f3331d5b8e50306da00b440adb4aa89c3ced2e562bc9b644abea32de3c70f794def52b3815f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpid() sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) ioprio_set$pid(0x3, r0, 0x2007) 1.627169077s ago: executing program 3 (id=10367): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xc, 0xfffffffd, 0x80000001, 0xa90, 0x10000}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='timer_expire_entry\x00', r6, 0x0, 0x8}, 0x18) socket(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timerfd_create(0x9, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./cgroup/../file0\x00', r4}, 0x18) 1.583653257s ago: executing program 2 (id=10368): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000180)='pipefs\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, 0x0, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x4, 0x0, &(0x7f0000000500)=[0x9, 0x3, 0x9, 0x99], 0x101}}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4001008}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)={0x6d8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7459b389}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7f, 0x3, 0x2, 0x3ebe}, {0x2, 0x5, 0x9, 0x8}, {0xfcda, 0x7f, 0x8, 0x3}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x2, 0x0, 0x9}, {0x6, 0xa, 0xea, 0x1}, {0x3, 0x3, 0xfb, 0x80}, {0xe, 0x1, 0x69, 0x8}, {0x0, 0x3, 0x21, 0xc92f}, {0xba, 0x7, 0x9, 0x4c12}, {0x9, 0xb, 0xee, 0x400}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4f, 0x3, 0x81, 0x6}, {0x6, 0x7, 0x4d, 0x7}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x2, 0x18, 0x18376000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x4}, 0xc011) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0106000000000000000009000000240004801300010062726f61646342bc0500000000000000000000000000000000000000136925d106e946ba0cc153b105c903061e1fa0d395b9ef110d94f065cb94813dcd3c51fbc9bb7d2515c1529d596acfb3dcdeb6bb70a674a8f8c97deaa003ef9f084a3fba7cc6be699b16edde3d3eb4cd47dfcf6663ce2f13bfe45efae6989520"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="96000000891272b5e48c2161ae5324d13ee1f87fb4c4145f0484ab6ccf39dee5781a0af6ad057e5fc37705df5c7fbe4eb36ebb6c273c0dc8cb14bef8d23522070c966f4bbe16e6693a39948025aa95f585ed6936e1596f0a520948c14c29bdc16f6d0e357fb53b309b4fcd574909510a0882447de00744cbbf6d0d64b46f5a8698a12f4b77de999df6ea33a7d8f3f59b4d5caab248ee9b8a301550e81b4a85a5807a62cea6a70dd4f2f5a7894a1d82039b2d2410a8cd866bedf0a36363b7afcd", @ANYRES16=r15, @ANYBLOB="010000000000000000000f0000001800078008000200010100000c0003000000000000000000"], 0x2c}}, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x6, 0x0, 0x1, 0xf9, 0x6, @random="8e475489510f"}, 0x14) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r17}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1.484774297s ago: executing program 6 (id=10369): faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1100) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x39230dda41dd72ad) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpid() ioprio_set$pid(0x3, r0, 0x2007) 61.80263ms ago: executing program 1 (id=10370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x2, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private1}}}}}}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast1={0xff, 0x4}}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="80"], 0xffd8}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000002c00)={0x2020}, 0x2020) write$binfmt_script(r10, &(0x7f0000020240), 0x10010) 0s ago: executing program 6 (id=10371): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xc, 0xfffffffd, 0x80000001, 0xa90, 0x10000}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='timer_expire_entry\x00', r6, 0x0, 0x8}, 0x18) socket(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timerfd_create(0x9, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./cgroup/../file0\x00', r4}, 0x18) kernel console output (not intermixed with test programs): wMaxPacketSize 0 [ 2022.916885][T23018] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2022.926185][T23018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.939269][T23018] usb 1-1: config 0 descriptor?? [ 2022.986016][T24341] usb 2-1: string descriptor 0 read error: -71 [ 2023.008176][T24341] uclogic 0003:256C:006D.0058: failed retrieving string descriptor #200: -71 [ 2023.017386][T24341] uclogic 0003:256C:006D.0058: failed retrieving pen parameters: -71 [ 2023.025378][T24341] uclogic 0003:256C:006D.0058: failed probing pen v2 parameters: -71 [ 2023.033607][T24341] uclogic 0003:256C:006D.0058: failed probing parameters: -71 [ 2023.041242][T24341] uclogic: probe of 0003:256C:006D.0058 failed with error -71 [ 2023.055541][ T1228] FAULT_INJECTION: forcing a failure. [ 2023.055541][ T1228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2023.068496][ T1228] CPU: 1 PID: 1228 Comm: syz.2.9970 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2023.078113][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2023.088010][ T1228] Call Trace: [ 2023.091135][ T1228] [ 2023.093912][ T1228] dump_stack_lvl+0x151/0x1c0 [ 2023.098423][ T1228] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2023.103890][ T1228] dump_stack+0x15/0x20 [ 2023.107882][ T1228] should_fail+0x3c6/0x510 [ 2023.112138][ T1228] should_fail_usercopy+0x1a/0x20 [ 2023.117001][ T1228] _copy_from_user+0x20/0xd0 [ 2023.121420][ T1228] __sys_bpf+0x1e9/0x760 [ 2023.125503][ T1228] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 2023.130709][ T1228] ? __kasan_check_write+0x14/0x20 [ 2023.135657][ T1228] ? switch_fpu_return+0x15f/0x2e0 [ 2023.140605][ T1228] __x64_sys_bpf+0x7c/0x90 [ 2023.144856][ T1228] x64_sys_call+0x87f/0x9a0 [ 2023.149196][ T1228] do_syscall_64+0x3b/0xb0 [ 2023.153441][ T1228] ? clear_bhb_loop+0x35/0x90 [ 2023.157967][ T1228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2023.163685][ T1228] RIP: 0033:0x7fbb76889d19 [ 2023.167940][ T1228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2023.187383][ T1228] RSP: 002b:00007fbb74eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2023.195625][ T1228] RAX: ffffffffffffffda RBX: 00007fbb76a7a160 RCX: 00007fbb76889d19 [ 2023.203435][ T1228] RDX: 0000000000000090 RSI: 0000000020000940 RDI: 0000000000000005 [ 2023.211248][ T1228] RBP: 00007fbb74eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 2023.219058][ T1228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2023.226868][ T1228] R13: 0000000000000000 R14: 00007fbb76a7a160 R15: 00007fffb285c818 [ 2023.234689][ T1228] [ 2023.237735][T22159] usb 6-1: Using ep0 maxpacket: 16 [ 2023.243583][T24341] usb 2-1: USB disconnect, device number 109 [ 2023.375998][T22159] usb 6-1: config 0 interface 0 altsetting 199 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2023.387020][T22159] usb 6-1: config 0 interface 0 altsetting 199 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2023.396751][T22159] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2023.403185][T22159] usb 6-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 2023.412109][T22159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.420642][T22159] usb 6-1: config 0 descriptor?? [ 2023.536854][T23018] cp2112 0003:10C4:EA90.0059: unknown main item tag 0x0 [ 2023.544238][T23018] cp2112 0003:10C4:EA90.0059: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 2023.876061][T23018] cp2112 0003:10C4:EA90.0059: Part Number: 0x6A Device Version: 0xAF [ 2024.077465][T22159] wacom 0003:056A:030E.005A: unknown main item tag 0x0 [ 2024.084291][T22159] wacom 0003:056A:030E.005A: Unknown device_type for 'HID 056a:030e'. Assuming pen. [ 2024.085997][T23018] cp2112 0003:10C4:EA90.0059: error requesting SMBus config [ 2024.101044][T22159] wacom 0003:056A:030E.005A: hidraw1: USB HID v0.00 Device [HID 056a:030e] on usb-dummy_hcd.5-1/input0 [ 2024.101789][T23018] cp2112: probe of 0003:10C4:EA90.0059 failed with error -71 [ 2024.112846][T22159] input: Wacom Intuos S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:030E.005A/input/input323 [ 2024.121238][T23018] usb 1-1: USB disconnect, device number 98 [ 2024.146022][T12232] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2024.546056][T12232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2024.559005][T12232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.564310][ T655] usb 6-1: USB disconnect, device number 58 [ 2024.569941][T12232] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2024.583650][T12232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.595485][T12232] usb 2-1: config 0 descriptor?? [ 2024.617275][ T30] audit: type=1326 audit(2000001099.141:22865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.640988][ T30] audit: type=1326 audit(2000001099.141:22866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.664540][ T30] audit: type=1326 audit(2000001099.161:22867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.688388][ T30] audit: type=1326 audit(2000001099.161:22868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.711884][ T30] audit: type=1326 audit(2000001099.161:22869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.735385][ T30] audit: type=1326 audit(2000001099.161:22870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.759724][ T30] audit: type=1326 audit(2000001099.211:22871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.783136][ T30] audit: type=1326 audit(2000001099.211:22872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1247 comm="syz.3.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2024.868238][ T1254] input: syz0 as /devices/virtual/input/input326 [ 2025.186811][T12232] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 2025.993941][T12232] cp2112 0003:10C4:EA90.005B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2026.724603][ T1276] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2026.733763][ T1276] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2027.388076][T12232] cp2112 0003:10C4:EA90.005B: error requesting version [ 2027.398846][T12232] cp2112: probe of 0003:10C4:EA90.005B failed with error -71 [ 2027.428005][T12232] usb 2-1: USB disconnect, device number 110 [ 2027.765392][ T1288] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 2027.783526][ T1288] 9pnet: Insufficient options for proto=fd [ 2027.802024][ T1287] FAULT_INJECTION: forcing a failure. [ 2027.802024][ T1287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2027.832285][ T1287] CPU: 1 PID: 1287 Comm: syz.1.9989 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2027.842011][ T1287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2027.851909][ T1287] Call Trace: [ 2027.855031][ T1287] [ 2027.857810][ T1287] dump_stack_lvl+0x151/0x1c0 [ 2027.862324][ T1287] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2027.867792][ T1287] dump_stack+0x15/0x20 [ 2027.871785][ T1287] should_fail+0x3c6/0x510 [ 2027.876037][ T1287] should_fail_alloc_page+0x5a/0x80 [ 2027.881066][ T1287] prepare_alloc_pages+0x15c/0x700 [ 2027.886020][ T1287] ? __alloc_pages_bulk+0xe40/0xe40 [ 2027.891048][ T1287] ? __kernel_text_address+0x9b/0x110 [ 2027.896263][ T1287] __alloc_pages+0x18c/0x8f0 [ 2027.900694][ T1287] ? prep_new_page+0x110/0x110 [ 2027.905290][ T1287] ? stack_trace_snprint+0xf0/0xf0 [ 2027.910233][ T1287] handle_pte_fault+0xe7e/0x25c0 [ 2027.915005][ T1287] ? kasan_save_stack+0x3b/0x60 [ 2027.919701][ T1287] ? fault_around_bytes_set+0xc0/0xc0 [ 2027.924897][ T1287] ? ____fput+0x15/0x20 [ 2027.928894][ T1287] ? task_work_run+0x129/0x190 [ 2027.933496][ T1287] ? exit_to_user_mode_loop+0xc4/0xe0 [ 2027.938697][ T1287] ? do_handle_mm_fault+0x159f/0x2400 [ 2027.943904][ T1287] ? memcpy+0x56/0x70 [ 2027.947726][ T1287] do_handle_mm_fault+0x20bc/0x2400 [ 2027.952766][ T1287] ? numa_migrate_prep+0xe0/0xe0 [ 2027.957535][ T1287] ? call_rcu+0xc4b/0x10b0 [ 2027.961788][ T1287] ? __fget_files+0x31e/0x380 [ 2027.966302][ T1287] ? exc_page_fault+0x222/0x7f0 [ 2027.970985][ T1287] ? access_error+0x246/0x270 [ 2027.975499][ T1287] exc_page_fault+0x26f/0x7f0 [ 2027.980018][ T1287] asm_exc_page_fault+0x27/0x30 [ 2027.984696][ T1287] RIP: 0033:0x7f0d22b3c35b [ 2027.988953][ T1287] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 2028.005942][ T655] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 2028.008391][ T1287] RSP: 002b:00007f0d211fde10 EFLAGS: 00010246 [ 2028.021759][ T1287] RAX: 00007f0d211fff30 RBX: 00007f0d22d54620 RCX: 0000000000000000 [ 2028.029742][ T1287] RDX: 00007f0d211fff78 RSI: 00007f0d22beebd8 RDI: 00007f0d211fde30 [ 2028.037558][ T1287] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 2028.045398][ T1287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2028.053177][ T1287] R13: 0000000000000000 R14: 00007f0d22d7efa0 R15: 00007ffe4fb288e8 [ 2028.060996][ T1287] [ 2028.161368][ T1287] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2028.187716][ T1294] input: syz0 as /devices/virtual/input/input327 [ 2028.229547][ T1296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2028.237131][ T1297] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 2028.252972][ T1297] 9pnet: Insufficient options for proto=fd [ 2028.965006][ T655] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2029.122264][T23018] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2029.205267][ T655] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2029.255971][ T655] usb 3-1: string descriptor 0 read error: -71 [ 2029.262458][ T655] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2029.315971][ T655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.527662][ T655] usb 3-1: can't set config #1, error -71 [ 2029.536949][ T655] usb 3-1: USB disconnect, device number 107 [ 2029.700722][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2029.700738][ T30] audit: type=1400 audit(2000001104.221:22884): avc: denied { bind } for pid=1329 comm="syz.3.10002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2029.726338][T23018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2029.747913][T23018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.767858][T23018] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2029.785963][ T30] audit: type=1400 audit(2000001104.261:22885): avc: denied { read write } for pid=1329 comm="syz.3.10002" name="rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2029.809939][T23018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.833321][T23018] usb 6-1: config 0 descriptor?? [ 2029.839142][T24341] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2029.878149][ T1333] input: syz0 as /devices/virtual/input/input328 [ 2029.884588][ T30] audit: type=1400 audit(2000001104.261:22886): avc: denied { open } for pid=1329 comm="syz.3.10002" path="/dev/rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2029.918426][ T30] audit: type=1400 audit(2000001104.271:22887): avc: denied { ioctl } for pid=1329 comm="syz.3.10002" path="/dev/rtc0" dev="devtmpfs" ino=255 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2029.965977][ T30] audit: type=1326 audit(2000001104.281:22888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.1.9997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2029.990826][ T30] audit: type=1326 audit(2000001104.281:22889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.1.9997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2030.022288][ T30] audit: type=1326 audit(2000001104.281:22890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.1.9997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2030.065971][ T30] audit: type=1326 audit(2000001104.281:22891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.1.9997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2030.089696][ T30] audit: type=1326 audit(2000001104.281:22892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.1.9997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2030.114449][ T30] audit: type=1326 audit(2000001104.281:22893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.1.9997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2030.276175][T24341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.363223][T24341] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2030.376445][T24341] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2030.386451][T24341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.399560][T24341] usb 1-1: config 0 descriptor?? [ 2030.489576][ T1343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10005'. [ 2030.885981][T23018] usbhid 6-1:0.0: can't add hid device: -71 [ 2030.895692][T23018] usbhid: probe of 6-1:0.0 failed with error -71 [ 2030.903711][T23018] usb 6-1: USB disconnect, device number 59 [ 2030.961286][T24341] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 2030.969173][T24341] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 2030.977932][T24341] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 2030.985595][T24341] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 2030.993672][T24341] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 2031.033353][T24341] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 2031.043484][T24341] plantronics 0003:047F:FFFF.005C: No inputs registered, leaving [ 2031.068862][T24341] plantronics 0003:047F:FFFF.005C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2031.306825][ T1351] FAULT_INJECTION: forcing a failure. [ 2031.306825][ T1351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2031.318309][T24341] usb 1-1: USB disconnect, device number 99 [ 2031.325614][ T1351] CPU: 0 PID: 1351 Comm: syz.2.10008 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2031.335417][ T1351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2031.345310][ T1351] Call Trace: [ 2031.348432][ T1351] [ 2031.351208][ T1351] dump_stack_lvl+0x151/0x1c0 [ 2031.355726][ T1351] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2031.361192][ T1351] ? __kasan_slab_free+0x11/0x20 [ 2031.365964][ T1351] ? do_sys_openat2+0x1fc/0x820 [ 2031.370651][ T1351] ? x64_sys_call+0x6bf/0x9a0 [ 2031.375166][ T1351] dump_stack+0x15/0x20 [ 2031.379159][ T1351] should_fail+0x3c6/0x510 [ 2031.383411][ T1351] should_fail_usercopy+0x1a/0x20 [ 2031.388272][ T1351] _copy_from_user+0x20/0xd0 [ 2031.392697][ T1351] eventfd_write+0x1ea/0x910 [ 2031.397140][ T1351] ? __ia32_sys_eventfd+0x40/0x40 [ 2031.401988][ T1351] ? sched_dynamic_update+0x240/0x240 [ 2031.407276][ T1351] ? fsnotify_perm+0x6a/0x5b0 [ 2031.411905][ T1351] ? security_file_permission+0x86/0xb0 [ 2031.417288][ T1351] ? __ia32_sys_eventfd+0x40/0x40 [ 2031.422145][ T1351] vfs_write+0x406/0x1110 [ 2031.426318][ T1351] ? putname+0xfa/0x150 [ 2031.430326][ T1351] ? file_end_write+0x1c0/0x1c0 [ 2031.434998][ T1351] ? __fget_files+0x31e/0x380 [ 2031.439511][ T1351] ? __fdget_pos+0x209/0x3a0 [ 2031.443934][ T1351] ? ksys_write+0x77/0x2c0 [ 2031.448186][ T1351] ksys_write+0x199/0x2c0 [ 2031.452500][ T1351] ? __ia32_sys_read+0x90/0x90 [ 2031.457100][ T1351] ? debug_smp_processor_id+0x17/0x20 [ 2031.462306][ T1351] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2031.468208][ T1351] __x64_sys_write+0x7b/0x90 [ 2031.472637][ T1351] x64_sys_call+0x2f/0x9a0 [ 2031.476889][ T1351] do_syscall_64+0x3b/0xb0 [ 2031.481156][ T1351] ? clear_bhb_loop+0x35/0x90 [ 2031.485653][ T1351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2031.491379][ T1351] RIP: 0033:0x7fbb76889d19 [ 2031.495636][ T1351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2031.515071][ T1351] RSP: 002b:00007fbb74efb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2031.523318][ T1351] RAX: ffffffffffffffda RBX: 00007fbb76a79fa0 RCX: 00007fbb76889d19 [ 2031.531126][ T1351] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000006 [ 2031.538965][ T1351] RBP: 00007fbb74efb090 R08: 0000000000000000 R09: 0000000000000000 [ 2031.546747][ T1351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2031.554579][ T1351] R13: 0000000000000000 R14: 00007fbb76a79fa0 R15: 00007fffb285c818 [ 2031.562378][ T1351] [ 2031.662379][T12232] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2033.305315][ T1375] FAULT_INJECTION: forcing a failure. [ 2033.305315][ T1375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2033.337543][ T1375] CPU: 1 PID: 1375 Comm: syz.0.10014 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2033.347359][ T1375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2033.357250][ T1375] Call Trace: [ 2033.360371][ T1375] [ 2033.363148][ T1375] dump_stack_lvl+0x151/0x1c0 [ 2033.367661][ T1375] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2033.373129][ T1375] ? __seccomp_filter+0x4f6/0x1c60 [ 2033.378079][ T1375] dump_stack+0x15/0x20 [ 2033.382069][ T1375] should_fail+0x3c6/0x510 [ 2033.386325][ T1375] should_fail_usercopy+0x1a/0x20 [ 2033.391183][ T1375] _copy_from_user+0x20/0xd0 [ 2033.395611][ T1375] __sys_bpf+0x1e9/0x760 [ 2033.399690][ T1375] ? fput_many+0x160/0x1b0 [ 2033.403943][ T1375] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 2033.409152][ T1375] ? __secure_computing+0xf0/0x300 [ 2033.414098][ T1375] __x64_sys_bpf+0x7c/0x90 [ 2033.418354][ T1375] x64_sys_call+0x87f/0x9a0 [ 2033.422688][ T1375] do_syscall_64+0x3b/0xb0 [ 2033.426939][ T1375] ? clear_bhb_loop+0x35/0x90 [ 2033.431454][ T1375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2033.437186][ T1375] RIP: 0033:0x7f0d2b171d19 [ 2033.441440][ T1375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2033.461027][ T1375] RSP: 002b:00007f0d297c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2033.469275][ T1375] RAX: ffffffffffffffda RBX: 00007f0d2b362080 RCX: 00007f0d2b171d19 [ 2033.477083][ T1375] RDX: 0000000000000048 RSI: 0000000020001000 RDI: e4ffffff00000000 [ 2033.484894][ T1375] RBP: 00007f0d297c2090 R08: 0000000000000000 R09: 0000000000000000 [ 2033.492706][ T1375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2033.500520][ T1375] R13: 0000000000000000 R14: 00007f0d2b362080 R15: 00007fff5d4420d8 [ 2033.508344][ T1375] [ 2033.511620][T12232] usb 3-1: device descriptor read/64, error -71 [ 2033.526751][ T1377] input: syz0 as /devices/virtual/input/input329 [ 2033.550745][ T1379] syz.5.10016[1379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2033.925922][T12232] usb 3-1: device descriptor read/64, error -71 [ 2034.225963][T12232] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2034.625940][T22318] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2034.705927][T23018] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2034.825954][T24341] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 2035.046076][T22318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2035.056818][T22318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.066349][T22318] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2035.075203][T22318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.084005][T22318] usb 1-1: config 0 descriptor?? [ 2035.136004][T23018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2035.147651][T23018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.157225][T23018] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2035.169813][T23018] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 2035.178630][T23018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.186109][T24341] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2035.199308][T24341] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2035.200089][T23018] usb 4-1: config 0 descriptor?? [ 2035.366016][T24341] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2035.374932][T24341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.382719][T24341] usb 2-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2035.452674][T24341] usb 2-1: Manufacturer: К [ 2035.458815][T24341] usb 2-1: SerialNumber: syz [ 2035.585999][T23018] usbhid 4-1:0.0: can't add hid device: -71 [ 2035.591772][T23018] usbhid: probe of 4-1:0.0 failed with error -71 [ 2035.599507][T23018] usb 4-1: USB disconnect, device number 80 [ 2035.706967][ T1401] UDC core: couldn't find an available UDC or it's busy: -16 [ 2035.715972][ T1401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2035.737301][ T1401] fuse: Bad value for 'fd' [ 2035.815961][T22318] usbhid 1-1:0.0: can't add hid device: -71 [ 2035.821741][T22318] usbhid: probe of 1-1:0.0 failed with error -71 [ 2035.828674][T22318] usb 1-1: USB disconnect, device number 100 [ 2035.945973][T24341] usbhid 2-1:1.0: can't add hid device: -71 [ 2035.951763][T24341] usbhid: probe of 2-1:1.0 failed with error -71 [ 2035.957898][T12232] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 2035.966319][T24341] usb 2-1: USB disconnect, device number 111 [ 2036.007049][ T1416] input: syz0 as /devices/virtual/input/input330 [ 2036.316026][T12232] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2036.375849][T12232] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2036.754289][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 2036.754306][ T30] audit: type=1326 audit(2000001111.271:22960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2036.797506][ T30] audit: type=1326 audit(2000001111.301:22961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2036.821127][ T30] audit: type=1326 audit(2000001111.301:22962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2036.844793][T12232] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2036.853793][ T30] audit: type=1326 audit(2000001111.301:22963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2036.891603][T12232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.917830][T12232] usb 3-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2036.977027][ T30] audit: type=1326 audit(2000001111.301:22964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2037.046034][T12232] usb 3-1: Manufacturer: К [ 2037.056155][ T30] audit: type=1326 audit(2000001111.301:22965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2037.084705][T12232] usb 3-1: SerialNumber: syz [ 2037.272606][ T30] audit: type=1326 audit(2000001111.301:22966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2037.535951][ T30] audit: type=1326 audit(2000001111.301:22967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2037.605947][ T30] audit: type=1326 audit(2000001111.301:22968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2037.679970][ T30] audit: type=1326 audit(2000001111.301:22969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.1.10029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d22b8ed19 code=0x7ffc0000 [ 2037.704922][ T1410] UDC core: couldn't find an available UDC or it's busy: -16 [ 2037.722331][ T1410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2037.744084][ T1410] fuse: Bad value for 'fd' [ 2038.056164][T12232] usbhid 3-1:1.0: can't add hid device: -71 [ 2038.062123][T12232] usbhid: probe of 3-1:1.0 failed with error -71 [ 2038.107113][ T1447] overlayfs: overlapping lowerdir path [ 2038.158640][T12232] usb 3-1: USB disconnect, device number 110 [ 2039.685950][T24341] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 2039.805951][T23018] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2040.096829][T24341] usb 6-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2040.128605][T24341] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2040.336199][T24341] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2040.345260][T24341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.354590][T24341] usb 6-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2040.391871][T24341] usb 6-1: Manufacturer: К [ 2040.396930][T24341] usb 6-1: SerialNumber: syz [ 2040.428917][T23018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.613741][T23018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.623408][T23018] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2040.632293][T23018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.711152][ T1460] UDC core: couldn't find an available UDC or it's busy: -16 [ 2040.719902][T23018] usb 2-1: config 0 descriptor?? [ 2040.721530][ T1460] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2040.756862][ T1460] fuse: Bad value for 'fd' [ 2040.978476][T24341] usbhid 6-1:1.0: can't add hid device: -71 [ 2041.005802][T24341] usbhid: probe of 6-1:1.0 failed with error -71 [ 2041.035107][T24341] usb 6-1: USB disconnect, device number 60 [ 2041.403205][T23018] usbhid 2-1:0.0: can't add hid device: -71 [ 2041.425454][T23018] usbhid: probe of 2-1:0.0 failed with error -71 [ 2041.555292][T23018] usb 2-1: USB disconnect, device number 112 [ 2041.935941][T22159] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2042.175927][T22159] usb 6-1: Using ep0 maxpacket: 16 [ 2042.295987][T22159] usb 6-1: config 0 has no interfaces? [ 2042.476174][T22159] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 2042.485401][T22159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2042.496223][T22159] usb 6-1: Product: syz [ 2042.500337][T22159] usb 6-1: Manufacturer: syz [ 2042.552340][T22159] usb 6-1: SerialNumber: syz [ 2042.585200][T22159] r8152-cfgselector 6-1: config 0 descriptor?? [ 2042.814925][ T1514] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2042.956126][T22159] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2043.165691][T23018] r8152-cfgselector 6-1: USB disconnect, device number 61 [ 2043.295924][T22159] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2043.425920][ T655] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2043.877994][ T1533] FAULT_INJECTION: forcing a failure. [ 2043.877994][ T1533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2043.891036][ T1533] CPU: 0 PID: 1533 Comm: syz.0.10057 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2043.900842][ T1533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2043.910738][ T1533] Call Trace: [ 2043.913859][ T1533] [ 2043.916640][ T1533] dump_stack_lvl+0x151/0x1c0 [ 2043.921152][ T1533] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2043.926624][ T1533] dump_stack+0x15/0x20 [ 2043.930610][ T1533] should_fail+0x3c6/0x510 [ 2043.934863][ T1533] should_fail_usercopy+0x1a/0x20 [ 2043.939723][ T1533] strncpy_from_user+0x24/0x2d0 [ 2043.944410][ T1533] ? kmem_cache_alloc+0xf5/0x200 [ 2043.949189][ T1533] getname_flags+0xf2/0x520 [ 2043.953527][ T1533] getname+0x19/0x20 [ 2043.957254][ T1533] do_sys_openat2+0xd7/0x820 [ 2043.961681][ T1533] ? do_sys_open+0x220/0x220 [ 2043.966111][ T1533] ? __schedule+0xcd4/0x1590 [ 2043.970537][ T1533] ? release_firmware_map_entry+0x190/0x190 [ 2043.976267][ T1533] ? ksys_write+0x260/0x2c0 [ 2043.980603][ T1533] __x64_sys_openat+0x243/0x290 [ 2043.985288][ T1533] ? __ia32_sys_open+0x270/0x270 [ 2043.990065][ T1533] ? switch_fpu_return+0x15f/0x2e0 [ 2043.995011][ T1533] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 2044.000479][ T1533] x64_sys_call+0x6bf/0x9a0 [ 2044.004815][ T1533] do_syscall_64+0x3b/0xb0 [ 2044.009073][ T1533] ? clear_bhb_loop+0x35/0x90 [ 2044.013584][ T1533] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2044.019310][ T1533] RIP: 0033:0x7f0d2b171d19 [ 2044.023564][ T1533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2044.043009][ T1533] RSP: 002b:00007f0d297a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2044.051252][ T1533] RAX: ffffffffffffffda RBX: 00007f0d2b362160 RCX: 00007f0d2b171d19 [ 2044.059062][ T1533] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 2044.066873][ T1533] RBP: 00007f0d297a1090 R08: 0000000000000000 R09: 0000000000000000 [ 2044.074687][ T1533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2044.082500][ T1533] R13: 0000000000000000 R14: 00007f0d2b362160 R15: 00007fff5d4420d8 [ 2044.090314][ T1533] [ 2044.421340][T22159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2044.826298][ T655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2044.849833][ T1542] input: syz0 as /devices/virtual/input/input331 [ 2044.856118][ T655] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2044.875962][ T655] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2044.895027][ T655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.916591][ T655] usb 2-1: config 0 descriptor?? [ 2045.193045][T22159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.202775][T22159] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2045.211707][T22159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.226361][T22159] usb 3-1: config 0 descriptor?? [ 2045.240367][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2045.240381][ T30] audit: type=1400 audit(2000001119.761:22996): avc: denied { name_bind } for pid=1547 comm="syz.5.10062" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2045.286002][ T655] usbhid 2-1:0.0: can't add hid device: -71 [ 2045.291763][ T655] usbhid: probe of 2-1:0.0 failed with error -71 [ 2045.322329][ T655] usb 2-1: USB disconnect, device number 113 [ 2045.806307][T22159] hid (null): bogus close delimiter [ 2048.153927][ T1570] input: syz0 as /devices/virtual/input/input332 [ 2049.629062][T22159] usb 3-1: string descriptor 0 read error: -71 [ 2050.809006][T22159] uclogic 0003:256C:006D.005D: failed retrieving string descriptor #200: -71 [ 2051.162708][ T1599] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2051.171763][ T1599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2051.649422][ T30] audit: type=1400 audit(2000001126.171:22997): avc: denied { write } for pid=1602 comm="syz.2.10077" name="dev_mcast" dev="proc" ino=4026532451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2052.033557][ T1616] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2052.136019][T22159] uclogic 0003:256C:006D.005D: failed retrieving pen parameters: -71 [ 2052.188701][T22159] uclogic 0003:256C:006D.005D: failed probing pen v2 parameters: -71 [ 2052.196924][T22159] uclogic 0003:256C:006D.005D: failed probing parameters: -71 [ 2052.215919][T22159] uclogic: probe of 0003:256C:006D.005D failed with error -71 [ 2052.236251][T22159] usb 3-1: USB disconnect, device number 111 [ 2052.251095][ T1608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10078'. [ 2052.596310][ T1625] FAULT_INJECTION: forcing a failure. [ 2052.596310][ T1625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2052.609441][ T1625] CPU: 0 PID: 1625 Comm: syz.2.10082 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2052.619232][ T1625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2052.629127][ T1625] Call Trace: [ 2052.632252][ T1625] [ 2052.635032][ T1625] dump_stack_lvl+0x151/0x1c0 [ 2052.639544][ T1625] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2052.645028][ T1625] ? enqueue_hrtimer+0xca/0x240 [ 2052.649700][ T1625] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 2052.655349][ T1625] dump_stack+0x15/0x20 [ 2052.659330][ T1625] should_fail+0x3c6/0x510 [ 2052.663582][ T1625] should_fail_usercopy+0x1a/0x20 [ 2052.668448][ T1625] copy_fpstate_to_sigframe+0x708/0x9a0 [ 2052.673826][ T1625] ? fpregs_set+0x6f0/0x6f0 [ 2052.678166][ T1625] ? __kasan_check_write+0x14/0x20 [ 2052.683120][ T1625] ? recalc_sigpending+0x1a5/0x230 [ 2052.688055][ T1625] ? dequeue_signal+0x205/0x520 [ 2052.692745][ T1625] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2052.697690][ T1625] ? unhandled_signal+0x150/0x150 [ 2052.702552][ T1625] ? fpu__alloc_mathframe+0x89/0x150 [ 2052.707671][ T1625] get_sigframe+0x378/0x4b0 [ 2052.712010][ T1625] ? memcpy+0x56/0x70 [ 2052.715831][ T1625] ? restore_sigcontext+0x710/0x710 [ 2052.720864][ T1625] arch_do_signal_or_restart+0x2ad/0x1680 [ 2052.726420][ T1625] ? do_readv+0x3b7/0x460 [ 2052.730588][ T1625] ? do_iter_readv_writev+0x790/0x790 [ 2052.735796][ T1625] ? get_sigframe_size+0x10/0x10 [ 2052.740569][ T1625] exit_to_user_mode_loop+0xa0/0xe0 [ 2052.745601][ T1625] exit_to_user_mode_prepare+0x5a/0xa0 [ 2052.750892][ T1625] syscall_exit_to_user_mode+0x26/0x160 [ 2052.756287][ T1625] do_syscall_64+0x47/0xb0 [ 2052.760526][ T1625] ? clear_bhb_loop+0x35/0x90 [ 2052.765039][ T1625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2052.770769][ T1625] RIP: 0033:0x7fbb76889d17 [ 2052.775029][ T1625] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 2052.794466][ T1625] RSP: 002b:00007fbb74efb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2052.802708][ T1625] RAX: 0000000000000013 RBX: 00007fbb76a79fa0 RCX: 00007fbb76889d19 [ 2052.810520][ T1625] RDX: 0000000000000001 RSI: 0000000020002140 RDI: 0000000000000004 [ 2052.818330][ T1625] RBP: 00007fbb74efb090 R08: 0000000000000000 R09: 0000000000000000 [ 2052.826144][ T1625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2052.833958][ T1625] R13: 0000000000000000 R14: 00007fbb76a79fa0 R15: 00007fffb285c818 [ 2052.841771][ T1625] [ 2052.844858][T23018] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2052.861672][ T30] audit: type=1400 audit(2000001127.381:22998): avc: denied { create } for pid=1626 comm="syz.0.10083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2052.862184][ T1627] netlink: 272 bytes leftover after parsing attributes in process `syz.0.10083'. [ 2052.896170][ T30] audit: type=1400 audit(2000001127.381:22999): avc: denied { write } for pid=1626 comm="syz.0.10083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2052.918309][ T30] audit: type=1400 audit(2000001127.381:23000): avc: denied { nlmsg_read } for pid=1626 comm="syz.0.10083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2052.939909][ T30] audit: type=1400 audit(2000001127.411:23001): avc: denied { read } for pid=1626 comm="syz.0.10083" path="socket:[167938]" dev="sockfs" ino=167938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2052.964079][ T30] audit: type=1400 audit(2000001127.421:23002): avc: denied { setattr } for pid=1626 comm="syz.0.10083" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2054.294970][ T30] audit: type=1326 audit(2000001128.811:23003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.2.10086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2054.296044][T23018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.318610][ T30] audit: type=1326 audit(2000001128.811:23004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.2.10086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2054.329625][T23018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2054.352777][ T30] audit: type=1326 audit(2000001128.851:23005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.2.10086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2054.362562][T23018] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2054.385962][ T30] audit: type=1326 audit(2000001128.851:23006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.2.10086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2054.596097][ T8783] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2054.661197][T23018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.669908][T23018] usb 4-1: config 0 descriptor?? [ 2055.051183][ T8783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2055.061909][ T8783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2055.071830][ T8783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2055.133098][ T8783] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 2055.142016][ T8783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.164653][T23018] hid (null): bogus close delimiter [ 2055.171766][ T1657] device batadv_slave_1 entered promiscuous mode [ 2055.174009][ T8783] usb 1-1: config 0 descriptor?? [ 2055.189062][ T1657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10093'. [ 2055.198687][ T1656] device batadv_slave_1 left promiscuous mode [ 2055.879499][ T8783] usbhid 1-1:0.0: can't add hid device: -71 [ 2055.885872][ T8783] usbhid: probe of 1-1:0.0 failed with error -71 [ 2055.922110][ T8783] usb 1-1: USB disconnect, device number 101 [ 2056.255993][T23018] usb 4-1: string descriptor 0 read error: -71 [ 2056.297640][T23018] uclogic 0003:256C:006D.005E: failed retrieving string descriptor #200: -71 [ 2056.306325][T23018] uclogic 0003:256C:006D.005E: failed retrieving pen parameters: -71 [ 2056.314165][T23018] uclogic 0003:256C:006D.005E: failed probing pen v2 parameters: -71 [ 2056.322090][T23018] uclogic 0003:256C:006D.005E: failed probing parameters: -71 [ 2056.329376][T23018] uclogic: probe of 0003:256C:006D.005E failed with error -71 [ 2056.340636][T23018] usb 4-1: USB disconnect, device number 81 [ 2056.745995][ T655] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2056.965998][T22318] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2057.338259][ T655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.349621][ T655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2057.359799][ T655] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2057.368737][ T655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.382146][ T655] usb 3-1: config 0 descriptor?? [ 2058.167419][ T1694] device syzkaller0 entered promiscuous mode [ 2058.187313][T22318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.199557][T22318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2058.209248][T22318] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2058.219072][T22318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.227785][T22318] usb 6-1: config 0 descriptor?? [ 2058.251966][ T1697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2058.417958][ T1703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10107'. [ 2058.441038][ T1705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10108'. [ 2058.576776][ T655] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 2058.832776][T22318] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 2058.840296][ T655] cp2112 0003:10C4:EA90.005F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2058.851758][T22318] cp2112 0003:10C4:EA90.0060: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2058.956058][ T655] cp2112 0003:10C4:EA90.005F: Part Number: 0x82 Device Version: 0xFE [ 2059.045997][T22318] cp2112 0003:10C4:EA90.0060: Part Number: 0x82 Device Version: 0xFE [ 2059.649945][ T655] cp2112 0003:10C4:EA90.005F: error reading lock byte: -71 [ 2059.658997][ T655] usb 3-1: USB disconnect, device number 112 [ 2059.736002][T22318] cp2112 0003:10C4:EA90.0060: error reading lock byte: -71 [ 2059.744601][T22318] usb 6-1: USB disconnect, device number 62 [ 2060.163942][ T1717] input: syz0 as /devices/virtual/input/input333 [ 2061.315484][ T1732] device syzkaller0 entered promiscuous mode [ 2061.335473][ T1736] device syzkaller0 entered promiscuous mode [ 2061.465037][ T1745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10121'. [ 2061.474507][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2061.474521][ T30] audit: type=1400 audit(2000001135.991:23029): avc: denied { write } for pid=1741 comm="syz.5.10122" path="socket:[168174]" dev="sockfs" ino=168174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2061.517151][ T30] audit: type=1326 audit(2000001136.021:23030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.542148][ T30] audit: type=1326 audit(2000001136.021:23031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.566569][ T655] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 2061.575125][ T1747] FAULT_INJECTION: forcing a failure. [ 2061.575125][ T1747] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.588913][ T1747] CPU: 1 PID: 1747 Comm: syz.1.10123 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2061.595955][ T30] audit: type=1326 audit(2000001136.021:23032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.598702][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2061.598715][ T1747] Call Trace: [ 2061.598721][ T1747] [ 2061.598730][ T1747] dump_stack_lvl+0x151/0x1c0 [ 2061.622673][ T30] audit: type=1326 audit(2000001136.021:23033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.632057][ T1747] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2061.632089][ T1747] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 2061.635272][ T30] audit: type=1326 audit(2000001136.021:23034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.637956][ T1747] dump_stack+0x15/0x20 [ 2061.637980][ T1747] should_fail+0x3c6/0x510 [ 2061.642881][ T30] audit: type=1326 audit(2000001136.021:23035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.665822][ T1747] __should_failslab+0xa4/0xe0 [ 2061.665852][ T1747] ? audit_log_start+0x42f/0xa80 [ 2061.665874][ T1747] should_failslab+0x9/0x20 [ 2061.671386][ T30] audit: type=1326 audit(2000001136.021:23036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.676926][ T1747] slab_pre_alloc_hook+0x37/0xd0 [ 2061.676952][ T1747] ? audit_log_start+0x42f/0xa80 [ 2061.700789][T23018] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 2061.704264][ T1747] kmem_cache_alloc+0x44/0x200 [ 2061.710217][ T30] audit: type=1326 audit(2000001136.031:23037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.731784][ T1747] audit_log_start+0x42f/0xa80 [ 2061.731816][ T1747] ? audit_serial+0x30/0x30 [ 2061.731835][ T1747] ? __kasan_check_write+0x14/0x20 [ 2061.731857][ T1747] ? migrate_enable+0x1c1/0x2a0 [ 2061.736865][ T30] audit: type=1326 audit(2000001136.031:23038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.3.10115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2061.741162][ T1747] audit_seccomp+0x61/0x1e0 [ 2061.860249][ T1747] ? migrate_disable+0xd9/0x190 [ 2061.860281][ T1747] __seccomp_filter+0xc08/0x1c60 [ 2061.860303][ T1747] ? file_end_write+0x1c0/0x1c0 [ 2061.860322][ T1747] ? __kasan_check_write+0x14/0x20 [ 2061.879334][ T1747] ? __secure_computing+0x300/0x300 [ 2061.884367][ T1747] ? __mutex_lock_slowpath+0x10/0x10 [ 2061.884396][ T1747] ? __kasan_check_write+0x14/0x20 [ 2061.894613][ T1747] ? fput_many+0x160/0x1b0 [ 2061.894644][ T1747] ? __ia32_sys_read+0x90/0x90 [ 2061.894667][ T1747] __secure_computing+0xf0/0x300 [ 2061.908237][ T1747] syscall_enter_from_user_mode+0xd5/0x1b0 [ 2061.908265][ T1747] do_syscall_64+0x1e/0xb0 [ 2061.918130][ T1747] ? clear_bhb_loop+0x35/0x90 [ 2061.918156][ T1747] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2061.928371][ T1747] RIP: 0033:0x7f0d22b8ed19 [ 2061.928393][ T1747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2061.946053][ T655] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2061.952062][ T1747] RSP: 002b:00007f0d211ffe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 2061.964846][ T1747] RAX: ffffffffffffffda RBX: 000000000000550e RCX: 00007f0d22b8ed19 [ 2061.964860][ T1747] RDX: 00007f0d211ffef0 RSI: 0000000000000000 RDI: 00007f0d22c0b381 [ 2061.964872][ T1747] RBP: 0000000020006b80 R08: 00007f0d211ffbb7 R09: 00007f0d211ffe40 [ 2061.964886][ T1747] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000080 [ 2061.964898][ T1747] R13: 00007f0d211ffef0 R14: 00007f0d211ffeb0 R15: 00000000200004c0 [ 2061.964919][ T1747] [ 2061.976274][ T655] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2062.096637][T23018] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2062.142306][T23018] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2062.175983][ T655] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2062.184955][ T655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.193137][ T655] usb 3-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2062.663650][ T655] usb 3-1: Manufacturer: К [ 2062.668064][ T655] usb 3-1: SerialNumber: syz [ 2062.736099][T23018] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2062.745265][T23018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.753277][T23018] usb 1-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2062.787654][T23018] usb 1-1: Manufacturer: К [ 2062.791988][T23018] usb 1-1: SerialNumber: syz [ 2063.013583][ T1734] UDC core: couldn't find an available UDC or it's busy: -16 [ 2063.061242][ T1734] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2063.139164][ T1740] UDC core: couldn't find an available UDC or it's busy: -16 [ 2063.147108][ T1740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2063.155773][ T1740] fuse: Bad value for 'fd' [ 2063.161020][ T1734] UDC core: couldn't find an available UDC or it's busy: -16 [ 2063.172364][ T1734] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2063.178135][ T1772] device syzkaller0 entered promiscuous mode [ 2063.188553][ T1734] fuse: Bad value for 'fd' [ 2063.596014][T23018] usbhid 1-1:1.0: can't add hid device: -71 [ 2063.601837][T23018] usbhid: probe of 1-1:1.0 failed with error -71 [ 2063.608971][T23018] usb 1-1: USB disconnect, device number 102 [ 2063.635960][ T655] usbhid 3-1:1.0: can't add hid device: -71 [ 2063.644941][ T655] usbhid: probe of 3-1:1.0 failed with error -71 [ 2063.652433][ T655] usb 3-1: USB disconnect, device number 113 [ 2063.755424][ T1786] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2064.737168][T24341] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2066.755950][T24341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.766700][T24341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.776675][T24341] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2066.785520][T24341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.327234][T24341] usb 2-1: config 0 descriptor?? [ 2069.289870][T24341] usb 2-1: can't set config #0, error -71 [ 2069.305097][T24341] usb 2-1: USB disconnect, device number 114 [ 2069.313340][T23018] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2069.859025][T23018] usb 4-1: Using ep0 maxpacket: 16 [ 2070.296709][ T1856] device batadv_slave_1 entered promiscuous mode [ 2070.314783][ T1854] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2070.326648][ T1856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10153'. [ 2070.356139][ T1855] device batadv_slave_1 left promiscuous mode [ 2070.409959][ T1859] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2070.665964][ T655] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2070.746104][ T39] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 2071.796158][ T39] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.816316][ T655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.827345][ T655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.827793][ T39] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.839067][ T655] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2071.905178][ T1888] FAULT_INJECTION: forcing a failure. [ 2071.905178][ T1888] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.917736][ T1888] CPU: 1 PID: 1888 Comm: syz.1.10160 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2071.927531][ T1888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2071.937515][ T1888] Call Trace: [ 2071.940636][ T1888] [ 2071.943415][ T1888] dump_stack_lvl+0x151/0x1c0 [ 2071.947927][ T1888] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2071.953397][ T1888] ? search_nested_keyrings+0x1170/0x1170 [ 2071.958953][ T1888] ? snprintf+0xd6/0x120 [ 2071.963029][ T1888] dump_stack+0x15/0x20 [ 2071.967022][ T1888] should_fail+0x3c6/0x510 [ 2071.971277][ T1888] __should_failslab+0xa4/0xe0 [ 2071.975875][ T1888] ? prepare_creds+0x2f/0x6a0 [ 2071.980391][ T1888] should_failslab+0x9/0x20 [ 2071.984727][ T1888] slab_pre_alloc_hook+0x37/0xd0 [ 2071.989501][ T1888] ? prepare_creds+0x2f/0x6a0 [ 2071.994013][ T1888] kmem_cache_alloc+0x44/0x200 [ 2071.998616][ T1888] prepare_creds+0x2f/0x6a0 [ 2072.002958][ T1888] join_session_keyring+0x1e/0x470 [ 2072.007907][ T1888] lookup_user_key+0x5b5/0x15c0 [ 2072.012597][ T1888] ? lookup_user_key_possessed+0x40/0x40 [ 2072.014564][T23018] usb 4-1: device descriptor read/all, error -71 [ 2072.018054][ T1888] ? search_process_keyrings_rcu+0x280/0x280 [ 2072.018087][ T1888] __se_sys_add_key+0x2f6/0x480 [ 2072.024744][ T655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.030121][ T1888] ? __x64_sys_add_key+0xd0/0xd0 [ 2072.030149][ T1888] __x64_sys_add_key+0xbf/0xd0 [ 2072.036183][ T655] usb 1-1: config 0 descriptor?? [ 2072.042623][ T1888] x64_sys_call+0x680/0x9a0 [ 2072.061105][ T1888] do_syscall_64+0x3b/0xb0 [ 2072.065356][ T1888] ? clear_bhb_loop+0x35/0x90 [ 2072.069874][ T1888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2072.075602][ T1888] RIP: 0033:0x7f0d22b8ed19 [ 2072.079875][ T1888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2072.099294][ T1888] RSP: 002b:00007f0d2102d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2072.107538][ T1888] RAX: ffffffffffffffda RBX: 00007f0d22d7f160 RCX: 00007f0d22b8ed19 [ 2072.115352][ T1888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 2072.123158][ T1888] RBP: 00007f0d2102d090 R08: fffffffffffffffd R09: 0000000000000000 [ 2072.130973][ T1888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2072.138782][ T1888] R13: 0000000000000001 R14: 00007f0d22d7f160 R15: 00007ffe4fb288e8 [ 2072.146610][ T1888] [ 2072.150130][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 2072.150142][ T30] audit: type=1400 audit(2000001146.671:23139): avc: denied { bind } for pid=1879 comm="syz.1.10160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2072.201512][ T1887] input: syz0 as /devices/virtual/input/input334 [ 2072.205108][ T30] audit: type=1400 audit(2000001146.671:23140): avc: denied { connect } for pid=1879 comm="syz.1.10160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2072.226028][ T39] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2072.227419][ T30] audit: type=1400 audit(2000001146.721:23141): avc: denied { listen } for pid=1879 comm="syz.1.10160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2072.236809][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.261044][ T30] audit: type=1400 audit(2000001146.721:23142): avc: denied { accept } for pid=1879 comm="syz.1.10160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2072.263962][ T39] usb 3-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2072.317795][ T39] usb 3-1: Manufacturer: К [ 2072.322179][ T39] usb 3-1: SerialNumber: syz [ 2072.631571][ T1867] UDC core: couldn't find an available UDC or it's busy: -16 [ 2072.671862][ T1867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2072.686226][ T655] hid (null): bogus close delimiter [ 2072.699003][ T1867] fuse: Bad value for 'fd' [ 2072.926492][ T39] usbhid 3-1:1.0: can't add hid device: -71 [ 2072.955107][ T39] usbhid: probe of 3-1:1.0 failed with error -71 [ 2072.967815][ T39] usb 3-1: USB disconnect, device number 114 [ 2073.215964][ T655] usb 1-1: string descriptor 0 read error: -71 [ 2073.236670][ T655] uclogic 0003:256C:006D.0061: failed retrieving string descriptor #200: -71 [ 2073.245318][ T655] uclogic 0003:256C:006D.0061: failed retrieving pen parameters: -71 [ 2073.253240][ T655] uclogic 0003:256C:006D.0061: failed probing pen v2 parameters: -71 [ 2073.261116][ T655] uclogic 0003:256C:006D.0061: failed probing parameters: -71 [ 2073.268386][ T655] uclogic: probe of 0003:256C:006D.0061 failed with error -71 [ 2073.281893][ T655] usb 1-1: USB disconnect, device number 103 [ 2073.615931][T23018] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 2075.883321][ T1933] overlayfs: overlapping lowerdir path [ 2076.048990][ T1936] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2076.058055][ T1936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2076.518154][T23018] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2076.533757][T23018] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2076.661629][ T655] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2076.669339][T23018] usb 4-1: string descriptor 0 read error: -71 [ 2076.675342][T23018] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2076.684503][T23018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.728289][T23018] usb 4-1: can't set config #1, error -71 [ 2076.746722][T23018] usb 4-1: USB disconnect, device number 84 [ 2076.764035][ T30] audit: type=1400 audit(2000001151.281:23143): avc: denied { read } for pid=1947 comm="syz.0.10179" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2077.782339][ T1949] FAULT_INJECTION: forcing a failure. [ 2077.782339][ T1949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.805985][ T30] audit: type=1400 audit(2000001152.321:23144): avc: denied { open } for pid=1947 comm="syz.0.10179" path="/315/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2077.815908][ T1949] CPU: 0 PID: 1949 Comm: syz.0.10179 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2077.839404][ T1949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2077.849304][ T1949] Call Trace: [ 2077.852433][ T1949] [ 2077.855199][ T1949] dump_stack_lvl+0x151/0x1c0 [ 2077.859711][ T1949] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2077.865177][ T1949] dump_stack+0x15/0x20 [ 2077.869167][ T1949] should_fail+0x3c6/0x510 [ 2077.873428][ T1949] should_fail_usercopy+0x1a/0x20 [ 2077.878279][ T1949] _copy_from_user+0x20/0xd0 [ 2077.882714][ T1949] core_sys_select+0x45e/0x6e0 [ 2077.887311][ T1949] ? poll_select_set_timeout+0x160/0x160 [ 2077.892775][ T1949] ? fsnotify_perm+0x6a/0x5b0 [ 2077.897313][ T1949] ? sigprocmask+0x280/0x280 [ 2077.901716][ T1949] ? __mutex_lock_slowpath+0x10/0x10 [ 2077.906840][ T1949] __se_sys_pselect6+0x322/0x3f0 [ 2077.911610][ T1949] ? ksys_write+0x260/0x2c0 [ 2077.915951][ T1949] ? __x64_sys_pselect6+0x100/0x100 [ 2077.920982][ T1949] ? __ia32_sys_read+0x90/0x90 [ 2077.925585][ T1949] ? debug_smp_processor_id+0x17/0x20 [ 2077.930791][ T1949] __x64_sys_pselect6+0xe5/0x100 [ 2077.935580][ T1949] x64_sys_call+0x71a/0x9a0 [ 2077.939904][ T1949] do_syscall_64+0x3b/0xb0 [ 2077.944155][ T1949] ? clear_bhb_loop+0x35/0x90 [ 2077.948671][ T1949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2077.954399][ T1949] RIP: 0033:0x7f0d2b171d19 [ 2077.958656][ T1949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2077.978089][ T1949] RSP: 002b:00007f0d297c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2077.986340][ T1949] RAX: ffffffffffffffda RBX: 00007f0d2b362080 RCX: 00007f0d2b171d19 [ 2077.994148][ T1949] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 2078.001963][ T1949] RBP: 00007f0d297c2090 R08: 0000000000000000 R09: 0000000000000000 [ 2078.009770][ T1949] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2078.017585][ T1949] R13: 0000000000000000 R14: 00007f0d2b362080 R15: 00007fff5d4420d8 [ 2078.025493][ T1949] [ 2078.094417][ T30] audit: type=1400 audit(2000001152.611:23145): avc: denied { getopt } for pid=1957 comm="syz.5.10181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2078.117835][ T1956] FAULT_INJECTION: forcing a failure. [ 2078.117835][ T1956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2078.145917][ T1956] CPU: 1 PID: 1956 Comm: syz.3.10180 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2078.155729][ T1956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2078.165628][ T1956] Call Trace: [ 2078.168748][ T1956] [ 2078.171528][ T1956] dump_stack_lvl+0x151/0x1c0 [ 2078.176040][ T1956] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2078.181505][ T1956] ? vfs_write+0xd5d/0x1110 [ 2078.185846][ T1956] ? do_syscall_64+0x3b/0xb0 [ 2078.190274][ T1956] dump_stack+0x15/0x20 [ 2078.194268][ T1956] should_fail+0x3c6/0x510 [ 2078.198521][ T1956] should_fail_usercopy+0x1a/0x20 [ 2078.203378][ T1956] _copy_from_iter+0x22f/0xdc0 [ 2078.207985][ T1956] ? copy_mc_pipe_to_iter+0x760/0x760 [ 2078.213195][ T1956] ? __check_object_size+0x2ec/0x3d0 [ 2078.218305][ T1956] file_tty_write+0x54a/0x920 [ 2078.222818][ T1956] ? n_tty_read+0x1da0/0x1da0 [ 2078.227335][ T1956] tty_write+0x3f/0x50 [ 2078.231237][ T1956] vfs_write+0xd5d/0x1110 [ 2078.235432][ T1956] ? putname+0xfa/0x150 [ 2078.239399][ T1956] ? file_end_write+0x1c0/0x1c0 [ 2078.244091][ T1956] ? __fdget_pos+0x209/0x3a0 [ 2078.248508][ T1956] ? ksys_write+0x77/0x2c0 [ 2078.252762][ T1956] ksys_write+0x199/0x2c0 [ 2078.256933][ T1956] ? __ia32_sys_read+0x90/0x90 [ 2078.261532][ T1956] ? debug_smp_processor_id+0x17/0x20 [ 2078.266735][ T1956] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2078.272642][ T1956] __x64_sys_write+0x7b/0x90 [ 2078.277064][ T1956] x64_sys_call+0x2f/0x9a0 [ 2078.281318][ T1956] do_syscall_64+0x3b/0xb0 [ 2078.285570][ T1956] ? clear_bhb_loop+0x35/0x90 [ 2078.290083][ T1956] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2078.295813][ T1956] RIP: 0033:0x7f873a39ad19 [ 2078.300062][ T1956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2078.319504][ T1956] RSP: 002b:00007f8738a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2078.327750][ T1956] RAX: ffffffffffffffda RBX: 00007f873a58afa0 RCX: 00007f873a39ad19 [ 2078.335560][ T1956] RDX: 0000000020002046 RSI: 0000000020001040 RDI: 0000000000000007 [ 2078.343370][ T1956] RBP: 00007f8738a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 2078.351182][ T1956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2078.358995][ T1956] R13: 0000000000000000 R14: 00007f873a58afa0 R15: 00007ffc82286918 [ 2078.366810][ T1956] [ 2078.466051][ T655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2078.476744][ T655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2078.529871][ T655] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2078.539886][ T655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.552814][ T655] usb 2-1: config 0 descriptor?? [ 2079.116950][ T655] cp2112 0003:10C4:EA90.0062: unknown main item tag 0x0 [ 2079.126274][ T1975] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2079.133024][ T655] cp2112 0003:10C4:EA90.0062: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2079.159589][ T30] audit: type=1400 audit(2000001153.681:23146): avc: denied { create } for pid=1976 comm="syz.0.10187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2079.348410][ T655] cp2112 0003:10C4:EA90.0062: Part Number: 0x82 Device Version: 0xFE [ 2080.324262][T23018] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2080.443844][ T655] cp2112 0003:10C4:EA90.0062: error requesting SMBus config [ 2080.454253][ T655] cp2112: probe of 0003:10C4:EA90.0062 failed with error -71 [ 2080.469543][ T655] usb 2-1: USB disconnect, device number 115 [ 2080.490529][ T1986] device syzkaller0 entered promiscuous mode [ 2081.289040][ T1990] overlayfs: overlapping lowerdir path [ 2081.845990][T23018] usb 1-1: Using ep0 maxpacket: 32 [ 2081.923570][ T2003] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2082.093420][ T30] audit: type=1326 audit(2000001156.611:23147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.3.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2082.117411][ T30] audit: type=1326 audit(2000001156.611:23148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.3.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2082.126233][T23018] usb 1-1: config 126 has an invalid interface number: 45 but max is 1 [ 2082.141069][ T30] audit: type=1326 audit(2000001156.611:23149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.3.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2082.151836][T23018] usb 1-1: config 126 has an invalid interface number: 98 but max is 1 [ 2082.174478][ T30] audit: type=1326 audit(2000001156.611:23150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.3.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2082.189343][T23018] usb 1-1: config 126 has an invalid interface number: 5 but max is 1 [ 2082.209023][ T30] audit: type=1326 audit(2000001156.611:23151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.3.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2082.234973][T23018] usb 1-1: config 126 has an invalid descriptor of length 1, skipping remainder of the config [ 2082.234996][T23018] usb 1-1: config 126 has 3 interfaces, different from the descriptor's value: 2 [ 2082.235017][T23018] usb 1-1: config 126 has no interface number 0 [ 2082.235032][T23018] usb 1-1: config 126 has no interface number 1 [ 2082.235047][T23018] usb 1-1: config 126 has no interface number 2 [ 2082.235079][T23018] usb 1-1: config 126 interface 45 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2082.235107][T23018] usb 1-1: config 126 interface 45 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 2082.245537][ T30] audit: type=1326 audit(2000001156.611:23152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.3.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2082.271447][T23018] usb 1-1: config 126 interface 45 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 2082.282490][ T39] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2082.317222][T23018] usb 1-1: config 126 interface 45 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 2082.317252][T23018] usb 1-1: config 126 interface 45 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2082.317277][T23018] usb 1-1: config 126 interface 45 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 2082.330836][ T30] audit: type=1326 audit(2000001156.611:23153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.3.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873a39ad19 code=0x7ffc0000 [ 2082.335717][T23018] usb 1-1: config 126 interface 45 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 2082.401799][T23018] usb 1-1: config 126 interface 45 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2082.413059][T23018] usb 1-1: config 126 interface 98 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 2082.426177][T23018] usb 1-1: too many endpoints for config 126 interface 5 altsetting 221: 119, using maximum allowed: 30 [ 2082.437327][T23018] usb 1-1: config 126 interface 5 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 2082.453845][T23018] usb 1-1: config 126 interface 45 has no altsetting 0 [ 2082.463714][T23018] usb 1-1: config 126 interface 98 has no altsetting 0 [ 2082.471524][T23018] usb 1-1: config 126 interface 5 has no altsetting 0 [ 2082.535961][T23018] usb 1-1: string descriptor 0 read error: -71 [ 2082.543451][T23018] usb 1-1: New USB device found, idVendor=0e41, idProduct=4252, bcdDevice=39.41 [ 2082.579439][T23018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.616001][T23018] usb 1-1: can't set config #126, error -71 [ 2082.926124][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.951366][T23018] usb 1-1: USB disconnect, device number 104 [ 2082.994973][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.005500][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2083.014613][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.024792][ T39] usb 2-1: config 0 descriptor?? [ 2083.037005][ T2017] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.043911][ T2017] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.051164][ T2017] device bridge_slave_0 entered promiscuous mode [ 2083.073575][ T2017] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.080607][ T2017] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.089146][ T2017] device bridge_slave_1 entered promiscuous mode [ 2083.314889][ T1873] device bridge_slave_1 left promiscuous mode [ 2083.321832][ T1873] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.381687][ T1873] device bridge_slave_0 left promiscuous mode [ 2083.388190][ T1873] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.399238][ T1873] device veth1_macvtap left promiscuous mode [ 2083.405163][ T1873] device veth0_vlan left promiscuous mode [ 2083.506425][ T39] hid (null): bogus close delimiter [ 2083.892171][ T2017] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.899201][ T2017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2083.906340][ T2017] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.913177][ T2017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.943304][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2083.952061][T28499] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.960934][T28499] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.976035][ T39] usb 2-1: string descriptor 0 read error: -71 [ 2083.994283][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2084.022628][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2084.030783][ T39] uclogic 0003:256C:006D.0063: failed retrieving string descriptor #200: -71 [ 2084.042316][T28499] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.049179][T28499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.057628][ T39] uclogic 0003:256C:006D.0063: failed retrieving pen parameters: -71 [ 2084.065559][ T39] uclogic 0003:256C:006D.0063: failed probing pen v2 parameters: -71 [ 2084.082559][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2084.096084][ T39] uclogic 0003:256C:006D.0063: failed probing parameters: -71 [ 2084.103472][ T39] uclogic: probe of 0003:256C:006D.0063 failed with error -71 [ 2084.115839][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2084.116427][ T2035] overlayfs: overlapping lowerdir path [ 2084.124141][T28499] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.136093][T28499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.162022][ T39] usb 2-1: USB disconnect, device number 116 [ 2084.188900][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2084.202007][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2084.240223][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2084.269933][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2084.281043][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2084.289796][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2084.304495][ T2017] device veth0_vlan entered promiscuous mode [ 2084.310888][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2084.318549][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2084.326779][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2084.333995][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2084.346118][T11459] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2084.346589][ T2017] device veth1_macvtap entered promiscuous mode [ 2084.360216][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2084.368292][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2084.376708][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2084.387262][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2084.395294][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2084.404468][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2084.412685][T28499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2084.426840][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2084.426852][ T30] audit: type=1400 audit(2000001158.951:23182): avc: denied { mounton } for pid=2017 comm="syz-executor" path="/root/syzkaller.nklhjN/syz-tmp" dev="sda1" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2084.457998][ T30] audit: type=1400 audit(2000001158.951:23183): avc: denied { mount } for pid=2017 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2084.480673][ T30] audit: type=1400 audit(2000001158.951:23184): avc: denied { mount } for pid=2017 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2084.502707][ T30] audit: type=1400 audit(2000001158.951:23185): avc: denied { mounton } for pid=2017 comm="syz-executor" path="/root/syzkaller.nklhjN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2084.537746][ T30] audit: type=1400 audit(2000001158.951:23186): avc: denied { mounton } for pid=2017 comm="syz-executor" path="/root/syzkaller.nklhjN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=167804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2084.576106][ T30] audit: type=1400 audit(2000001158.981:23187): avc: denied { mounton } for pid=2017 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2084.690447][ T30] audit: type=1400 audit(2000001159.211:23188): avc: denied { connect } for pid=2044 comm="syz.5.10207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2084.996217][T11459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.015937][T11459] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2085.039002][T11459] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2085.059224][T11459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.076683][T11459] usb 3-1: config 0 descriptor?? [ 2085.142450][ T30] audit: type=1326 audit(2000001159.661:23189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.6.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fefc80d19 code=0x7ffc0000 [ 2085.166706][ T30] audit: type=1326 audit(2000001159.661:23190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.6.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fefc80d19 code=0x7ffc0000 [ 2085.190869][ T30] audit: type=1326 audit(2000001159.671:23191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2040 comm="syz.6.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fefc80d19 code=0x7ffc0000 [ 2085.217240][ T2052] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2085.333148][ T2055] FAULT_INJECTION: forcing a failure. [ 2085.333148][ T2055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2085.346306][ T2055] CPU: 1 PID: 2055 Comm: syz.6.10209 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2085.356085][ T2055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2085.365983][ T2055] Call Trace: [ 2085.369103][ T2055] [ 2085.371881][ T2055] dump_stack_lvl+0x151/0x1c0 [ 2085.376398][ T2055] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2085.381868][ T2055] dump_stack+0x15/0x20 [ 2085.385870][ T2055] should_fail+0x3c6/0x510 [ 2085.390110][ T2055] should_fail_alloc_page+0x5a/0x80 [ 2085.395140][ T2055] prepare_alloc_pages+0x15c/0x700 [ 2085.400091][ T2055] ? __alloc_pages_bulk+0xe40/0xe40 [ 2085.405123][ T2055] __alloc_pages+0x18c/0x8f0 [ 2085.409553][ T2055] ? prep_new_page+0x110/0x110 [ 2085.414154][ T2055] ? kstrtouint_from_user+0x20a/0x2a0 [ 2085.419367][ T2055] new_slab+0x9a/0x4e0 [ 2085.423266][ T2055] ___slab_alloc+0x39e/0x830 [ 2085.427690][ T2055] ? selinux_file_permission+0x2c4/0x570 [ 2085.433159][ T2055] ? getname_flags+0xba/0x520 [ 2085.437676][ T2055] ? getname_flags+0xba/0x520 [ 2085.442186][ T2055] __slab_alloc+0x4a/0x90 [ 2085.446353][ T2055] ? getname_flags+0xba/0x520 [ 2085.450867][ T2055] kmem_cache_alloc+0x134/0x200 [ 2085.455653][ T2055] getname_flags+0xba/0x520 [ 2085.459993][ T2055] getname+0x19/0x20 [ 2085.463723][ T2055] do_sys_openat2+0xd7/0x820 [ 2085.468146][ T2055] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2085.474570][ T2055] ? __mutex_lock_slowpath+0x10/0x10 [ 2085.479700][ T2055] ? do_sys_open+0x220/0x220 [ 2085.484118][ T2055] ? __kasan_check_write+0x14/0x20 [ 2085.489070][ T2055] ? ksys_write+0x260/0x2c0 [ 2085.493407][ T2055] __x64_sys_openat+0x243/0x290 [ 2085.498095][ T2055] ? __ia32_sys_open+0x270/0x270 [ 2085.502866][ T2055] ? debug_smp_processor_id+0x17/0x20 [ 2085.508079][ T2055] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2085.513974][ T2055] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2085.519446][ T2055] x64_sys_call+0x6bf/0x9a0 [ 2085.523784][ T2055] do_syscall_64+0x3b/0xb0 [ 2085.528036][ T2055] ? clear_bhb_loop+0x35/0x90 [ 2085.532551][ T2055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2085.538275][ T2055] RIP: 0033:0x7f0fefc80d19 [ 2085.542621][ T2055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2085.562057][ T2055] RSP: 002b:00007f0fee2d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2085.570301][ T2055] RAX: ffffffffffffffda RBX: 00007f0fefe71080 RCX: 00007f0fefc80d19 [ 2085.578113][ T2055] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffffff [ 2085.585929][ T2055] RBP: 00007f0fee2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2085.593736][ T2055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2085.601549][ T2055] R13: 0000000000000000 R14: 00007f0fefe71080 R15: 00007ffd7b10c438 [ 2085.609373][ T2055] [ 2085.709457][T11459] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2085.716943][T11459] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2085.724171][T11459] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2085.731507][T11459] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2085.738681][T11459] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2085.745897][T11459] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2085.753204][T11459] plantronics 0003:047F:FFFF.0064: No inputs registered, leaving [ 2085.762263][T11459] plantronics 0003:047F:FFFF.0064: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2086.046874][T23018] usb 3-1: USB disconnect, device number 115 [ 2086.105175][ T2065] xt_hashlimit: size too large, truncated to 1048576 [ 2087.194981][ T39] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2087.219299][ T2088] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2088.165152][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 2088.235924][ T655] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2088.605963][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.616867][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.635886][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2088.655895][ T39] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2088.664759][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.676193][ T39] usb 3-1: config 0 descriptor?? [ 2088.725991][ T655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.737008][ T655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.746716][ T655] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2088.755628][ T655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.767336][ T655] usb 7-1: config 0 descriptor?? [ 2089.296834][ T655] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 2089.314320][ T655] cp2112 0003:10C4:EA90.0066: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 2089.505950][ T655] cp2112 0003:10C4:EA90.0066: Part Number: 0x82 Device Version: 0xFE [ 2089.596053][ T39] hid-led: probe of 0003:27B8:01ED.0065 failed with error -71 [ 2089.604234][ T39] usb 3-1: USB disconnect, device number 116 [ 2090.175960][ T655] cp2112 0003:10C4:EA90.0066: error reading lock byte: -71 [ 2090.184216][ T655] usb 7-1: USB disconnect, device number 2 [ 2090.712902][ T2132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2091.235953][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2091.235971][ T30] audit: type=1326 audit(2000001165.741:23224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2091.271389][ T30] audit: type=1326 audit(2000001165.741:23225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2091.295161][ T30] audit: type=1326 audit(2000001165.741:23226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2091.358101][ T30] audit: type=1326 audit(2000001165.741:23227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2091.397729][ T30] audit: type=1326 audit(2000001165.741:23228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2092.505679][ T30] audit: type=1326 audit(2000001165.741:23229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbb768887cf code=0x7ffc0000 [ 2092.529786][ T30] audit: type=1326 audit(2000001165.741:23230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2092.568524][ T30] audit: type=1326 audit(2000001165.741:23231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbb768887cf code=0x7ffc0000 [ 2092.631289][ T30] audit: type=1326 audit(2000001165.741:23232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2092.693966][ T30] audit: type=1326 audit(2000001165.741:23233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.2.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb76889d19 code=0x7ffc0000 [ 2093.115909][T23018] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2093.209244][ T2162] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2093.745927][ T655] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2093.765990][T23018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2093.776904][T23018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.786883][T23018] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2093.795773][T23018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.804907][T23018] usb 6-1: config 0 descriptor?? [ 2093.845975][T22318] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 2094.156079][ T655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.175961][ T655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2094.192067][ T655] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2094.212944][ T655] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2094.228429][ T655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.240155][ T655] usb 7-1: config 0 descriptor?? [ 2094.256020][T22318] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2094.269233][T22318] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2094.405962][T23018] usbhid 6-1:0.0: can't add hid device: -71 [ 2094.411931][T23018] usbhid: probe of 6-1:0.0 failed with error -71 [ 2094.419467][T23018] usb 6-1: USB disconnect, device number 63 [ 2094.432358][T22318] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2094.446127][T22318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.464129][T22318] usb 4-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2094.550082][T22318] usb 4-1: Manufacturer: К [ 2094.554435][T22318] usb 4-1: SerialNumber: syz [ 2094.575162][ T2178] device syzkaller0 entered promiscuous mode [ 2094.776764][ T655] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 2094.783962][ T655] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 2094.791504][ T655] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 2094.798734][ T655] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 2094.805941][ T655] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 2094.813119][ T655] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 2094.820563][ T655] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving [ 2094.821974][ T2168] UDC core: couldn't find an available UDC or it's busy: -16 [ 2094.829553][ T655] plantronics 0003:047F:FFFF.0067: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2094.836298][ T2168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2094.868380][ T2168] UDC core: couldn't find an available UDC or it's busy: -16 [ 2094.875595][ T2168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2094.884646][ T2168] fuse: Bad value for 'fd' [ 2094.999931][ T655] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 2095.395978][T22318] usbhid 4-1:1.0: can't add hid device: -71 [ 2095.401901][T22318] usbhid: probe of 4-1:1.0 failed with error -71 [ 2095.408926][T22318] usb 4-1: USB disconnect, device number 85 [ 2095.595993][ T655] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2095.609683][ T655] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2095.684613][ T2198] xt_hashlimit: size too large, truncated to 1048576 [ 2095.795994][ T655] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 2095.831906][ T655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.845534][ T655] usb 3-1: Product: ⇄풄缤쀅ℋ㵍쉎堵䄖ವ榜㝓䊿입猉槻褞ឣ젭␥骉ያ䮉₄ᖐ맮璲쎫놡썙攱唗࿓琉蘏䀇鍽ណ먕物솿渧敚Ţ䱭⊮๹๥㚦ꚷꝺ吅鿆䬭ꨍ䀹믊嵤ኝ㡢㲜甚ꬵ똸僌ꗩᱨ뿔祙蓀떻୉惊픜⳩⹕䲻鼼ኮ䉪魺ご૬꟧鞙蓙壠ﲌ葮美྄쀯탸蚈⦴快랏檾゠䛥悦佻饑죉佁㬱溃ꮕ㴾焔℃ [ 2095.905480][ T655] usb 3-1: Manufacturer: К [ 2095.912938][ T655] usb 3-1: SerialNumber: syz [ 2096.171849][ T2181] UDC core: couldn't find an available UDC or it's busy: -16 [ 2096.179358][ T2181] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2096.187622][ T2181] UDC core: couldn't find an available UDC or it's busy: -16 [ 2096.194831][ T2181] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2096.203665][ T2181] fuse: Bad value for 'fd' [ 2096.236107][ T39] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 2096.667148][ T655] usbhid 3-1:1.0: can't add hid device: -71 [ 2096.673083][ T655] usbhid: probe of 3-1:1.0 failed with error -71 [ 2096.680037][ T655] usb 3-1: USB disconnect, device number 117 [ 2096.769736][ T2215] device batadv_slave_1 entered promiscuous mode [ 2096.784125][ T2215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10258'. [ 2096.793963][ T2214] device batadv_slave_1 left promiscuous mode [ 2096.850587][ T2219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10260'. [ 2097.376869][ T2231] xt_hashlimit: size too large, truncated to 1048576 [ 2097.615913][ T655] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2097.891620][ T2244] device batadv_slave_1 entered promiscuous mode [ 2098.010323][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10269'. [ 2098.030253][ T2243] device batadv_slave_1 left promiscuous mode [ 2098.216311][T11459] usb 7-1: USB disconnect, device number 3 [ 2098.245994][ T655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2098.595433][ T655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.605617][ T655] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2098.614733][ T655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.623592][ T655] usb 4-1: config 0 descriptor?? [ 2099.257252][ T655] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 2099.266400][ T655] cp2112 0003:10C4:EA90.0068: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2099.465967][ T655] cp2112 0003:10C4:EA90.0068: Part Number: 0x82 Device Version: 0xFE [ 2099.717995][ T2275] overlayfs: overlapping lowerdir path [ 2100.782827][ T2284] device batadv_slave_1 entered promiscuous mode [ 2100.798623][ T2284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10280'. [ 2100.811903][ T2280] device batadv_slave_1 left promiscuous mode [ 2100.815983][ T655] cp2112 0003:10C4:EA90.0068: error setting SMBus config [ 2101.109839][ T655] cp2112: probe of 0003:10C4:EA90.0068 failed with error -71 [ 2101.128131][ T655] usb 4-1: USB disconnect, device number 86 [ 2101.468339][ T2646] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2101.586442][ T655] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2101.835964][ T2646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.846904][ T2646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.856859][ T2646] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2101.869539][ T2646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.878534][ T2646] usb 6-1: config 0 descriptor?? [ 2101.945984][ T655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.956752][ T655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.966278][ T655] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2101.975120][ T655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.987027][ T655] usb 4-1: config 0 descriptor?? [ 2102.356858][ T2646] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 2102.364314][ T2646] cp2112 0003:10C4:EA90.0069: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2102.565986][ T2646] cp2112 0003:10C4:EA90.0069: Part Number: 0x82 Device Version: 0xFE [ 2102.907205][ T655] usbhid 4-1:0.0: can't add hid device: -71 [ 2102.913110][ T655] usbhid: probe of 4-1:0.0 failed with error -71 [ 2102.920395][ T655] usb 4-1: USB disconnect, device number 87 [ 2103.225961][ T2646] cp2112 0003:10C4:EA90.0069: error reading lock byte: -71 [ 2103.234293][ T2646] usb 6-1: USB disconnect, device number 64 [ 2103.679866][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2103.679883][ T30] audit: type=1400 audit(2000001178.201:23282): avc: denied { nlmsg_write } for pid=2322 comm="syz.3.10291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2103.729612][ T2328] device batadv_slave_1 entered promiscuous mode [ 2103.757245][ T2328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10293'. [ 2103.767434][ T2327] device batadv_slave_1 left promiscuous mode [ 2104.597473][ T2346] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2104.813608][ T2356] input: syz0 as /devices/virtual/input/input335 [ 2105.325922][ T2646] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2106.315985][ T2646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2106.326864][ T2646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2106.336457][ T2646] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2106.345356][ T2646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.354058][ T2646] usb 3-1: config 0 descriptor?? [ 2106.495920][T22318] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 2106.535968][ T655] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2106.886275][ T2646] hid (null): bogus close delimiter [ 2107.686120][ T2387] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2107.694659][ T2387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2108.957864][ T655] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2108.968079][T22318] usb 7-1: config 1 has an invalid interface number: 5 but max is 2 [ 2108.977543][T22318] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2108.987992][ T655] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2108.996975][ T2646] usb 3-1: string descriptor 0 read error: -71 [ 2109.003512][T22318] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2109.012571][ T655] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 2109.021589][ T2646] uclogic 0003:256C:006D.006A: failed retrieving string descriptor #200: -71 [ 2109.030580][T22318] usb 7-1: config 1 has no interface number 1 [ 2109.036759][ T655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.044994][ T2646] uclogic 0003:256C:006D.006A: failed retrieving pen parameters: -71 [ 2109.053151][T22318] usb 7-1: too many endpoints for config 1 interface 5 altsetting 2: 170, using maximum allowed: 30 [ 2109.101972][ T2646] uclogic 0003:256C:006D.006A: failed probing pen v2 parameters: -71 [ 2109.110264][ T655] usb 4-1: config 0 descriptor?? [ 2109.116047][T22318] usb 7-1: config 1 interface 5 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 2109.129374][ T2646] uclogic 0003:256C:006D.006A: failed probing parameters: -71 [ 2109.136912][ T2646] uclogic: probe of 0003:256C:006D.006A failed with error -71 [ 2109.144836][T22318] usb 7-1: config 1 interface 5 has no altsetting 0 [ 2109.240085][ T2406] overlayfs: overlapping lowerdir path [ 2109.463809][ T2408] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2109.608542][ T655] usb 4-1: USB disconnect, device number 88 [ 2109.620303][ T2646] usb 3-1: USB disconnect, device number 118 [ 2109.665967][T22318] usb 7-1: string descriptor 0 read error: -71 [ 2109.672459][T22318] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2109.688242][T22318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.722016][T22318] usb 7-1: can't set config #1, error -71 [ 2109.731196][T22318] usb 7-1: USB disconnect, device number 4 [ 2110.935938][T23018] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2111.455914][T22318] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 2111.455984][ T655] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2111.498827][T23018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2111.595317][ T2436] overlayfs: overlapping lowerdir path [ 2111.675046][T23018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2111.685810][T23018] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2111.866291][T23018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.878744][T23018] usb 2-1: config 0 descriptor?? [ 2111.987046][ T655] usb 6-1: Using ep0 maxpacket: 16 [ 2112.035956][T22318] usb 7-1: config 1 has an invalid interface number: 5 but max is 2 [ 2112.044082][T22318] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.313462][T22318] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2112.349801][T22318] usb 7-1: config 1 has no interface number 1 [ 2112.355761][T22318] usb 7-1: too many endpoints for config 1 interface 5 altsetting 2: 170, using maximum allowed: 30 [ 2112.367552][ T655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.378536][T22318] usb 7-1: config 1 interface 5 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 2112.396913][ T655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2112.406639][T22318] usb 7-1: config 1 interface 5 has no altsetting 0 [ 2112.413103][ T655] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2112.425902][ T655] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2112.434801][ T655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.447551][ T655] usb 6-1: config 0 descriptor?? [ 2112.794464][T23018] hid (null): bogus close delimiter [ 2112.825993][T22318] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2112.842291][T22318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.850303][T22318] usb 7-1: Product: syz [ 2112.854330][T22318] usb 7-1: Manufacturer: syz [ 2112.858915][T22318] usb 7-1: SerialNumber: syz [ 2112.975969][T23018] usb 2-1: string descriptor 0 read error: -71 [ 2113.125169][ T2429] fuse: Bad value for 'fd' [ 2113.263026][T23018] uclogic 0003:256C:006D.006B: failed retrieving string descriptor #200: -71 [ 2113.272526][T23018] uclogic 0003:256C:006D.006B: failed retrieving pen parameters: -71 [ 2113.280512][T23018] uclogic 0003:256C:006D.006B: failed probing pen v2 parameters: -71 [ 2113.289668][T23018] uclogic 0003:256C:006D.006B: failed probing parameters: -71 [ 2113.297310][T23018] uclogic: probe of 0003:256C:006D.006B failed with error -71 [ 2113.317105][T23018] usb 2-1: USB disconnect, device number 117 [ 2113.345958][T22318] usb 7-1: 0:2 : does not exist [ 2113.395999][ T655] hid-led: probe of 0003:27B8:01ED.006C failed with error -71 [ 2113.409618][T22318] usb 7-1: USB disconnect, device number 5 [ 2113.418122][ T655] usb 6-1: USB disconnect, device number 65 [ 2113.556217][ T2460] device batadv_slave_1 entered promiscuous mode [ 2113.563633][ T2460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10334'. [ 2113.573644][ T2459] device batadv_slave_1 left promiscuous mode [ 2114.444896][ T2479] FAULT_INJECTION: forcing a failure. [ 2114.444896][ T2479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2114.458052][ T2479] CPU: 0 PID: 2479 Comm: syz.3.10340 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2114.467850][ T2479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2114.477743][ T2479] Call Trace: [ 2114.480866][ T2479] [ 2114.483645][ T2479] dump_stack_lvl+0x151/0x1c0 [ 2114.488157][ T2479] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2114.493638][ T2479] ? avc_has_extended_perms+0xad7/0x10f0 [ 2114.499094][ T2479] ? kasan_set_free_info+0x23/0x40 [ 2114.504040][ T2479] dump_stack+0x15/0x20 [ 2114.508032][ T2479] should_fail+0x3c6/0x510 [ 2114.512290][ T2479] should_fail_usercopy+0x1a/0x20 [ 2114.517146][ T2479] _copy_from_user+0x20/0xd0 [ 2114.521575][ T2479] dev_ethtool+0x116/0x1540 [ 2114.525915][ T2479] ? ethtool_get_module_eeprom_call+0x1a0/0x1a0 [ 2114.531986][ T2479] ? __kasan_check_write+0x14/0x20 [ 2114.536934][ T2479] ? mutex_lock+0xb6/0x1e0 [ 2114.541195][ T2479] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2114.547624][ T2479] dev_ioctl+0x2a0/0xe70 [ 2114.551691][ T2479] sock_do_ioctl+0x34f/0x5a0 [ 2114.556116][ T2479] ? sock_show_fdinfo+0xa0/0xa0 [ 2114.560805][ T2479] ? selinux_file_ioctl+0x3cc/0x540 [ 2114.565840][ T2479] sock_ioctl+0x455/0x740 [ 2114.570001][ T2479] ? sock_poll+0x400/0x400 [ 2114.574255][ T2479] ? __fget_files+0x31e/0x380 [ 2114.578770][ T2479] ? security_file_ioctl+0x84/0xb0 [ 2114.583716][ T2479] ? sock_poll+0x400/0x400 [ 2114.587973][ T2479] __se_sys_ioctl+0x114/0x190 [ 2114.592482][ T2479] __x64_sys_ioctl+0x7b/0x90 [ 2114.596907][ T2479] x64_sys_call+0x98/0x9a0 [ 2114.601160][ T2479] do_syscall_64+0x3b/0xb0 [ 2114.605419][ T2479] ? clear_bhb_loop+0x35/0x90 [ 2114.609926][ T2479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2114.615658][ T2479] RIP: 0033:0x7f873a39ad19 [ 2114.619910][ T2479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2114.639350][ T2479] RSP: 002b:00007f8738a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2114.647596][ T2479] RAX: ffffffffffffffda RBX: 00007f873a58afa0 RCX: 00007f873a39ad19 [ 2114.655411][ T2479] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 2114.663379][ T2479] RBP: 00007f8738a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 2114.671181][ T2479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.678995][ T2479] R13: 0000000000000000 R14: 00007f873a58afa0 R15: 00007ffc82286918 [ 2114.686811][ T2479] [ 2115.026014][T20603] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2115.275881][T20603] usb 3-1: Using ep0 maxpacket: 16 [ 2115.395966][T20603] usb 3-1: config 0 has no interfaces? [ 2115.585962][T20603] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 2115.594821][T20603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2115.603027][T20603] usb 3-1: Product: syz [ 2115.607091][T20603] usb 3-1: Manufacturer: syz [ 2115.611587][T20603] usb 3-1: SerialNumber: syz [ 2115.686806][T20603] r8152-cfgselector 3-1: config 0 descriptor?? [ 2115.910352][ T2494] device batadv_slave_1 entered promiscuous mode [ 2115.918065][ T2494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10345'. [ 2115.928461][ T2493] device batadv_slave_1 left promiscuous mode [ 2115.964271][ T2496] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xd [ 2115.969484][T20603] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2115.979859][T20603] r8152-cfgselector 3-1: USB disconnect, device number 119 [ 2116.325894][T23018] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2116.725951][T23018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2116.736737][ T655] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2116.744117][T23018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2116.753720][T23018] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2116.762786][T23018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.780281][T23018] usb 7-1: config 0 descriptor?? [ 2117.375982][ T655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2117.386894][T23018] hid (null): bogus close delimiter [ 2117.406055][ T655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2117.415699][ T655] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2117.428697][ T655] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2117.437996][ T655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.448190][ T655] usb 3-1: config 0 descriptor?? [ 2117.475924][T22318] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2117.725989][T23018] usb 7-1: string descriptor 0 read error: -71 [ 2117.807060][T23018] uclogic 0003:256C:006D.006D: failed retrieving string descriptor #200: -71 [ 2117.815976][T23018] uclogic 0003:256C:006D.006D: failed retrieving pen parameters: -71 [ 2117.823946][T23018] uclogic 0003:256C:006D.006D: failed probing pen v2 parameters: -71 [ 2117.832167][T23018] uclogic 0003:256C:006D.006D: failed probing parameters: -71 [ 2117.840324][T23018] uclogic: probe of 0003:256C:006D.006D failed with error -71 [ 2117.849176][T23018] usb 7-1: USB disconnect, device number 6 [ 2117.876028][T22318] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2117.896526][T22318] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2117.906529][T22318] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2117.919525][T22318] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2117.927150][ T655] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 2117.934723][T22318] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 2117.943881][ T655] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 2117.956983][T22318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.964971][ T655] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 2117.972570][ T655] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 2117.980068][T22318] usb 6-1: config 0 descriptor?? [ 2117.985148][ T655] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 2117.992390][ T655] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 2117.999741][ T655] plantronics 0003:047F:FFFF.006E: No inputs registered, leaving [ 2118.918237][ T655] plantronics 0003:047F:FFFF.006E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2118.968471][ T2530] device batadv_slave_1 entered promiscuous mode [ 2118.982258][ T2530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10356'. [ 2119.017903][ T2529] device batadv_slave_1 left promiscuous mode [ 2119.389207][T22318] elo 0003:04E7:0030.006F: unknown main item tag 0x0 [ 2119.395762][T22318] elo 0003:04E7:0030.006F: unknown main item tag 0x0 [ 2119.402767][T22318] elo 0003:04E7:0030.006F: unknown main item tag 0x0 [ 2119.409503][T22318] elo 0003:04E7:0030.006F: unknown main item tag 0x0 [ 2119.416227][T22318] elo 0003:04E7:0030.006F: unknown main item tag 0x0 [ 2119.422729][T22318] elo 0003:04E7:0030.006F: unknown main item tag 0x0 [ 2119.429441][T22318] elo 0003:04E7:0030.006F: unknown main item tag 0x0 [ 2119.437036][T22318] elo 0003:04E7:0030.006F: hidraw1: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 2119.450430][T22318] usb 6-1: USB disconnect, device number 66 [ 2119.707719][T23018] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2120.075899][T23018] usb 7-1: Using ep0 maxpacket: 16 [ 2120.305963][T23018] usb 7-1: config 0 has no interfaces? [ 2120.465987][T23018] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 2120.475064][T23018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2120.483464][T23018] usb 7-1: Product: syz [ 2120.487816][T23018] usb 7-1: Manufacturer: syz [ 2120.492300][T23018] usb 7-1: SerialNumber: syz [ 2120.498027][T23018] r8152-cfgselector 7-1: config 0 descriptor?? [ 2120.822779][ T2560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10364'. [ 2120.876045][T23018] r8152-cfgselector 7-1: Unknown version 0x0000 [ 2121.119196][T23018] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 2122.433055][ T655] usb 3-1: USB disconnect, device number 120 [ 2122.537615][ T2573] device batadv_slave_1 entered promiscuous mode [ 2222.465823][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2222.472639][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P655/1:b..l [ 2222.480268][ C1] (detected by 1, t=10003 jiffies, g=182197, q=563) [ 2222.486804][ C1] task:kworker/0:0 state:R running task stack:21648 pid: 655 ppid: 2 flags:0x00004000 [ 2222.497380][ C1] Workqueue: usb_hub_wq hub_event [ 2222.502224][ C1] Call Trace: [ 2222.505353][ C1] [ 2222.508134][ C1] __schedule+0xccc/0x1590 [ 2222.512386][ C1] ? release_firmware_map_entry+0x190/0x190 [ 2222.518109][ C1] ? remove_wait_queue+0x140/0x140 [ 2222.523058][ C1] ? preempt_schedule+0xd9/0xe0 [ 2222.527744][ C1] preempt_schedule_common+0x9b/0xf0 [ 2222.532867][ C1] preempt_schedule+0xd9/0xe0 [ 2222.537378][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 2222.542845][ C1] ? ep_poll_callback+0x72a/0x850 [ 2222.547709][ C1] preempt_schedule_thunk+0x16/0x18 [ 2222.552739][ C1] ? ep_poll_callback+0x72a/0x850 [ 2222.557603][ C1] _raw_spin_unlock_irqrestore+0x71/0x80 [ 2222.563072][ C1] __wake_up_sync_key+0x1b1/0x3d0 [ 2222.567933][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 2222.573748][ C1] ? __kasan_check_write+0x14/0x20 [ 2222.578693][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2222.583989][ C1] sock_def_readable+0x154/0x3b0 [ 2222.588761][ C1] ? sock_no_sendpage_locked+0x1b0/0x1b0 [ 2222.594229][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 2222.599868][ C1] ? skb_queue_tail+0xfb/0x120 [ 2222.604475][ C1] netlink_broadcast_filtered+0xcd8/0x1220 [ 2222.610116][ C1] netlink_broadcast+0x3a/0x50 [ 2222.614710][ C1] kobject_uevent_net_broadcast+0x3a1/0x590 [ 2222.620439][ C1] kobject_uevent_env+0x525/0x700 [ 2222.625301][ C1] kobject_uevent+0x1f/0x30 [ 2222.629644][ C1] device_release_driver_internal+0x6ee/0x7d0 [ 2222.635549][ C1] device_release_driver+0x19/0x20 [ 2222.640496][ C1] bus_remove_device+0x2f8/0x360 [ 2222.645263][ C1] device_del+0x663/0xe90 [ 2222.649428][ C1] ? kill_device+0xd0/0xd0 [ 2222.653680][ C1] ? device_unregister+0x27/0x40 [ 2222.658454][ C1] usb_disable_device+0x380/0x720 [ 2222.663316][ C1] usb_disconnect+0x32a/0x890 [ 2222.667840][ C1] hub_event+0x1d42/0x4770 [ 2222.672089][ C1] ? __queue_work+0x94d/0xcd0 [ 2222.676616][ C1] ? led_work+0x590/0x590 [ 2222.680758][ C1] ? queue_work_on+0x12e/0x170 [ 2222.685361][ C1] ? wq_worker_last_func+0x50/0x50 [ 2222.690308][ C1] ? __kasan_check_write+0x14/0x20 [ 2222.695253][ C1] ? __kasan_check_read+0x11/0x20 [ 2222.700116][ C1] ? read_word_at_a_time+0x12/0x20 [ 2222.705062][ C1] ? strscpy+0x9c/0x260 [ 2222.709053][ C1] process_one_work+0x6bb/0xc10 [ 2222.713744][ C1] worker_thread+0xad5/0x12a0 [ 2222.718254][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 2222.722948][ C1] kthread+0x421/0x510 [ 2222.726858][ C1] ? worker_clr_flags+0x180/0x180 [ 2222.731707][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2222.736137][ C1] ret_from_fork+0x1f/0x30 [ 2222.740391][ C1] [ 2222.743261][ C1] rcu: rcu_preempt kthread starved for 9859 jiffies! g182197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2222.754273][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2222.764080][ C1] rcu: RCU grace-period kthread stack dump: [ 2222.769830][ C1] task:rcu_preempt state:R running task stack:27912 pid: 14 ppid: 2 flags:0x00004000 [ 2222.780398][ C1] Call Trace: [ 2222.783524][ C1] [ 2222.786305][ C1] __schedule+0xccc/0x1590 [ 2222.790575][ C1] ? release_firmware_map_entry+0x190/0x190 [ 2222.796283][ C1] ? ttwu_do_activate+0x17c/0x290 [ 2222.801144][ C1] ? __kasan_check_write+0x14/0x20 [ 2222.806095][ C1] schedule+0x11f/0x1e0 [ 2222.810083][ C1] schedule_timeout+0x18c/0x370 [ 2222.814770][ C1] ? __kasan_check_write+0x14/0x20 [ 2222.819713][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2222.825009][ C1] ? console_conditional_schedule+0x30/0x30 [ 2222.830748][ C1] ? update_process_times+0x200/0x200 [ 2222.835950][ C1] ? prepare_to_swait_event+0x308/0x320 [ 2222.841330][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 2222.845931][ C1] ? dyntick_save_progress_counter+0x1e0/0x1e0 [ 2222.851917][ C1] ? __note_gp_changes+0x4ab/0x920 [ 2222.856868][ C1] ? rcu_gp_init+0xc30/0xc30 [ 2222.861291][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 2222.866325][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 2222.870753][ C1] rcu_gp_kthread+0xa4/0x350 [ 2222.875187][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 2222.879864][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 2222.884374][ C1] ? __kasan_check_read+0x11/0x20 [ 2222.889236][ C1] ? __kthread_parkme+0xb2/0x200 [ 2222.894014][ C1] kthread+0x421/0x510 [ 2222.897914][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 2222.902429][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2222.906853][ C1] ret_from_fork+0x1f/0x30 [ 2222.911111][ C1] [ 2222.913970][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2222.920149][ C1] NMI backtrace for cpu 1 [ 2222.924307][ C1] CPU: 1 PID: 2574 Comm: syz.3.10367 Not tainted 5.15.170-syzkaller-00230-g1f9202a6d83b #0 [ 2222.934107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2222.944003][ C1] Call Trace: [ 2222.947127][ C1] [ 2222.949817][ C1] dump_stack_lvl+0x151/0x1c0 [ 2222.954333][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2222.959805][ C1] dump_stack+0x15/0x20 [ 2222.963790][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 2222.968573][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 2222.974556][ C1] ? panic+0x760/0x760 [ 2222.978461][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2222.984360][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 2222.990177][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2222.996081][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2223.001806][ C1] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 2223.007794][ C1] ? wq_watchdog_touch+0x108/0x180 [ 2223.012746][ C1] print_other_cpu_stall+0x112d/0x1340 [ 2223.018040][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 2223.022813][ C1] ? __kasan_check_write+0x14/0x20 [ 2223.027760][ C1] rcu_sched_clock_irq+0xaec/0x12f0 [ 2223.032795][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 2223.038783][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 2223.043815][ C1] update_process_times+0x198/0x200 [ 2223.048851][ C1] tick_sched_timer+0x188/0x240 [ 2223.053534][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 2223.058916][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 2223.063958][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 2223.068906][ C1] ? clockevents_program_event+0x22f/0x300 [ 2223.074538][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 2223.080443][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 2223.085223][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3f0 [ 2223.090949][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2223.096412][ C1] [ 2223.099187][ C1] [ 2223.101967][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2223.107783][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x1/0x80 [ 2223.114376][ C1] Code: 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 49 ff c1 4c 89 09 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 <48> 89 e5 4c 8b 45 08 65 48 8b 0d 10 03 92 7e 65 8b 05 11 03 92 7e [ 2223.133818][ C1] RSP: 0018:ffffc90000e27d18 EFLAGS: 00000297 [ 2223.139722][ C1] RAX: 0000000000000002 RBX: 00007f8738a0bb68 RCX: ffff8881282a0000 [ 2223.147536][ C1] RDX: dffffc0000000000 RSI: 00007f8738a0bb68 RDI: 00007ffffffff000 [ 2223.155341][ C1] RBP: ffffc90000e27d50 R08: ffffffff8265d63d R09: ffffc90000e27dc0 [ 2223.163156][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000018 [ 2223.170966][ C1] R13: 00007ffffffff000 R14: ffffc90000e27dc0 R15: 00007f8738a0bb50 [ 2223.178780][ C1] ? _copy_from_user+0x3d/0xd0 [ 2223.183393][ C1] ? should_fail_usercopy+0x1a/0x20 [ 2223.188414][ C1] ? _copy_from_user+0x52/0xd0 [ 2223.193013][ C1] restore_altstack+0x9a/0x400 [ 2223.197615][ C1] ? __ia32_sys_sigaltstack+0x70/0x70 [ 2223.202821][ C1] __do_sys_rt_sigreturn+0x160/0x1e0 [ 2223.207943][ C1] ? x32_copy_siginfo_to_user+0x270/0x270 [ 2223.213494][ C1] ? debug_smp_processor_id+0x17/0x20 [ 2223.218703][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2223.224605][ C1] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2223.230072][ C1] x64_sys_call+0x91/0x9a0 [ 2223.234324][ C1] do_syscall_64+0x3b/0xb0 [ 2223.238578][ C1] ? clear_bhb_loop+0x35/0x90 [ 2223.243091][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2223.248818][ C1] RIP: 0033:0x7f873a39ad17 [ 2223.253078][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 2223.272513][ C1] RSP: 002b:00007f8738a0c0e8 EFLAGS: 00000246 [ 2223.278416][ C1] RAX: 00000000000000ca RBX: 00007f873a58afa8 RCX: 00007f873a39ad19 [ 2223.286228][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f873a58afa8 [ 2223.294039][ C1] RBP: 00007f873a58afa0 R08: 0000000000000000 R09: 0000000000000000 [ 2223.301849][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f873a58afac [ 2223.309661][ C1] R13: 0000000000000000 R14: 00007ffc82286830 R15: 00007ffc82286918 [ 2223.317479][ C1] [ 2292.426050][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 169s! [ 2292.434827][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 163s! [ 2292.443712][ C0] Showing busy workqueues and worker pools: [ 2292.449428][ C0] workqueue events: flags=0x0 [ 2292.453925][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.453971][ C0] pending: kfree_rcu_monitor [ 2292.454027][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 2292.454070][ C0] pending: bpf_prog_free_deferred, psi_avgs_work, destroy_list_workfn, free_work, vmstat_shepherd, kfree_rcu_monitor, key_garbage_collector [ 2292.454200][ C0] workqueue events_long: flags=0x0 [ 2292.493224][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2292.493270][ C0] pending: br_fdb_cleanup, br_fdb_cleanup [ 2292.493311][ C0] workqueue events_unbound: flags=0x2 [ 2292.511798][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 2292.511836][ C0] pending: flush_memcg_stats_dwork, toggle_allocation_gate [ 2292.511886][ C0] workqueue events_power_efficient: flags=0x80 [ 2292.532195][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.532237][ C0] pending: neigh_periodic_work [ 2292.532262][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2292.532302][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, gc_worker, check_lifetime [ 2292.532368][ C0] workqueue rcu_gp: flags=0x8 [ 2292.566375][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2292.566425][ C0] pending: srcu_invoke_callbacks, process_srcu [ 2292.566472][ C0] workqueue mm_percpu_wq: flags=0x8 [ 2292.585192][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.585232][ C0] pending: vmstat_update [ 2292.585258][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.585294][ C0] pending: vmstat_update [ 2292.585319][ C0] workqueue writeback: flags=0x4a [ 2292.613834][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2292.613887][ C0] pending: wb_workfn [ 2292.613920][ C0] workqueue kblockd: flags=0x18 [ 2292.629777][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 2292.629826][ C0] pending: blk_mq_timeout_work [ 2292.629855][ C0] workqueue usb_hub_wq: flags=0x4 [ 2292.647213][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2292.647256][ C0] in-flight: 23018:hub_event hub_event, 655:hub_event hub_event [ 2292.647345][ C0] workqueue dm_bufio_cache: flags=0x8 [ 2292.667804][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.667851][ C0] pending: work_fn [ 2292.667879][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 2292.684640][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 2292.684684][ C0] pending: addrconf_verify_work [ 2292.684719][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2292.702076][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.702116][ C0] pending: wg_packet_encrypt_worker [ 2292.702146][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2292.719795][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2292.719836][ C0] pending: wg_packet_handshake_send_worker [ 2292.719869][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2292.737676][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.737712][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2292.737753][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2292.758673][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.758716][ C0] pending: wg_packet_encrypt_worker [ 2292.758748][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2292.776645][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.776701][ C0] pending: wg_packet_encrypt_worker [ 2292.776728][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.776765][ C0] pending: wg_packet_encrypt_worker [ 2292.776792][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2292.807321][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2292.807360][ C0] pending: wg_packet_handshake_send_worker [ 2292.807390][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2292.825447][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.825507][ C0] pending: wg_packet_decrypt_worker [ 2292.825558][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2292.843156][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2292.843212][ C0] pending: wg_packet_handshake_send_worker [ 2292.843241][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2292.861292][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.861334][ C0] pending: wg_packet_encrypt_worker [ 2292.861367][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2292.879270][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.879312][ C0] pending: wg_packet_tx_worker [ 2292.879340][ C0] workqueue wg-kex-wg1: flags=0x24 [ 2292.896636][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.896693][ C0] pending: wg_packet_handshake_receive_worker [ 2292.896723][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2292.915192][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2292.915228][ C0] pending: wg_packet_handshake_send_worker [ 2292.915259][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2292.933068][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2292.933103][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2292.933153][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2292.953817][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2292.953855][ C0] pending: wg_packet_handshake_send_worker [ 2292.953882][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2292.971955][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2292.971995][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 2292.972040][ C0] workqueue wg-kex-wg1: flags=0x24 [ 2292.991570][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2292.991611][ C0] pending: wg_packet_handshake_receive_worker [ 2292.991640][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2293.010155][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2293.010203][ C0] pending: wg_packet_handshake_send_worker [ 2293.010235][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2293.028037][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2293.028075][ C0] pending: wg_packet_handshake_send_worker [ 2293.028114][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2293.046180][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.046262][ C0] pending: wg_packet_encrypt_worker [ 2293.046291][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2293.046332][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 2293.046393][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2293.079189][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2293.079226][ C0] pending: wg_packet_handshake_send_worker [ 2293.079255][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2293.097328][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.097375][ C0] pending: wg_packet_encrypt_worker [ 2293.097404][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2293.097443][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 2293.097490][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2293.129840][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2293.129875][ C0] pending: wg_packet_handshake_send_worker [ 2293.129903][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2293.147996][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.148034][ C0] pending: wg_packet_encrypt_worker [ 2293.148058][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.148093][ C0] pending: wg_packet_encrypt_worker [ 2293.148119][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2293.178905][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.178940][ C0] pending: wg_packet_encrypt_worker [ 2293.178966][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2293.179001][ C0] pending: wg_packet_encrypt_worker [ 2293.179027][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=170s workers=8 idle: 22318 2646 17175 27325 1876 2637