Extracting prog: 1h42m24.843619755s Minimizing prog: 8m23.894243663s Simplifying prog options: 0s Extracting C: 42.285621813s Simplifying C: 15m27.12826154s extracting reproducer from 49 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mkdirat-openat-openat$dir-openat$dir-socket$nl_route-prlimit64-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_netfilter-socket$inet-ioctl$sock_SIOCGIFINDEX-sendmsg$IPCTNL_MSG_CT_GET-sendmsg$nl_route_sched-setsockopt$SO_ATTACH_FILTER-syz_mount_image$erofs-openat-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_SET_MSRS-ioctl$KVM_RUN-ioctl$FS_IOC_FIEMAP detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program did not crash single: failed to extract reproducer bisect: bisecting 49 programs with base timeout 30s testing program (duration=42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 30, 30, 27, 30, 30, 20, 23, 18, 4, 23, 30, 4, 4, 22, 15, 30, 7, 29, 30, 5, 30, 30, 25, 17, 5, 30, 30, 10, 30, 30, 2, 6, 6, 2, 2, 4, 28, 30, 11, 2, 3, 2, 30, 29, 10, 30, 30] detailed listing: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x20200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000400)='off\n', 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0xb, 0x29, 0x2}, 0xb) executing program 1: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000040000)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x80000001, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0xffffffff}, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff}, {0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000010000)=[@text64={0x40, &(0x7f0000020000)="31c0660f388203", 0x7}], 0x1, 0x7, &(0x7f0000030000)=[@cr0={0x0, 0x80000000}, @cr4={0x1, 0x20000}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[]) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x0, @private2, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f00003f2000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x168, 0xb, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x100, 0x168, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc]}}, @common=@set={{0x40}, {{0x4, [0x1, 0x0, 0x2, 0x4, 0x3, 0x7], 0x4, 0x9963b34a06fe5c33}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYRES32], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) write$selinux_create(r0, &(0x7f0000000280)=@access={'system_u:object_r:auditctl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7fff}, 0xffffff3a) executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x10001, 0x2, 0x4f, "0d41810700943aaa91e15b1b6f6ff88c6b00", 0x9, 0x140220}) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000c00), 0x9, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000c40)={0x7, 0x80}) (async) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x9f) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x2, 0xb, 0x7, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfd}, 0x10}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r5, &(0x7f0000000940)={@void, @val={0x2, 0x0, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, "f6e700", 0xfb8, 0x3a, 0xff, @remote, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x2b, 0x0, @remote, @mcast1, [@dstopts={0x3a, 0x1ef, '\x00', [@generic={0xd9, 0xf6f, "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"}, @jumbo={0xc2, 0x4, 0x7}, @padn]}]}}}}}, 0xfea) (async) write(r3, &(0x7f0000000080)="822a0a65bd8c002b0304070e0580a7b6070d63e286a5cefe254407607704aaf9beb3aebb9c2b991ed80e9a573da3441e7ede2cbb78c72f0b779bf79c291951d6630f21f7163e448e0e7454c0d2883b40938cee89f343eb2807152a135cc3b3beea3b56f6082fb7d00ad018305887458e547d671773fe8a43c6acf4563679fb96ccf158bcaaf1b8af3b8350551538d87ca06182f3bd3256844779576766fd72", 0x9f) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = getpid() kcmp(r1, 0x0, 0x0, r0, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x9, 0x81, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) (async) socket$netlink(0x10, 0x3, 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BLKRAGET(r7, 0x1263, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000fdff18", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b503"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[], 0x31) executing program 32: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = getpid() kcmp(r1, 0x0, 0x0, r0, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x9, 0x81, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) (async) socket$netlink(0x10, 0x3, 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BLKRAGET(r7, 0x1263, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000fdff18", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b503"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[], 0x31) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000014c0), 0x4, 0x4002) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x10) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000107, 0x0, 0x6}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000280)) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000006ec0)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x460003}, 0xc, &(0x7f0000000a40)={&(0x7f00000001c0)={0x868, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc00}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',},:{$}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-.-:(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff9f}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\'(+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\xbb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x99.#-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xe4!,}.!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '::[\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3800}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '!@{!9!:}\\[!,.\x12\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "4ff49b97b3450a3f7b27a58a07bedad8be5d5a5eb2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "096a4418a892c8a4d1b2c720c273adcc5e7f0166e5fd61992feded7217632bb9488e16fa"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x76, 0x5, "0600d14a935b82426165f1f5abdee529ee552b556c7b1e25d0ad1a3d1b76567f0114d05b3963f8d223bef3a57f2ded34a76698e4509a451a2cae779a2764342fd1ab6bad183a589fbcede299480387d84ef5695d14f82d6fda3e4c8c10e123a79d7c1929f9fc840b78a5cb1c86309c6a86d7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "7ab5e3e62cd534b0bdc97aa63f9bf7fe625c9edd313359a7ba7517d68fe660c8148363829d5f7f13b0b0f447bd701260ef369103596d6fbc98c2b4fee14865e33a9f51ce6a0dff179c22b2f2fef657e6146228e65070300ffea08e0e2d89a58cc4eece3108a6b7bcad65798ccbabbc747aa769d45c2c41bc5fd8cba9c0dd1efcf508056411f982d34a6270459020b5118d6f8db77f3d94e13617346d93f6697948f274"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/5:(%$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\-@+#.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x397a}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\\-(\'\xd9,\x9b-[.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "06d1ec2889f9ce05"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "27293ebb5d626078a218649fd554e2871828452680e02337e434197236dfe0e4d3d954b58b08ea1269904a42562ad7c1be193b2bf16b182c2e87ca2d2d4ed3410f526294ad1b251a009f3e7eaf1919bef92fcfaad04c7109d5d5374426b860ead03bc935415f7c6edba18e93b8e6d77e2fe955e296"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*(^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')@%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(4[@%-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3642}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100007}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x1f-$$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+%/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd717}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '+\xe0^[)})+.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':#-\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x710}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x868}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="60e8f89413fd07d11c9e0941b6e994fb8b19c202c7dc528e97742906327c4339e5462114a430eb9fe17df8dcf3a2196b76b17743d4966a7ced79da232496d8bbb4f6a9a12267b300ac990322559be5561d04e32a3004c3543f811a4e7c3a24901064cbe48a3b37c89a2b89cd2f16715843823079658791493b6377405108efb0b771ea418e8db1634435aec484a853c59e84b8c3666b0259fec505bf53447a6946390aff57e05e63ba4b733c265f05", 0xaf}, {&(0x7f0000000100)="8e628c6a72d325fa33ea93570e51a6c82ce354bc8a7b22fd88009dcbbd88968b688901fdb95e11bfd734a16fbdff63bfbf8654d75ed71b56524c3697c3626fb6334dfe1df8e043e969", 0x49}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf0}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdcc2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010102}}}], 0xb8}, 0x4000880) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000007c0)=@generic={0x1, 0x2, 0xa}) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="021200501d0000002cbd7000fbdbdf25"], 0x10}, 0x17, 0x7}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8, 0x800000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000097188670080de0b700010000ab8512800000008925dd81325316c3", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="05000000020000000100"/28], 0x50) fsmount(r6, 0x0, 0x4) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000500)="f4a0c9225ca933a0286057ebb5192c4d018f394e82f0", 0x16}, {&(0x7f0000000600)="6f948e45b8654919273620f6b336f2c8f5aef5e3fe543cf483462aeffe903a564b08afc9fd8c91c3d64007e0285eba6fbf8639dacfde7017a7b814c29e3e3a2bc24458402b289b8a6e7505e3748b3d4e35acd318ad00e5c6efe492b1", 0x5c}, {&(0x7f0000000680)="4390a2326e9c1d8749220cc7c120c91f9f5fe23b65a19bb1d4128896ccfa692802884f209437913c3a148393452a1f37e02b78968ae56b1f1cc9fca460669c6292583412089926c9fe2602fec79dd08401a237f9eb750364054f962cb0df240d89dd8b2cda37161d7500eb919d425fc471770cb56858a98aac45b5", 0x7b}], 0x3, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x48001) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000540)) close(r0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x280440e, &(0x7f0000000140)={[{@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x80}}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@noinit_itable}, {@nombcache}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@oldalloc}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}], [{@hash}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, 'nodioread_nolock'}}]}, 0x1, 0xbe9, &(0x7f0000001c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000340012800e000100697036677265746170000000200002800400120043fa05080005000600f8000504000009000000060002000b000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f00000003c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}], 0x1, 0x20004880) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x220000, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000400)=[{}, {}, {}, {}, {}], &(0x7f0000000500)=0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000300)='./file0\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x903, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000043c0)=@base={0xa, 0x2, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)="b38e1688e36d28f1bb4f6d1e3d5579024aaea7c5b53b3f0813747e74bcadffcf424881fead2b955eeeec895f9c87ef45adc593bf720d6dd8c70befcf5a5d284683761ae579a33f861dcc09680722bd0da389151142c14318a8af0786e1b7f2fdb551f0a5f9ada84b41925f0af964d0fc98c986c409", &(0x7f0000000380), 0xe, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) executing program 0: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0xb1) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x218010, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r2, 0x10, 0x40004, 0x7ffc) write$tcp_mem(r1, &(0x7f0000000240)={0xfffffffffffffffe, 0x2c, 0x0, 0x2c, 0x0, 0x2c}, 0x48) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0x1, 0x3, 0xffff, 0x5}, 0x14) r3 = open(&(0x7f0000000140)='\x00', 0x66842, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000236000/0x4000)=nil, 0x4000}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x54, r5, 0x1, 0x70bd26, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @local, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x3}}}}]}, @TIPC_NLA_SOCK={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4008084) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x100}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000000c0)={r1, r2/1000+60000}, 0x10) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f0000000140)={0x79f, 0x20, 0xd79, 0x20, 0x8}, 0x48) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000001c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000003c0)={{r0, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x80000, &(0x7f0000000240)={@_ha_fsid={[0x3, 0xd34]}, {0xffff, 0x4, 0xd03e, 0x5}}, 0x6ec3, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x4}, 0x1, &(0x7f0000000380)=[{0x3, 0x0, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', &(0x7f0000000340)="bebcad12601c4d6b5936ae63ee81b51cc4923b9ac26dcb3f2a5ffcbaa26dbee1358f177cae64e309", 0x28, 0x20}]}) write$uinput_user_dev(r4, &(0x7f0000000440)={'syz0\x00', {0x2, 0x0, 0x0, 0x3}, 0x50, [0x9, 0x7, 0x8c03, 0x3, 0x5, 0x200, 0xffff0001, 0x400000, 0x3, 0x55, 0x6f, 0xfffffffa, 0x7, 0xb9d1, 0xfffffffd, 0x80, 0x7, 0xe20e, 0x7f, 0x6, 0xffffffff, 0x6, 0x5, 0x1, 0xfffffffb, 0x100, 0x101, 0x5, 0xc11, 0x0, 0x8, 0x3, 0x0, 0xffffffff, 0x5, 0x1, 0x7, 0x10000, 0x10000, 0x0, 0xc, 0xc, 0x4, 0x4, 0x10001, 0x2, 0x101, 0x4735a41b, 0x9, 0xfffffffd, 0xfffffff9, 0x6, 0x7, 0x4, 0x80000001, 0x80, 0x4, 0x0, 0x1, 0x4, 0x7ff, 0x4, 0x7, 0x7], [0xf, 0x3ff, 0x5d, 0xa7, 0xf, 0x10001, 0x7, 0x4, 0x4, 0x4, 0x0, 0x4, 0x1, 0x8, 0x7, 0x5, 0x130, 0x7, 0x10, 0xd, 0x6, 0x5, 0x1, 0xfffffff7, 0x2, 0x7, 0x4, 0x5, 0x1, 0x71, 0xaa2, 0x6, 0x4d, 0xffff3876, 0x7, 0x1, 0x200, 0x4, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x6, 0x8d7, 0x190, 0x4, 0xf, 0x6, 0x9, 0x4, 0xd90, 0x4, 0x0, 0x9, 0x9, 0xfffffc01, 0x56a, 0x94, 0x0, 0x4, 0xca8, 0x8], [0x1, 0x3, 0x4b3b, 0xa87, 0x400, 0x8, 0x8, 0x4, 0x200, 0x7, 0x4, 0x6, 0x2cf3, 0x8, 0xffffffff, 0x8, 0x5, 0x7fffffff, 0x0, 0xb85, 0x5, 0xfffffffa, 0xad2, 0x5, 0x1000, 0x0, 0xd, 0x6, 0x200, 0x80000000, 0x8000, 0x2, 0x2, 0x401, 0xfffffff8, 0x7, 0x5, 0x6, 0x3, 0x0, 0x3, 0x1, 0x7e2, 0xf06f, 0x9, 0x8, 0x10001, 0xde87, 0x0, 0x8, 0x8, 0x0, 0x45a, 0xff, 0x73a4, 0x1, 0x5, 0x5, 0x7f, 0x30, 0x1c1f, 0x2, 0x5, 0x7], [0x1, 0x8, 0x2, 0x1, 0x5, 0x3, 0xfffffffb, 0x2, 0x180000, 0x9, 0x10000000, 0x3, 0xfffffeff, 0x4, 0x2, 0x9, 0x2, 0x4, 0x400, 0x9, 0x78, 0x7, 0x101, 0xffff84aa, 0x8, 0x5, 0x1, 0x5, 0x0, 0xe0a, 0x8, 0x9, 0x8, 0x6655, 0x4, 0x7, 0x10000, 0xfff, 0x6, 0xe4ce, 0x1, 0x1f160000, 0xff, 0x9, 0xed, 0x9, 0x7, 0x9, 0xf6, 0x8, 0x2223c000, 0x4, 0x6, 0xc0000000, 0x3ff, 0x400, 0xfffffffe, 0x9c3, 0x800, 0x9, 0x3ff, 0x8, 0xbcb]}, 0x45c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000fc0)={{r3, &(0x7f00000008c0)='syz0\x00', 0x48200, &(0x7f0000000900)={@_ha_fsid={[0x7, 0x9bf0]}, {0x5, 0x5, 0x800, 0x7}}, 0x7, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x3}, 0x6, &(0x7f0000000f00)=[{0x3, 0xfffffff9, &(0x7f00000009c0)='/proc/sys/net/ipv4/tcp_wmem\x00', &(0x7f0000000a00)="b66cbbba7131c4fda664a1c3f4af06b35c437ca6cb0fde464d6ad23d6a249a3c7e82272b23249d08214731df5a1508922ac73e51e41b973bb1c885e892deaac537d5062a37752ad749383176f66ae5aaac9ac7257a2bd92f50e40ea6af5738a253d4a742a1afe813a56225223c8a88df6418bd91926aa76d9338f2eabc349d9b35aa42a1abb18d5f054900b74f1db776c5e799cd54195da6e5ea652ae5f6f741e426aebe76f2a9118227565c6c5d30ac91afb76ac23f5198ed502f1fe9896341", 0xc0, 0x10}, {0x2, 0x8, &(0x7f0000000ac0)='syz0\x00', &(0x7f0000000b00)="03d4837d5bdc9a231022c1bf9194bb040841e1a10254a514cca00ccf4f370932909c3239e7938171022cf9d0c4ea354ed713c95f5d0a24d0fe8d90eb738f96e19b3a5f871afa74343eba307be15027344a708ff9bd2f290a7597491b5ff3e8b1ce9f47ea62a3f9ef19c7d494cfa11f10484e4c919eaeeb73dfee37b78c89173a5364f8a8f8706b43b8350bc43b9d", 0x8e, 0x30}, {0x1, 0x91, &(0x7f0000000bc0)='syz0\x00', &(0x7f0000000c00)="4122082da18546441ff5c389ccf7d749b62b3bbb7ad7d6d43d6f978fe77fa67e33b5dcc7fa83da3810a3a3d2c2ef221593324c1a59e8406c6ccad2f7dd6c8a57739e4e13d39168cdc30dcece62f75ccccc3fb158ebc3588d18df35bd1de335e4174b182006fb1e14be62f3456734825067a1f0180b8560d716ddace2cd619ab78d8f9f8e937d023922e9e27d4bceee53265fadfda41772a76b6a14f406876e3c727b20fff32c9e903b1fbaecbbf6124c4c3928b02c2f4afeeb2c5426b5b00974df2f6ab4b76677e1e8fecf888710747cb3fd678da406e9622b88bed5b1e6bf52d395534150", 0xe5}, {0x1, 0x800, &(0x7f0000000d00)='\x00', &(0x7f0000000d40)="7797e007e54a3eddca7505372842a9eeec20", 0x12, 0x2a}, {0x3, 0x11, &(0x7f0000000d80)='syz0\x00', &(0x7f0000000dc0)="244e59829b0c1275c1c75ca97dc76be652bd656885e4ab6ac94dedc952657841f2cab021e3bf417114988c559dfcd5c371505d1a4831dbcb5f60cd9fc95f04329c151f61f3c2c222d668ce7094e9604bd06f24b295d9a5fbc09a8092283551061bfd027ca1bb3d8c6a59c00bac3ab5e5fbfbf0adaecbd1a04d3f8b1f8641778fcce72e7ab494c18deebfa9cc9afc6b0cfe5aae335c56c9238e6f3852efe6704a4a72ebc1deb9f035950756b25e19f4fc0b", 0xb1, 0x20}, {0x2, 0x1, &(0x7f0000000e80)='u^..:\x00', &(0x7f0000000ec0)="fa770e24900d544cafb71ad313c73728c6629fcc2b787444fc0cf3807ace715d08e2d4d2a79eb5f3f5ef86f6a31bbc1c872ff88030826200853dfd", 0x3b}]}) ioctl$PPPIOCUNBRIDGECHAN(r5, 0x7434) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x11) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001140)={r0, &(0x7f0000001040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x80000, &(0x7f0000001080)={@_ha_fsid={[0x34b8, 0x8]}, {0x4, 0x5, 0x5, 0x8}}, 0xc, &(0x7f00000010c0), &(0x7f0000001100)=0x5ba}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r7, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x44) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x3) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001300)=0x0) fcntl$setown(r5, 0x8, r9) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000007840)={&(0x7f0000007680)=[&(0x7f0000001340)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000001380)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000013c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x401}, &(0x7f0000001500)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000001540)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xfffffffb}, &(0x7f0000001680)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f00000016c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x5, 0xb}, {0x7b8, 0x4}, {0x0, 0x100000001}, {0xb722, 0x1}, {0x5ae, 0x4}, {0x400, 0x1}, {0x9ed, 0x7ff}, {0x400, 0x80000000}, {0x6, 0x6}, {0xfffffffffffffffd, 0x4}, {0x8254, 0x4}, {0xff, 0x1}, {0xca5, 0x3}, {0x5, 0x101}, {0x5, 0x3}, {0x4, 0x2b}, {0x6, 0x4}, {0x5, 0x8000}, {0x0, 0x3}, {0x2, 0x4}, {0x9, 0x10}, {0x8001, 0xc9a}, {0x1ff, 0x6}, {0x1, 0x1}, {0x0, 0xfffffffffffffffd}, {0x2, 0x1}, {0x1, 0xe5}, {0x4, 0xfff}, {0x8, 0xc}, {0x0, 0x8170}, {0x8, 0x2}, {0x8, 0x8000000000000001}, {0x5, 0x81}, {0x9, 0x6}, {0x3, 0x40}, {0x200000, 0xffffffffffff6547}, {0x7, 0x1}, {0xfffffffffffffff7, 0x10}, {0x101, 0x100}, {0xffffffffffffffff, 0x4}, {0xfffffffffffffffa}, {0xe, 0x80000}, {0x3, 0x8}, {0x3a}, {0x101, 0x4}, {0x7ff, 0x6}, {0x8, 0x3}, {0x6, 0xe}, {0x26, 0x5}, {0x5, 0xc00000000000}, {0x5, 0x5}, {0x1, 0x248d}, {0x4, 0x2}, {0x3ff, 0x7}, {0x3000000000000, 0xfff}, {0x9, 0x2}, {0x8, 0x1}, {0x2, 0x9}, {0x9, 0x100000000}, {0x1000}, {0x0, 0x1}, {0xef7, 0x8}, {0x100000000, 0xff}, {0x1ca8, 0x8}, {0x5c2d, 0x3fa}, {0x1, 0x7}, {0x8, 0x9}, {0xd1, 0x6}, {0x2, 0x8}, {0x2, 0x3}, {0x7aa}, {0x0, 0x9}, {0x100, 0xa}, {0x6, 0xfff}, {0x9}, {0x6, 0x177}, {0x0, 0x6}, {0x7, 0x5e36}, {0x9, 0xff}, {0xfffffffffffffff9, 0x1}, {0x9, 0x6}, {0x7, 0x6d50}, {0x6, 0x46}, {0x4, 0x9}, {0x8592, 0xe4}, {0x0, 0x1ff}, {0x10001, 0x4}, {0x10001, 0xff}, {0x6}, {0x7, 0x543}, {0x5, 0xfffffffffffeffff}, {0x3, 0x2}, {0x3, 0x2}, {0x8000000000000001, 0x4fd4}, {0x7, 0x2}, {0x5, 0x7}, {0x6, 0x4}, {0xfffffffffffffff8, 0x6}, {0x1, 0x4}, {0xe, 0xd}, {0xeda, 0xc}, {0x6, 0x7}, {0x2895, 0x5}, {0x4, 0x5}, {0x8, 0x7f38}, {0x8000, 0xfffffffffffffffc}, {0xecc, 0x5}, {0x4, 0x80000000}, {0x100000001, 0x100000000}, {0x3ff, 0x4}, {0x9, 0xfc04}, {0x100000001, 0x7}, {0x7e5, 0x8000000000000001}, {0x3e, 0x8}, {0x8, 0x97cb1cd}, {0xac, 0x7ff}, {0x471d56e80000, 0x2}, {0x4, 0xf}, {0x6, 0x5}, {0x1, 0xf1e}, {0x1, 0x1}, {0xfffffffffffffff7, 0x4}, {0x8, 0x2}, {0xb4, 0x100000001}, {0x2, 0xffffffffffffffff}, {0x5, 0x80}, {0x7}, {0x8000000000000001, 0x81e8}, {0x2000000000, 0x2}, {0x71b8, 0x10001}, {0x7fffffff}, {0xfffffffffffffffb, 0x8000}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x5c}, {0x7, 0xa}, {0x5, 0x3}, {0x2, 0x8}, {0x4, 0xfffffffffffffffe}, {0x3, 0x4}, {0x7, 0x7}, {0x80, 0x76}, {0x9, 0x7}, {0x6, 0x9}, {0x1, 0xb3}, {0x4, 0x10}, {0x6, 0x2}, {0xb, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0xc7, 0x8000000000000000}, {0x3, 0x53f1}, {0x7, 0x3}, {0x1, 0x1}, {0xffffffff80000001, 0x5}, {0x1, 0x8}, {0x7, 0x9}, {0x3, 0x20f72801}, {0x4, 0x6}, {0x7f, 0x8}, {0x80000000}, {0x5, 0x2}, {0x1, 0x7}, {0x1, 0x7}, {0xcc, 0x3}, {0xfffffffffffffffe}, {0x10, 0x400}, {0x2, 0x7ff}, {0x1a, 0x8}, {0x401, 0x2}, {0x4, 0x80}, {0x8, 0x8}, {0x3ff, 0xa}, {0xfffffffffffffc01, 0xb}, {0x7, 0xc0}, {0x7fffffffffffffff, 0x9}, {0x8, 0x5}, {0x2, 0x5}, {0x3, 0xd63}, {0xfffffffffffffffe, 0x2}, {0x24c, 0x5}, {0x2, 0x6dd}, {0x8, 0x4}, {0x80000001, 0x2}, {0xfff, 0x4c}, {0x6, 0x7}, {0x3, 0x7}, {0x80000001, 0x3}, {0x1}, {0x6, 0x8}, {0x6, 0x180000000}, {0x81, 0xbb}, {0xbda, 0xfffffffffffffe01}, {0xffffffffffffffff, 0xa}, {0x7, 0x5f58e4fd}, {0xfffffffffffffff9, 0x4}, {0x3ff, 0x5}, {0xfffffffffffffffa, 0x1}, {0x4, 0x8}, {0x6, 0x80}, {0xe34, 0x2}, {0x1, 0x80}, {0x0, 0x4}, {0x6, 0x3}, {0xb, 0x2}, {0x80000001, 0x6}, {0x11bd, 0x9}, {0x0, 0x1}, {0x401, 0x5}, {0x0, 0x9}, {0x9}, {0x100000001, 0x7}, {0x0, 0x100}, {0x0, 0x9}, {0x2}, {0x151, 0xfffffffffffffff5}, {0xfffffffffffffff9, 0xffffffffffffffff}, {0x3ff, 0x9}, {0x8000000000000001, 0x9}, {0x3f42269a, 0x3431}, {0xe6}, {0x1, 0xe}, {0x4, 0x6}, {0x8, 0x10001}, {0x100000001, 0x5}, {0x1000, 0x4000000}, {0x8000000000000001, 0x7}, {0x7fff, 0xa930}, {0x100000000}, {0x500}, {0x340000000000000, 0x6}, {0x3ca, 0x4}, {0x6, 0x7fff}, {0xe, 0x658c}, {}, {0x8, 0x20c}, {0x9, 0x1}, {0x8, 0x5}, {0x0, 0x5}, {0x6a0f, 0xb}, {0x1, 0x3}, {0x53e}, {0x3, 0xb}, {0x4, 0x100000000}, {0x6, 0x4}, {0x8, 0x2}, {0x8001, 0x3}, {0xff, 0x2}, {0x1, 0x5}, {0x101, 0xe}, {0x200000000, 0x7aee}, {0x100000001, 0x8}, {0x1, 0x7fffffffffffffff}, {0xf, 0x8000000000000001}, {0x2, 0x200}]}, &(0x7f0000002700)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000002740)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000027c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000002800)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000002840)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000002880)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000028c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000002900)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002940)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002980)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f00000029c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x7}, &(0x7f0000002b00)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000002b40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000002b80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x80}, &(0x7f0000002cc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002d00)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000002d40)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002d80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002dc0)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x964, 0x6}, {0x5, 0x1}, {0x2, 0xfffffffffffffc90}, {0x2, 0xec52}, {0x5, 0x8}, {0x1500000000, 0x7}, {0xbdb7ff9, 0x567}, {0x0, 0x81}, {0x9, 0x1}, {0xfff, 0x7}, {0x2, 0xab2}, {0x76}, {0x6, 0x7}, {0x8, 0xfffffffffffffff9}, {0x1, 0x7f}, {0x91d, 0x3}, {0x2, 0x4}, {0x8, 0xdf6}, {0x0, 0x3}, {0x7f}, {0x9}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x9}, {0x9, 0x7}, {0xfffffffffffffeff, 0x5}, {0x0, 0x2}, {0x5, 0xc}, {0x10001, 0x6}, {0x2, 0x100000001}, {0xfffffffffffffff9, 0x3}, {0x1b, 0x2}, {0x100000000}, {0xcf1, 0x5}, {0x7ff, 0x2}, {0x8, 0x8000000000000001}, {0x0, 0x40}, {0x0, 0x3}, {0xffffffffffffffbc, 0xa54}, {0xfffffffffffffffd, 0x7}, {0x5, 0xb}, {0x5, 0x9}, {0x8000000000000000, 0x200}, {0x6, 0x3}, {0xfffffffffffffff8, 0x2}, {0x6, 0x9}, {0xffffffffffffffff, 0xfffffffffffff000}, {0x765, 0x101}, {0x5, 0x100}, {0x8, 0xffffffffffffffff}, {0xd211, 0x2}, {0xfff, 0xffffffffffffffff}, {0xfffffffffffffffa, 0x9}, {0xfffffffffffffffe, 0x7fffffffffffffff}, {0xb, 0x6}, {0x8, 0x7}, {0xffffffffffffff7f, 0x5}, {0x62a06ccd, 0xad0a}, {0x1, 0xef}, {0xffffffffffffffff, 0x389}, {0x400000, 0xa4e}, {0x8000000000000000, 0xfffffffffffffffc}, {0x2, 0x100}, {0xa00000000000}, {0x2, 0x40}, {0x5, 0x64}, {0x5, 0x100000001}, {0x2972, 0x6}, {0x9, 0x9f08}, {0x4, 0x4}, {0xcded, 0xffffffffffffffff}, {0xbf, 0xd2}, {0x8, 0x8000000000000000}, {0x7, 0x3}, {0x1, 0xe58}, {0x0, 0xe}, {0x80, 0x8}, {0x10001, 0x164a0f54}, {0x4, 0x3}, {0x9, 0x8}, {0x9, 0x3}, {0x4cd, 0x200}, {0x40, 0x5}, {0x9, 0x9}, {0x0, 0x9}, {0x9, 0x3}, {0x6b8, 0x10}, {0x7, 0x9}, {0x16c4, 0x8000000000000000}, {0x1e00, 0x40}, {0x8000000000000000, 0x100000000}, {0x6, 0x54d53a9b}, {0x3, 0xaa10}, {0x47b6, 0x8}, {0x2, 0x5}, {0x8, 0x924}, {0x0, 0xd}, {0x1, 0xe1}, {0x10, 0x9}, {0xcfc, 0x4}, {0x9, 0x3}, {0xb, 0x8}, {0xa, 0x3}, {0x5, 0x3c7f}, {0x7a1c, 0x2acf}, {0xffffffffffff92d0, 0xfffffffffffffffc}, {0x8dbb, 0x4}, {0x0, 0x8}, {0x8000000000000001, 0xfffffffffffffffb}, {0x7, 0xd40}, {0xfffffffffffffb19}, {0x80, 0x9}, {0x200, 0x5ba7}, {0x3, 0xa29}, {0x8, 0xa}, {0x10001, 0x8}, {0x5, 0x9}, {0x0, 0xd188}, {0x5, 0xda2c}, {0x4, 0x7}, {0x8, 0x5}, {0x6f, 0x8c5}, {0xd, 0x1ff}, {0x7, 0x9f}, {0x43b, 0x2}, {0x7fffffff, 0x2}, {0x9, 0xffffffff}, {0x4, 0x8000}, {0xa, 0x4000}, {0x2, 0x80}, {0xe6b, 0xfc}, {0x8dc, 0x9}, {0x2}, {0x5, 0xffffffffffffff01}, {0x3, 0x6}, {0x100000001, 0x1ff}, {0x6, 0x5e70}, {0x7fffffff, 0x4}, {0x9, 0x8}, {0x9, 0x6}, {0x4, 0x8}, {0x8, 0x8001}, {0x1, 0xe}, {0x0, 0x4}, {0x3, 0x1}, {0x3}, {0xd1, 0x8000}, {0x6, 0x4}, {0x1, 0x10001}, {0x6, 0x5b}, {0x2, 0x8}, {0x0, 0xfffffffffffffffd}, {0x3, 0xfc}, {0x5f, 0x5a06}, {0x401, 0x8000000000000001}, {0x2, 0x7}, {0x9, 0xa}, {0x7fffffff, 0x8000000000000000}, {0x6936, 0x9}, {0x3, 0x1}, {0xf9, 0x3}, {0x6, 0x6}, {0x1}, {0x4, 0xc1}, {0x7, 0x19}, {0x6, 0x1f}, {0xc9, 0x3}, {0x10001, 0x3}, {0x4, 0x94c}, {0x2, 0x100000001}, {0x10001, 0xb52}, {0x7f, 0x2}, {}, {0x201e, 0x4}, {0x6, 0x3}, {0xfffffffffffffff8, 0x10001}, {0x10000, 0x5}, {0x9}, {0x53f, 0x3}, {0x6, 0x8000}, {0x300000000000, 0x3}, {0x7f, 0x3}, {0x0, 0x1ff}, {0xffffffffffffff01, 0x8001}, {0x8000000000000, 0x7}, {0x4, 0x8000000000000000}, {0x2, 0x6}, {0x5, 0x9}, {0xfffffffffffffffc, 0x6}, {0x1, 0x2}, {0xff, 0x8}, {0x3, 0x6}, {0x100}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xf}, {0x2, 0x3}, {0x8000000000000000, 0x81}, {0xfffffffffffffff6, 0x1}, {0x6e54, 0x6}, {0x7a0d, 0x9}, {0x7, 0x7ff}, {0x9, 0x9}, {0xc0000, 0x3}, {0x6, 0xfd}, {0x8000, 0x6}, {0x5, 0x1}, {0x4, 0x5}, {0x6, 0x7ff}, {0x1d1, 0x6}, {0x5, 0x9}, {0x8, 0x5}, {0x3fffc, 0xfffffffffffffff9}, {0x4, 0xe}, {0x6, 0x81}, {0x950, 0x8000000000000001}, {0x6, 0x650}, {0x4, 0x9}, {0x2}, {0x4, 0x101}, {0x3, 0x8}, {0x5, 0xfffffffffffffff9}, {0x200, 0x101}, {0x100, 0x7}, {0x7f, 0x141e0000000000}, {0xfff, 0x8}, {0x4, 0xfffffffffffffc00}, {0x3, 0x4}, {0x0, 0x3b}, {0x81, 0x3}, {0x40, 0x3}, {0x3, 0x5}, {0x400, 0x9}, {0x6, 0xfffffffffffffff4}, {0xe, 0x3}, {0xcbe, 0x80000001}, {0x5, 0x1}, {0x1a0000, 0x100000001}, {0x1, 0x3}, {0x5, 0x8001}, {0xf}, {0xf, 0x80000}, {0x0, 0x6}, {0xd409, 0x24b}, {0x5, 0xff}, {0x6, 0x5}, {0x9, 0xc7c}, {0x2, 0x7}, {0x6, 0x3}, {0xf4d, 0x2}, {0x7, 0xd}, {0x1, 0x1000}, {0x9, 0x7fffffffffffffff}, {0x9, 0x2}, {0xee4, 0x364}]}, &(0x7f0000003e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000003e40)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000003ec0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000003f40)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003f80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x20000000}}, &(0x7f0000003fc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000004000)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x7, 0x5}, {0x0, 0x58}, {0x4, 0x7}, {0x0, 0x2}, {0xfffffffffffffffb, 0x1000}, {0x6, 0x2}, {0xffffffffffffffff, 0x8}, {0x7, 0x3b6f}, {0xe, 0x9}, {0x6, 0x2}, {0xfffffffffffffffa, 0x3ff}, {0x80000001, 0x5}, {0x3, 0x4}, {0xa, 0x4}, {0x9, 0x7}, {0x10001, 0x7}, {0x1, 0x5}, {0x3a, 0x6}, {0x6319, 0x8000000000000000}, {0x906d, 0x5}, {0x9, 0x4}, {0x998, 0x81b}, {0x33ccf3bd, 0x3ff}, {0x5, 0x8000}, {0x9, 0x200}, {0x6, 0x2}, {0x8, 0x6}, {0x9}, {0x0, 0x9}, {0xa, 0x9}, {0x2, 0xf}, {0xa, 0x3}, {0x9b0, 0xffffffff}, {0x5, 0xdff9}, {0x749583bb, 0xb}, {0xfff, 0x303}, {0x1, 0xa}, {0x6, 0x31d8}, {0x6}, {0x0, 0x8}, {0x7fffffff, 0x9}, {0x5, 0x3}, {0xfffffffffffffff5, 0xef}, {0x9, 0x5}, {0x6, 0x1}, {0x100000000, 0xd000000000}, {0x6, 0x5}, {0x9, 0x8}, {0xa, 0x4}, {0x4b669105, 0x100000001}, {0x0, 0x7fffffff}, {0x9, 0x7}, {0x8f2, 0xc}, {0x5, 0x1}, {0x8d, 0xb}, {0x8000, 0x100}, {0xfffffffffffffff6, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x2a, 0xb46}, {0x7, 0x400}, {0x62, 0x1}, {0x9, 0x2df1c21a}, {0x9, 0x2}, {0x2, 0x9}, {0xfffffffffffffffc, 0x9}, {0x7}, {0x9}, {0x1, 0x4}, {0xea, 0x1}, {0x4, 0x4}, {0x2, 0x101}, {0x26e4, 0x6}, {0x10, 0x7}, {0x6, 0x5}, {0x4}, {0x3, 0xd9}, {0x29, 0x5}, {0x70a2c754, 0xa16}, {0x8000000000000000, 0x4}, {0x7, 0x4eef}, {0x2, 0x100000001}, {0x3, 0x8001}, {0x6, 0x9}, {0x2, 0xe}, {0xfffffffffffffff8, 0x50000000}, {0xf8, 0xff}, {0x3bfe, 0x80}, {0x6, 0x8}, {0x3707, 0x4}, {0x7}, {0x7f17, 0xffffffff}, {0x1, 0x7}, {0x1, 0x2}, {0x9}, {0x0, 0xffff}, {0x100}, {0x2, 0x6}, {0xfffffffffffffff9, 0x4}, {0x4, 0x3390}, {0x8000000000000000, 0x7fff}, {0x1ff, 0x1}, {0x8, 0x6f2fcd5d}, {0x400, 0x5}, {0x0, 0x5}, {0x8000000000000000, 0xb}, {0x4}, {0xe000000, 0x5}, {0xff9b, 0x714bee71}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x9, 0x800}, {0x9fd0, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x2}, {0x333, 0x9}, {0xa24, 0xffffffff}, {0x3, 0xffffffff}, {0x4, 0x7f}, {0x7, 0x400}, {0x2}, {0x5, 0x101}, {0x10, 0x800}, {0x5, 0xfe}, {0x9, 0xffffffffffffffff}, {0x7ff, 0x31}, {0x0, 0x8}, {0xe4ab, 0x9}, {0xffff, 0x2}, {0x8, 0x8}, {0xfff, 0x7ff}, {0x8c34000000000000, 0x7fb}, {0x3ff, 0xc3a1}, {0x7fffffff, 0x1}, {0x0, 0xffff}, {0x3, 0x42d}, {0x28a, 0x8}, {0xffffffff, 0x100000001}, {0x9, 0xfffffffffffffff8}, {0xe6a3}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x647}, {0x7fffffff, 0x8}, {0x8, 0xc1}, {0xffffffffffffff13, 0xd}, {0x9, 0x3}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x3ff}, {0x731278f4, 0x2}, {0x3, 0x4}, {0x2, 0x9}, {}, {0x5d, 0x7fff}, {0x1, 0xdd}, {0xd, 0x9}, {0x8, 0x10001}, {0x100, 0x4}, {0x6, 0x41f}, {0x1665, 0x400}, {0x3, 0x8}, {0x8a6, 0x7ff}, {0x1187, 0x10001}, {0x3, 0x6}, {0x2, 0x7fffffffffffffff}, {0x6d140, 0x7}, {0x9, 0x3}, {0x80000001, 0x8}, {0x6, 0x1}, {0xa, 0x7}, {0xff, 0x3607}, {0xd09a}, {0x8, 0x7}, {0x8, 0x9}, {0xffff, 0x6}, {0x52, 0x30000000000}, {0x7, 0x921}, {0x3, 0xf}, {0x8, 0x7}, {0x8, 0x2}, {0xf, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0xf6b, 0x8}, {0x9, 0x5}, {0x3de, 0xfff}, {0x1ff, 0x9}, {0x3, 0x85}, {0x6, 0x3}, {0x209, 0xdab}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0xd}, {}, {0xa, 0x7fffffffffffffff}, {0x48000, 0x1}, {0x7, 0x8}, {0xfffffffffffff801, 0x2}, {0x5, 0xfffffffffffffff9}, {0xffffffff00000001, 0x3}, {0x6, 0x213}, {0x5a6e, 0x1}, {0x8, 0x4}, {0x8, 0x200}, {0x7, 0x4b8bbe58}, {0x8, 0x8}, {0x101, 0xfff}, {0x8, 0x1}, {0x8000000000000001, 0x5}, {0x3, 0x5bc}, {0x8, 0x10}, {0x601, 0xa}, {0x4, 0x200}, {0x8000000000000000, 0xc}, {0x10000, 0x8}, {0x3ff, 0x972}, {0x5, 0x3}, {0x4, 0x2}, {0x4, 0x1b48}, {0x200000000000, 0x3ff}, {0x9, 0x6f}, {0x1, 0x401}, {0x80000001, 0x9}, {0x3, 0x5}, {0x10, 0x4}, {0x4}, {0x4, 0x1d}, {0x3ff, 0x81}, {0x7ff, 0x100000001}, {0x4, 0x3}, {0x475}, {0x9, 0x6e}, {0xfffffffffffffd9d, 0x8}, {0xae0}, {0x0, 0x4}, {0x9, 0x7fffffffffffffff}, {0x5, 0xfffffffffffffffd}, {0x2, 0x7}, {0x6, 0x5}, {0x800, 0xa4c}, {0x1, 0x7}, {0x369, 0x7}, {0x43, 0x5}, {0xffffffff}, {0x100000000, 0x6}, {0x0, 0x31}, {0xc, 0x4}, {0x101, 0x8}, {0x4, 0x2}, {0x2, 0xffffffffffff13aa}, {0x9, 0x7}]}, &(0x7f0000005040)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005080)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000005100)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005140)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x20}, &(0x7f0000005280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f00000052c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000005300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000005340)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000005380)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000005400)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x1738, 0xff}, {0xd0d}, {0x400, 0x1}, {0x101, 0xf5}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0xfffffffffffffffc}, {0x7fffffff, 0x5}, {0x6, 0x3}, {0x0, 0x80000000}, {0xfffffffffffffffe}, {0x8000000000000000, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x40, 0x6}, {0x4, 0x80000000}, {0xb, 0x8000000000000000}, {0x1000}, {0x0, 0x100}, {0x12, 0x581}, {0x2, 0xc69}, {0x100000001, 0xbe2}, {0x0, 0x6}, {0x100, 0x6}, {0x4, 0x1dae}, {0x7, 0x6}, {0x0, 0x400}, {0x71, 0x1}, {0x56b3, 0x3}, {0x8, 0x2}, {0x6, 0x15e}, {0xa6b, 0x8000000000000001}, {}, {0x0, 0x4d90}, {0xffffffffffffffff, 0x3}, {0x2, 0x9}, {0x40, 0xffffffff}, {0x7ff}, {0x6, 0xd05f}, {0x6, 0x40}, {0x400}, {0x6, 0x1ff}, {0x5d008228, 0x9}, {0x8, 0x8}, {0x7fffffffffffffff, 0xfffffffffffffffe}, {0x10000, 0x7}, {0x2, 0xfffffffffffffff0}, {0xc4, 0x6}, {0x9, 0x7}, {0x0, 0x9}, {0x80000001, 0x1000}, {0x7, 0xffff}, {0x5, 0x8}, {0x3a54, 0x6}, {0x3, 0x4}, {0x3, 0x3}, {0xfb, 0x8f55}, {0x2, 0xc}, {0x7fff, 0x8}, {0x3, 0x8}, {0x4, 0x10001}, {0x6cc, 0x10000}, {0xfffffffffffffffd, 0x9}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x1000000000000000, 0x1}, {0x80000001, 0x2800000000000}, {0xee2, 0x100}, {0x7fffffffffffffff, 0x9}, {0x5, 0xff}, {0x5, 0x3}, {0x5, 0x80000001}, {0x598, 0xe5}, {0x2}, {0x0, 0x4}, {0x6, 0x5c94}, {0x6, 0x3}, {0x6, 0x7fffffff}, {0xabfd, 0x1000}, {0x0, 0x2}, {0x5, 0x8518}, {0x9, 0x8c}, {0x241, 0x5}, {0x8000000000000000}, {0x39c, 0x8}, {0x10000, 0x3}, {0x2, 0x8}, {0x3ff, 0xb9}, {0x7ff, 0x7}, {0x4, 0x6}, {0x0, 0xfffffffffffffffe}, {0x5, 0xb}, {0xe555, 0xe}, {0x62f, 0x1}, {0x80000001, 0x9}, {0xfffffffffffffff7, 0xd9}, {0x8986, 0x1}, {0xc7f, 0x6}, {0x9}, {0x0, 0x6}, {0x7, 0xfffffffffffffff7}, {0x0, 0xffffffffffffffff}, {0x6, 0xf444}, {0x7, 0xff}, {0x7, 0x9}, {0x1, 0xfffffffffffffc01}, {0x1, 0x1}, {0xa8f9, 0x4}, {0x100000001, 0x4}, {0x4, 0x100000001}, {0xdbf2594}, {0x2, 0x5}, {0x9, 0xb1}, {0x4, 0x8}, {0x88b3, 0x3a81d7cf}, {0x0, 0x2}, {0xffffffffffff7a15, 0xffffffffffffff45}, {0x4, 0x100}, {0x6, 0x8}, {0xfff, 0x3ff}, {0x8000000000000000, 0x5}, {0x8000000000000000, 0x9}, {0xc, 0x1a0000000000}, {0x7, 0x400}, {0xfe, 0x5}, {0x200, 0x3}, {0x1, 0x8}, {0x1ff, 0x8f}, {0x8000, 0x1}, {0x7fffffff, 0x81}, {0x2, 0xffffffff}, {0x8, 0x22df7795}, {0x7, 0x8}, {0x2, 0x6}, {0xf, 0x4ec}, {0x7, 0x7}, {0x1, 0x1}, {0xa08d, 0x7}, {0x2, 0x400}, {0x100000001, 0x8}, {0x268, 0x9}, {0x7fffffff, 0x4}, {0x6, 0xc}, {0x7ff, 0x10000}, {0xd, 0x7}, {0x92a1, 0x8000000000000001}, {0xfffffffffffff574, 0x3c}, {0x9, 0x1}, {0x25d2, 0x2}, {0x7fff, 0x6e00}, {0x8, 0x3}, {0x5, 0x3}, {0x40000}, {0xffff, 0x9}, {0x8b, 0x3}, {0x2, 0x5}, {0x800, 0x4}, {0x10000, 0x7684}, {0x6d56, 0x2}, {0x7fffffff, 0x6}, {0x10001, 0x100000001}, {0x3, 0x3}, {0x7, 0xcb}, {0x4, 0x8169}, {0x400, 0x5}, {0x2, 0x1}, {0x1, 0x1000}, {0x4bfe, 0x2}, {0x10001, 0x1}, {0x0, 0x2}, {}, {0x4, 0x1}, {0x400, 0x9}, {0x3c5e, 0x3}, {0xe130, 0x6}, {0xc}, {0x10, 0xabd7}, {0x4, 0x2}, {0x401, 0x96cf}, {0x6938, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x100000000, 0x9}, {0x100000000, 0xfffffffffffffff7}, {0x4, 0x5}, {0x3, 0x5}, {0x1ed, 0xf5f9}, {0xb2de, 0x9}, {0x2, 0x37b0}, {0x6, 0x9}, {0x6a8, 0x5}, {0xc0, 0x40}, {0x81, 0x2c1}, {0x81, 0x8}, {0x7ff, 0x3}, {0x2, 0xfffffffffffeffff}, {0xaf6c, 0x4}, {0xfffffffffffffffb, 0x8}, {0xfffffffffffffff9, 0xfffffffffffffc00}, {0x3}, {0x800}, {0x3, 0x10000}, {0x7f, 0x34d9b582}, {0x3, 0x7}, {0x9, 0x4c}, {0x3, 0x9}, {0x10001, 0xd3a2}, {0x5, 0x200}, {0x4, 0xc}, {0x1}, {0x10, 0xa000000}, {0x5a9, 0x100000000}, {0x6, 0x9}, {0xfffffffffffffffb, 0x5b9}, {0x7fffffffffffffff, 0x7}, {0x2000000, 0x9}, {0x1}, {0x3, 0x3}, {0x3a1, 0x6}, {0x2, 0x10001}, {0x93, 0xa6}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x40}, {0x2, 0x7fffffffffffffff}, {0x3, 0x100}, {0xffffffffffffff83, 0xd}, {0x9, 0x3}, {0x9, 0x37f4}, {0x8, 0x4b}, {0x4, 0x7ff}, {0x1f5, 0xc}, {0x48a, 0x4a0}, {0x0, 0x1000}, {0x7, 0x7}, {0x6, 0x7fffffffffffffff}, {0x4, 0x4}, {0xb3, 0x69}, {0x4, 0x2}, {0x4, 0x2}, {0xfffffffffffffff7, 0x2}, {0x2, 0x10000}, {0x57d}, {0xe394, 0x483}, {0x2, 0xe5}, {0x0, 0x8f3}, {0x2, 0x9}, {0x320d, 0x51}, {0x3000000000000000, 0xe491}, {0x2, 0x4}, {0x5, 0x7}, {0x80, 0x3}, {0x2, 0xfffffffffffffffd}, {0x350a, 0xffffffffffffff00}]}, &(0x7f0000006440)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000006480)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000006500)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000006580)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x7fffffff, 0x100000000}, {0x7, 0x7fffffff}, {0x7, 0xffffffff80000000}, {0x1, 0x2}, {0x0, 0x7f}, {0x7fffffff, 0x3}, {0x5, 0x61a}, {0x6, 0x3}, {0x0, 0x75}, {0xc, 0x2}, {0x8, 0x4}, {0x8, 0x18d3}, {0x1, 0xc3}, {0x5, 0x1}, {0x4, 0x5}, {0x142, 0x2}, {0xd0, 0x80}, {0x2, 0x8000}, {0x9, 0x5e}, {0x7, 0x9}, {0x80000001, 0x7}, {0x6, 0x80000000}, {0x3820e88a, 0x9}, {0xde3, 0x9}, {0x2, 0x8b37}, {0x100000000, 0x1}, {0x3, 0x4}, {0x5, 0xa7}, {0x2, 0x1}, {0x8, 0x93f8}, {0x7, 0x1}, {0x0, 0x5}, {0xfffffffffffffffe, 0xf}, {0x3, 0xb19f}, {0xe3c, 0x80000001}, {0x5, 0x7}, {0x9, 0x6}, {0xfd, 0x8}, {0x2, 0x7}, {0xffffffffffffffff, 0x9}, {0x8, 0x8000000000000001}, {0x9, 0x101}, {0x101, 0x3ff}, {0x3, 0x4}, {0x400, 0x2}, {0x4b, 0x4}, {0x0, 0x98}, {0x401, 0x400}, {0x9, 0x101}, {0xb, 0x8000000000000001}, {0xe48f, 0xe}, {0xff, 0x3}, {0x200, 0xffff}, {0x8, 0xcd7}, {0x2, 0xfffffffffffffff9}, {0x5}, {0x10, 0x250b}, {0x8}, {0x891, 0xfffffffffffffffa}, {0x1, 0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0x8}, {0xe8, 0x1}, {0xffffffffffffd1a5, 0xffffffffffffbcf3}, {0x7, 0xd}, {0x401, 0x5}, {0x100000000, 0x5}, {0x2889}, {0x100000000, 0x2}, {0x100, 0x6}, {0x7fffffffffffffff, 0xffffffffffffffff}, {0x7c2, 0x100000001}, {0x2, 0xfffffffffffffffe}, {0x1, 0x7c14}, {0x3, 0xfffffffffffffffc}, {0x2bac, 0x3}, {0x80000001, 0x10001}, {0x7, 0x5}, {0xfffffffffffffe00, 0xffffffff97e11128}, {0x4, 0x3}, {0x1000, 0x4143}, {0x9, 0x5}, {0x6, 0x7}, {0x7, 0xfffffffffffffff3}, {0x4, 0x7}, {0x8, 0x5}, {0x8}, {0xe3c, 0x5}, {0x43a, 0x9}, {0x8000000000000000, 0x3}, {0x200, 0xc4}, {0x8, 0x5}, {0x6, 0xfffffffffffffffc}, {0x3, 0x80}, {0x7, 0xd04}, {0x5, 0x1}, {0x3}, {0x1, 0x6}, {0x7db546de, 0x9}, {0x401, 0x354}, {0x7}, {0x5107, 0x9}, {0xc9b, 0x1}, {0x0, 0x4}, {0x7f000000000, 0x10000}, {0x6, 0x5}, {0x6, 0x48}, {0x6, 0x2}, {0x7fffffffffffffff, 0x4}, {0x10001, 0x8}, {0xff, 0x4}, {0x100, 0x5}, {0x8000000000000000, 0xffffffff80000001}, {0x0, 0x80}, {0x2, 0xff}, {0xed47}, {0x7, 0x9}, {0x9, 0xb}, {0x6, 0xbeac}, {0xe, 0x6}, {0x7ff, 0xdf}, {0x1, 0x3}, {0x5, 0x2}, {0x800, 0x101}, {0x8, 0x5}, {0xfffffffffffffffb, 0x2}, {0x8, 0xf}, {0x349d7a78, 0x6}, {0x6, 0x66}, {0xffffffffffffffff, 0x200}, {0x2, 0x7521}, {0x9, 0x80000001}, {0x10, 0x3}, {0x80000000, 0x8}, {0x8, 0x10}, {0x0, 0x9}, {0x100000001, 0x999e}, {0x5, 0x2}, {0x3, 0x4}, {0x70a5d678, 0x5}, {0x4, 0xe0}, {0x1ff, 0x6}, {0x2588, 0x7}, {0x1000000, 0x5}, {0xffffffffffffff45, 0x5}, {0x3, 0x8}, {0x5b6a, 0x2}, {0x8, 0x9}, {0x0, 0x4}, {0x0, 0xfffffffffffffff8}, {0x5, 0x800}, {0x5, 0x2f}, {0x0, 0x40000000000}, {0x8, 0x4149}, {0x3f, 0x6}, {0x4, 0x81}, {0x4, 0x6}, {0xffffffffffffffff, 0x753}, {0x81, 0x80}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x35}, {0xffffffff7fffffff, 0xfffffffffffffffc}, {0x10, 0x4}, {0x4, 0x7f}, {0x2, 0x5}, {0x6, 0xffffffff}, {0x1, 0x5ce}, {0x8, 0x3}, {0x9, 0x6}, {0x10, 0x40}, {0x6, 0x9}, {0x4, 0xca30}, {0x9, 0xffffffffffffffff}, {0x4, 0xc}, {0x2, 0x6fed}, {0xeeef, 0x6}, {0x7, 0x9}, {0x370781d4, 0xffffffffffffffff}, {0x1000, 0x19d5}, {0x1432, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x8000000000000000, 0x8}, {0x8, 0x1}, {0x8001, 0x3}, {0x7, 0x2}, {0x7, 0x8000000000000000}, {0x5, 0x6}, {0x75e69b0b, 0x1}, {0x3, 0x4}, {0xffffffff, 0x7}, {0x6, 0x1}, {0x3, 0x7ff}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x200000000}, {0x4, 0x5}, {0x3e8, 0x1}, {0x10001, 0xf}, {0x8000000000000000, 0x7}, {0xff, 0x1b}, {0x3, 0xf9ab}, {0xaa75, 0x3}, {0x0, 0x2}, {0x5adb89a8, 0xfffffffffffffffa}, {0x81, 0xb9de}, {0x5, 0x4}, {0x7}, {0x3, 0x6}, {0xffffffff, 0x5}, {0x7, 0x5}, {0x7, 0x7c05}, {0x0, 0x401}, {0x8, 0xb}, {0x1, 0xffffffffffffffff}, {0x3, 0x21cc}, {0x7, 0x7}, {0x8001, 0x6}, {0x3, 0x7fff}, {0x7fff, 0xf}, {0x3, 0x9}, {0x8, 0x800}, {0x1, 0x3}, {0xa19a, 0x7fff}, {0x8, 0x7fffffff}, {0xea, 0x4}, {0x6, 0x6}, {0x8, 0x5}, {0x28ff, 0x9c01}, {0x1, 0xf97}, {0x6, 0x9}, {0x2, 0x1}, {0xffffffffffffff09, 0x9b7}, {0x7b3, 0xb}, {0x0, 0x9b7}, {0x72, 0x75}, {0x100000000, 0x3}, {0xcbc}, {0x7, 0x7170}, {0x1, 0xfffffffffffff001}, {0x8, 0xffff}, {0x1ff}, {0xffffffffffff8001, 0xf273}, {0xfffffffffffffff0, 0xffffffff80ca0784}, {0xff, 0x6}, {0x7, 0x87c}, {0x7fff, 0x7}, {0xd0, 0x3}, {0xb, 0x100000001}, {0x3, 0x3}, {0xc7, 0x8f}, {0x8458, 0x2}, {0xa26b}]}, &(0x7f00000075c0)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000007600)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000007640)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}], 0x32}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000007940)={&(0x7f0000007880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000007900)={&(0x7f00000078c0)={0x20, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007980)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000007ac0)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007a80)={&(0x7f0000007a00)={0x74, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x9, 0x34, @random="cb282ad850"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000007b40)=@filter={'filter\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000007b00), {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x600, 0x400}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 'bridge_slave_1\x00', 'pimreg0\x00', {}, {0xff}, 0x33, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x4, 0x5, 0x6, 0x5], 0x5}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "4b0f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007f00), r5) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000007fc0)={&(0x7f0000007ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007f80)={&(0x7f0000007f40)={0x1c, r11, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8008000}, 0x90) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000008540)=@bpf_ext={0x1c, 0xf, &(0x7f0000008240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7680}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @exit]}, &(0x7f00000082c0)='GPL\x00', 0x6, 0xd8, &(0x7f0000008300)=""/216, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000008400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000008440)={0x2, 0xa, 0x1, 0xf}, 0x10, 0xf3e8, r4, 0x6, &(0x7f0000008480)=[r6, r6, r5, r4], &(0x7f00000084c0)=[{0x1, 0x4, 0xf}, {0x0, 0x4, 0x2, 0x8}, {0x5, 0x2, 0x0, 0x1}, {0x0, 0x4, 0x8, 0x2}, {0x3, 0x5, 0xd, 0xa}, {0x3, 0x4, 0x5, 0xb}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000087c0)={0x2, 0x19, &(0x7f0000008000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x1, 0x8, 0x0, 0xc, 0xfffffffffffffff4}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x23e}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x300}}, @alu={0x4, 0x1, 0x1, 0x1a7d4731cefa9e71, 0x5, 0xfffffffffffffff4}, @exit]}, &(0x7f0000008100)='GPL\x00', 0x6, 0x8b, &(0x7f0000008140)=""/139, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000008200)={0x4, 0x4, 0x8000, 0x7}, 0x10, 0xffffffffffffffff, r12, 0x4, &(0x7f0000008740)=[r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r4], &(0x7f0000008780)=[{0x0, 0x3, 0xb, 0x7}, {0x3, 0x3, 0x1, 0x1}, {0x2, 0x2, 0x8, 0x9}, {0x2, 0x3, 0xf, 0x4}], 0x10, 0x2}, 0x94) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000043c0)=@base={0xa, 0x2, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)="b38e1688e36d28f1bb4f6d1e3d5579024aaea7c5b53b3f0813747e74bcadffcf424881fead2b955eeeec895f9c87ef45adc593bf720d6dd8c70befcf5a5d284683761ae579a33f861dcc09680722bd0da389151142c14318a8af0786e1b7f2fdb551f0a5f9ada84b41925f0af964d0fc98c986c409", &(0x7f0000000380), 0xe, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) executing program 33: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000043c0)=@base={0xa, 0x2, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)="b38e1688e36d28f1bb4f6d1e3d5579024aaea7c5b53b3f0813747e74bcadffcf424881fead2b955eeeec895f9c87ef45adc593bf720d6dd8c70befcf5a5d284683761ae579a33f861dcc09680722bd0da389151142c14318a8af0786e1b7f2fdb551f0a5f9ada84b41925f0af964d0fc98c986c409", &(0x7f0000000380), 0xe, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) executing program 6: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x4) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x3c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0xfffffffffffffec5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x85) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4000003}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="35ab2788d003aaaaaaaaaabb08004500002400000000001190780000244eac1414aa4e240e22001090780230fb4d01000080000000"], 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4b}}, @ip_retopts={{0x10}}], 0x28}, 0x8e810) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x2}}, 0x10) executing program 5: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000000)={0x40, 0x0, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, 0x0, 0x724, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002240)={0x8, 0x1, 0xc4, 0x0, 0x2, 0xc3, 0x4, 0x1, 0xffffffff}) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8000000000000001, 0x200000) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000080)={0x3, 0x2, 0xe, 0x80000000, 0xffffffff, 0x4}) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r3, 0x0, 0x0, 0x8800000) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x20010, r0, 0x3ede9000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x184, 0x1, 0x2, 0x0, 0x0, 0x0, {0x5}, [@CTA_EXPECT_NAT={0x170, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x7, 0x5, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x65, 0x0, 0x6, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0x28, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @end]}}}}}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000380)={0x0, 0x1, 0xf7, r3, 0x100}, 0xc) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={'pimreg\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}}) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)={0x2b, 0x203, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @ra, @generic={0x1, 0x1000, "a7ce65253efb010bd07cff4a54f3dfe1862a02e904d0cca59d17798140dd86215dd7192c502a397560d1009d8e86afba842027f7026768e2f4778ca626865d41974c6fded202fc4a96119197d9a31838cbad6cce5a79d0fa7d8f053527b0f0b8231d3273e4ccfcc2fbdc1ac71305dc7163ab442743994f6ce43dd0244380199b877b6062e3701f94adc4aea80635e5cce0d3006cfc72ac0c7e81d3b6e60e7e50cba993b8e4ff153b783dfade4e14f379ee0feffce7753f9ca4188ab4f4e8e6ad7f5b68f82e5f3ddd0d1c9025daea73ba9a11bddde50ded9761baa23514d53ffc7a679d8a95505c8ce0c2582ab7d8a5be04783df557c204b0ae3f82696bd7e683cee004d6135095d2f2df3a69a069d498c161ba426f64b1d182f5a21378df96475a748e2e0b207e90b43632620ac168300a974ff7c328ceb9abc0ccd431c4d10d6a8fa2783c016fab646fda056d0c589a42566efed0f4c043eeae15a4158ae992eed0b8fa9c5c303285b336d0bd29cf65407b9adaa4531ba3673c05931f016b4f91bd70b4183b98c565ffeb458a6c97721b2dc2810a9f468b7abcdd65de34e53274aed8cf094242cfef574945d0e54cded6aca16c991db036ff064add1f1446b2e0312eb7352f1c8208afb2414468292376130c0eff788e339a0ddb302b766e4b9b542238ad71ea5b52c3ca26a2a75d3d9f252fa2ce545de8efbcc92dfa996febb6bddc70a4feb11a70b2a4cd4999ad59d5c120a0a269b47571b531bf6f1ff45258237a253fcaf01d02051b3058d56038d5ff07965e447165e5b4ea454f336dbe037547929ec85a9b1ab2d620eefbd19ec1f9daceb4fb932cf3f724443838dd0068a87bacfad2ff91c0eef96998f46c70bdf0b9bdca6802ce4afe3477ad444b2d3d5aa7ea04dec97c7468d99319cfbcef6fb8b4721b811e8c3cf2a512cce7ad2fbe8b0c958307e9dd9d0c54b609f66cb1e0e17c3248da3cc05ef48c70f6c09e70fb091f853995dfac1219ce5ee2fc85aa5d25587250849c01c0d9d4f5c25d03b19ed776ef7f1f0c3cf749b6e16610424e1e9bc01eaa597e69dc2579b13421f828e733de13a2e390d526ea9b1842ed135dfaa5b9c3e5e39a5532fa6798b630472db53eb94f00e047c29201da0ba9e3da8f63160160322d6251d8a53b300597d1db9f738a9ce6bad052283edea21df5f17237416a9f54a27809da9c1c41f8d47ea07fc6cfed1e49ce860b2d60c5ad0cd19f6122ebeb11aba48286620171482f3cc6e44b1fc5dd48f8b6057d613f38167455c58d516b13d397743c413d0a58ebdc277f1131f1738a2c82fc17f7131e2481f0852c8adc89444bd88cb3b16941f3885a8198db198f790dc27394c54a9ac626dfeb95e4c4d9543947e818acee604e4b1767cdd970aee94a0100ac1e5e6159cf1fdf6158818fc6ab87f8d5ae94154b43b7fdf66ac961ed286dc1256b4a9680ffced488a07831521a8fdc70c7bb2c889ff48e295ceef30266a305e43cab01e053be41c14cb8c78e13e2cf6d320582172e75e3854eaed11c88b514a2cbddd862d57101cf1658f143a2c00ef26bd93b8de0a83013b10e9d06bce8bb7f6a66dba62d54619f677257d3be3f3b3cecd0e4a25e29c3dc482ab502c9a687a2935a47a96712c6ece17d0a4faede6af0c2b172a6d578ca0d1ff0336d6eb12713612b0629899e2059e0e6ec06b61f7a205c2f4cfc25ea9801d984ae89d50cc6851c495ead64454b3b55a681914857c1a70b738fe5f463399380e8a2a2d0adafc1acc6bd1d3ebad01b40f4f1cc7586f3a6beeb450f888eabebf6db8879a349934d8bb88b82fc23987929b3a49dad86624e96620b35f0fad8f40ed90e10fe2da8abcfaab7b233fc19e69bad738f03277cdadafe080591f295b8b1ccd7d3cb0b2b864e9816c4664c11a3a4f9084f8665da8e5300ffd08abca4e0e2b83c8119c9abaa0badc64feadb4ee9d796f2375befe22218209622d3e2921aef67539f955040154895b3be32c240c43d7a571753a14cc2d298f1198507865089c838dba1d61c4992e0a664180cb935ac7392ac77494e43545aff85c90964f047fe2fba8cc14cdae50a3b1d9b860c84eceb30520b5c6ec7f665789b7349916a0133ee7a474dd422e6448a043bb9f08bfe93bc3a170deeedcc04b19944bdcc010db47e1d4f729eeab9dd0fc7ff0eba35c7801fd3512ffc44b6cdab14dc7ebc7393b92db160201b289830283114dc90bcb9e82d4757e74555992ff802c99acaf2564997bd9104d39b383b57d8257053ed394092835bc3e0da1a64e4597b63437b6d05e730bd478a46d8ea81fe9e5f454458130b5610f53a7365373665437804abd8cb9959da61d31ece1900eae015a4ded3b6f6678164be731bcaade23415478e730e97e0cd684418a0aafac78a87d69ca97a0bdb9cb0c98822ce6d860d49206b44497a4f9533c8b8a930002dd92ba8cc639ed1eefac8fe39abcaac9a475e6354aea2edfaf993fe02213e0fe0ad393573e80c829d59b23d97d359ea5f7c06c6107b32012beb3e205018d22e3b386416ace8f9bb353cc993fa1a06da35b1981094ba7609f5df18b5188e157a105a28ba121a154a750821c8269b28161c954d6f11a55b8afef507a8f21b564c36bd99b60ae748160d4484ab92867e4be067d05c49c9c1ba36ccef116c92a5e6e07d13dd6d2f11a395b7209521a8e31f72f97654531d67240a84b9a0091d1cea69625d5f9f594b5b9d80573bae1dd71f92dc76cd55aaab8ac172acea0c0b328e142f45b9ec887c5e1d45a7f797199f7a85842e67b855e5fb25a4475ad435e81d57615b32f8023781d63e7855e1d93f52d4106b469733b63d673f3bdd47ce5f89de5c8723a0cf06ba409c4656d19a135794e7338abe3b20e7247476fbd07779be036c363b72840ede78753a8175aa1858f8449d545dab18b447f789a47904552376bbbe1cfd7feac915514ee0ac7e07b0ee59eb92bc45089092c3dd44af6b252d51d686d96da46295a20ce3f575f7ccf091f38a9bc3bf6566667fe26e657096464aef220624c9e9950c66c833c7393ebac35f398770265cc203b5d2482e51d115334e8a330d3b4bae7cf1c90e3a39161fb3032d4fb6e9f009eca254f274ea74af44032f6307953d2ee58553870571ef8b0a7773c126f16fad1c65d0eed0829a9e19e4c972c0cc613c0c1bdebabf0c6c4e60d065070bc39b905c37129623fbda2a33eab44a194e291ebfcbfdaef9127c41bdf4a41697af66e787a9e05ff67b95dae11bbdd0333947fb84d53dfe1e9ee4ffcb4c8da27fbcfe5d73ab3ef22ba5aa453124ed69b7fc7d06ae10f5c25043b1f06bd41f13cb9f6ce5c2a9505001ea8de75d288e5e7ac8c8a6e944017417085685aa589c96549fa68d81e02c340d48260829f50a3684bd7a9ba33012dc886b4acbf7e2ffb6c19ad3de74241be1c2ddb44e14eb194ba18571d2cb257ef9e35667eeab81bd9bd869c649a3839abb2a91864ddc4dba3836fefffd4d704de679f3355517155f792cc85073fbd496c019ab57d0091d55e1f0379404643cfaf196b3a10c9790391c9027f06bc0c5bce7d8dcf6d5b1bd2f0560561f3811b373c0b4fa1a6c06a9b709f5c5d8eb906cb60aba2ba1907103ad909f130e842c2fa1787896f61b5e1083752619346ca0cb30123407bb3c61277f85a4b63ed49beb011fcb6bf87f569d6a859c6e3ae445e9ed3d91afcc904df2f8c0e2d259ad8109ff21eb154122ce91b24d9a9bb0ed1a5f40d1eb91c759f1e0930f1b637e1f03bb62a1df26a01e4cc64a67e19c72c2922cd58be1de8ec087b5fffc36ac63e830c304c75fc98da3a7007dd691aa160396a8692d650984b9c4315a2b403aff685587780fb3f782174166e97df79c64667c30dfb2570f397f44391c8342155d5cd9c3085ef958651a3042a5c6074dfa98ba3785294268c9d55b22c34758dbd56d5d8ad4f621effcaad9de0de5ee50600bdb65a6e8aa28aa5e70360dbe9f32f4be70e4f3bc7ba9b7ab08e4c5d4810ec02be9fd1d71fa12350f0028834342875641887e86f01ea0551c0dc62f8a4940479a0cae82251aa5952c690ae784d3c68cf9b04398e74f0ef08a84f109906f48b9e1576168f69d81f0233e8b62e686e19734c2575e5e6fd09093a67e8213cb19c0f1ca41ae8d478a6cd243392f01635fa220d288ef25ce92cffa95a6c9ca9ba3912692801406b1edb0ebcb365ff89e5950ff47971c8036bb8e2e1161c8afcbe6c8814982bb8658d9ffab0d4b9d6d3b713807968f0d681da1db316244f0dd1e15f4d280f4a4ca3baea77a054a8e474c7820c5be39316880aa57745619bd9cb11e2579f1f746fe87a73cd9f8941644e4ee4ead7b284c1fdbdf7ec174d0af3a87efa6ef9206a40c68d27ac0c95ec5b50c16132567e3efb4249c1fcda03944136a33f3160744665fcc147607da3ccc8fe16879584e7f6e362035129cd62114dc4aacb11d65674d5212f09e618e3281a8a37ecde610f8dae08d939c4f33c10188ffbb4e3700f26992652a0df1bb260327ca09ed5cddcc617af84009c26fadbfcc709d43e80ac0c580d49b221cec8e67ab9cf550122f91a2ff1cf3107f7c7e83f9934f476a5f88680812fd157f0ea570e3124905cb3dab249badf8f84c7157b37f0aad33ca336b1aee47ac6162e76140268982fe249685bb0494c8514e7a83201ff1627cb66d2767967104631ba6b144fed6b0877b006a07f9f50abf7e3fe1120ee14854cbde5bdaa32f155fc3fb9054f250e54b7fb39b649e65cdedaa026e24cd0306afce5cec0c311cee717aef63809cef40a050a1db3b884ec8bf50e5e822bbe0417354bef467195fcb9483d2e3e0b30f3e6a22015823c9fcc99ba746530603b764a9b6e32d69d5f3c2a39c77b604441055fcd6b587e28832bb471ab8eab04d6712a4fa0a60f17c208d6c72cc57329292fc97f32ba2a7148ec526a70df61ed7f456d6a87498883f810c164f0bdf640adb2b830ac2bde6d7d9a291bbfe91b83cfdd33bd00deb386c2519ca3b86a05917deacce05522390e98016a6f709b02bdcc91aa890a5aa8c6df245b31c85da7cbe794261c44d89a89d520032747d6f600fe59e32d0fdbcf05fd2f5b5cccadd4f4d7f194fea5aebc3f8440a47c107eb6e720744b8cc745765a04c0c48f3f491b6704623cb6d078e558ddc7363c793adff31bb14b99148e8dac3308ba1b7e4fc2c06a92eefef7c0a1443f8de8d0853811e67a3b52efd28a6658b9c768965050b09121acb89119ad2e18e71138f43d6bcca6f77036c041b1ce6af9ca9c22157847992b5e06af279799712b1322a4293e1337c3f4419fc5a79f5b9052d27b4d98f9ec255c13ce6a04e7815d31d5c4a100d6764c5296284fd2c504b02e6944ce202b98345eb30199c6e6631ac2edb3ae8456dc9b52295d8c517a36485a3329385705cc8d11a2dd82248aaa86002c4309b09d3100ec0adc14cb592ba9b67804119ed527359eb6a6f7c22579d58cb4126237d5d59fbb3e3835674d90aa5a66c2f234711f8f406694e51305cfa689e5bc37714b0a8d2c2d939956f25c7913f8f0978d8abd6e2428fbafb50e1d0cdef09e199f60a0e4ffef9cd4a57ae435958a18899a7736e4dee35e1988d45ca5989218cd42ad90c18c999e6fea604fe7de28d7ea75758b9af18540edf56a434785cf9a8097a3f5ad3283428e7e192f7dd45b6fc26749443bba9661b557e42f182a0d56d07df925626fe7720140a236cd776bad301155177bac200170bdfb4830749014d36924f"}]}, 0x1020) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000001440)=[@window={0x3, 0x7f, 0x6}, @mss={0x2, 0x9}], 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), r4) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd68}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x811) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001600)=[@text32={0x20, &(0x7f00000015c0)="0fc76e00647d9e2e0fc76d0a0f001a660f38288902000000f4c4c17d6f5809676c66baf80cb8b4c8db82ef66bafc0cb001eef30f1edf", 0x36}], 0x1, 0x6, &(0x7f0000001640), 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000001680)={0x2, 0x40, 0x5, 0x7, 0x8, 0x20, 0x9}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000003480)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003440)={&(0x7f0000001740)={0x1ce4, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_NAN_FUNC={0xc4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x95, 0xb, "18f599bad03df086000e821d540dda95f896303265f42bce326de1091dcc109a1bc52101e923fad77d6b565d24a6ecd88ae6c3c9fcadd5af44d0e783906208e1407ee377f3e7b0f2b429272eca3f1d078564688998da05521d0b76bb960eb8f7f316770ce661e7e88435e2cf35a672d82708ad267174d3120af82d3529c44046087ee16fe682a91e0852c1abfb9eef7d61"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xc0}]}, @NL80211_ATTR_NAN_FUNC={0x11cc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x11c8, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0xbe, 0x0, "dc6a91d5110fb3f4885f9596e503b3002147051b432717029b661f3c84a76c49a0ba1183da11106c3afb5f22fc5009a09e0cfb00be00269044e49776f0d2a0bca6f151c6c5244562a82cd49d65f1e11a9c136a1ea808018c7a705f0ff4bfbd27dc61aed335cc46aa4980c3a70c5a0156592c4ea7ba6c7a7709ad240813585515d71fef0bfdf437fb3aed9a95d0dfcadeac5795faae455044a6d484505ce10aab2c12c1e29f5909a984b5439698968557ab54a1fd00ce525ff117"}, {0xff, 0x0, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x394, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x384, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x270, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43bfd772b98c"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x260, 0xd, 0x0, 0x1, [{0xbb, 0x0, "a963a6bca1736a494ef0ae6ba40e60ba73dd63be6e060337a0e2418d0d591f89fed8643e08752813777ba320bbe9179c2378f721ec95b176334cde65b9697ab1f827e03aa6e8f3e194e3499e3d2a95bc95efe8608d2979736475503afd93faa2cda3e5a576ce1cbd7bced05c4d1ecc5bc9aa30940145009700ecfd3124be991b974dcdf6414903db8093b2247802b9cad8cade0645988280a2cb9cc8446808672f3b310bd73b3ac86295969b75b3713636ee1721034210"}, {0x9a, 0x0, "f702893224a3e8c9f141b1d8f7ac32671f1a10c1b0bab087f5509cc93dcfb7f339ea5bbf8716436e51504918398aef7e766e98ac4cfa89ea5fe9c861d39726de98e923b070cd6981042e0b9390c8dc14b3dd9f0e974839df577a17dfb2d635dfc058d98c8ce7a556b1121e240da7719f732bc0cae6360a0522b6eb5148986e085df7d2923479b643a07fa7ba33445808a9956768efd5"}, {0x49, 0x0, "8642a06eb8d4b238386ad7c61bee6ca49ae182e4fc8281ded986efabb28676853b037c35d8ae1f83f497b2e6dfc9bd6f2e308fc20987d3a6729bacf7420b8a7c31c07d09af"}, {0x59, 0x0, "1f025ec02b35307e35c79ddd84538068cdeae2830ad6749c4d57475b77467ed133d91826cbc63c7e3469e1a7c17712896ab995cafa971194c60a4344d6360551e72411b47e2588beee50968b5889182ced336ef719"}, {0x17, 0x0, "baae9c2cee55c5ece1428903d76fe6fa63b700"}, {0x37, 0x0, "f9044292e770913672d660eba069593c20bce36eac01fb73239c1901d10d44954930d62cf6686b3cf293e423335c711164d3cb"}, {0xc, 0x0, "910a87f88d9f46bd"}]}]}, @NL80211_ATTR_NAN_FUNC={0x410, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3f8, 0xd, 0x0, 0x1, [{0x9a, 0x0, "91dfca9d659477f00b13c7346dab15ce963522f2a3457d2210f155a10adcb1eb2eb427af89fcb6a79df0c1c6bba76d8fd4d3757b33a37a0ef47c7201849f997be79e2bff6c1115091c46d9914c13b83e808f87399f9aa6ce6fc530d72720234e7261b0a0c752436caaa46528d2102901c8da5e2762c6287c668e9f41dc0f5f5661fbdfcdd517a546ea8346fea10fcf2fed69aa37fec7"}, {0x102, 0x0, "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"}, {0xfa, 0x0, "2ed28dae94e0677dfd1af89519511328863e407c1581a67e7e573c3b00b59ea496b6860dbbea8edd5b54e524b4dd53bcc6086ab71fd2c7ae509ee63d2cc3ec72837f2b95af96e16b9acc4f7a05971005761bbfaa0068e54daa9412984f8e19e53619c79efa50739cbff7e070a1b3d9238d8d03cb04360d175b33e185429eaa303d962632ccc78f7f14decf6ce56d72ce3e2805551e74387f1d29e155674049c8632520c41c6f7856ad9cb6b982e020f736dd99ee878d50c80016a881565fea360907b79eb82005fd9fbe97892566bddf8582b47c60a07252a32d7c209351eb62993e8327a8613293726c69061e7f908af997e4560dcb"}, {0x6c, 0x0, "f7efe5e54cf4a2f5c46cf26d14a0b0f4cf7660d77f34af6215e7347a0e4b6de0296c40713776f89ff11dddd3e9ea28fca263d3c6c8a65f91e4351eb1b75ac2e2846591ecb21327034985f5e96cf53b212c3bced2bca271e8d6ccae5d35c652614e0dc55063626e26"}, {0xe9, 0x0, "42891d81b822f1f6531d09ecf15a765fa03be946b1d40f29f87ab33e811ec0a1b9548a6e6c6339054a1ec7978c79730b38038bdd64bef6591ff10f9fcf0edab8d607dc4281f8b076aebf966d60494874d3673d31e7ba497b01fd9f3c152e574d37aff85a8b1d43443c7ff01080353970a96f8a032ae660509aabcafbbe77525e4166b19936ff43fe1e8a8fee3aa834c7b82267509a776fb1adcc0c3772423258a2bae87ad159595a24c8bcb034f2a01f9862a1ede14017c3fe8e1d5e42bcb49799155f26381def820677f17727f9a8a2622f81c08b803d89d887f129b28ab206a3dfaf44ca"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xaa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7db6342b5b50"}]}]}, 0x1ce4}, 0x1, 0x0, 0x0, 0x4804}, 0x1) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008000}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000003680)={&(0x7f00000035c0), 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) sendmmsg$inet6(r4, &(0x7f00000073c0)=[{{&(0x7f00000036c0)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c, &(0x7f0000003740)=[{&(0x7f0000003700)="21bcdefef5235a55510bd79f29b065fe4afe70007c139a2b2f0fbb9794c882f9b0f14507b2314277c830e854bc115965d042940819bf6c", 0x37}], 0x1, &(0x7f0000003780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xa}}, @hoplimit={{0x14, 0x29, 0x34, 0x40}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffff0dd0}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}], 0x60}}, {{&(0x7f0000003800)={0xa, 0x4e22, 0x1af5, @local, 0x2}, 0x1c, &(0x7f0000004b80)=[{&(0x7f0000003840)="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", 0x1000}, {&(0x7f0000004840)="3288900719b66b5a8cc00c244f34b261a74446fc234506b32b3284b38033895587778e3ef4fd5cd0fd72", 0x2a}, {&(0x7f0000004880)="a26df098ba636cdda2c9ded7ab90753b8363e5436254a0964b2ac7a0aba6ec04b3ce65406965086b05f3723fe1097161838db8d02bf0292cad297f5ea0938b939c2f00c8351479998697ac12b4c8122d807c5716425748cb3475eb9e8942b26fd6e50fd3ba9d4f9b6271d3675c90dcaf92a38cdb6ad864b76e67487562433cd5caf8c6fcacff907e5fcdc0ec543443aea7f269fabecd124715", 0x99}, {&(0x7f0000004940)="abc2e1822ff0eaf8c6af1e321172684090b855a7cce7bda9db83d3851ee57241c67a7203360a84fd0003b83ebd990f539c2b26f3170165f13dc4519dd30e95da02a6eb97b984186235acf80f6643138f14fe3d5f8a89eeea1c411d9fde79ef1d1241d2ce729fd338f9db5921fe2b9a4e0320806e7b7b59ef6f33af7b66c99aa66e2e372c626ee9cc46467ebd4ce1a73e6d1d354b8993e7208a4ab4029c3f162397d4b5d26b044144c2ecb2baead1550f88d32e601d93a1d58b6cdb46a4aadf62ffbeda5d9a26", 0xc6}, {&(0x7f0000004a40)="334bb277aca95e11", 0x8}, {&(0x7f0000004a80)="25cf7edd9cc56e58e8c531df6676bde0c624a1dd5938d9e4c0c8d6e177fc133bce0d1c2792b0e605cfbf66c9a7956b9533473169758ca434530ff9ddc557d6caca3477c228791eb357c152405bee341483cc897ca75e45097846a0f1d6a47739d66b81adf2b8bbe2e62050b2484e", 0x6e}, {&(0x7f0000004b00)="283d1edf81acc283b94b51a0f4dd47770e2f925700ad47bdf5a70357cfc7ea875291d0e32a2edbff89f1a84ce98fd1375c77cf08a0b9e848e0d8ed05fbafd91f0180618075bb6b70852c48a11238047f8ca0715d4d603429a76d674a916d69feeb3a2b67866df909506b48a74a55e85bc18cb8d2", 0x74}], 0x7}}, {{&(0x7f0000004c00)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}, 0x1c, &(0x7f0000005e80)=[{&(0x7f0000004c40)="c0806a328fa8ca96dd3f4c5504fe55283c8a10e742a431744c5b0513e9d8d7416e7ef4ccce8265860e40277774028fb06bcfd6513c0c4a6c9d7cd11a91b9c3ec128b5d74c0bd57d8aa3eae832078c7adb0da07325f771580252b28afd138", 0x5e}, {&(0x7f0000004cc0)="10a8f4550c15b371c0bb0234137942319c682ead83361bafa60da5e68cfcb1f2de23fcecf1c9c2281e80f71382770c376107f6417532bfba253637bbac7693d144fc6d54b7af4dc071cab723beedc6dbbb5978d2c1de7781573375192cefc6db84f3bd25d1128e7905602fef8ca9f28898efd61e565dc6773c37826688f1f7f2edd5576c84264c72f96e7d897a19c7882ff986942b22dfdbb109d3e88397e74c28fc9b8fe973b047aa29f0b92aa15cccaa4db0780d661678847eb9733a4adfbb24ab9a32f7a7cdb3627e9de79eaa4346afc2b6b9803d4f58634fb04aa363ac440da561be1752ee177cdfd1d96b175e12e2c665a80b70cf84539dc0d494e7ec7c2fb7a4f7ced0fd46560a8f258e1864ea58ed012d2ff1d67c48a132ff484f48504ec4fade938906db166fb43b522130f82447988890261dd222fc454eea4d4240af2430705f298a800c669226f0c0fa605bc1a4cc99c027936163a15b9af8c3325d684c308ea3c598d20a7cc4232c64ef19a3d33fd2949648c5560024ccd42000b72a46d6cb9d1abc1e3f8e512d73784a84bdb8819b5f25d664a1ba66194b5023fffe01264e146bc0b39e0fce985cb7e9cd897d104b54e33674f3ca02f22e20e86d1caafed8428fbee5ebc94be0a348caf64f1320a0f1b11e1faa26e83c870604d26795b79a2f530a272c52dab77432ba706adf59089562719807d245d3c9d8de7d14560e72a14d0fd1a9a2be2abc24768c17fa4828421c594c69f467fdd087e2df25bb8492b5ff17a3bf16358ef9ba1826a0000729ff2682ad30006efe3e34bc56980856e069d05c80a61cbe1697fd1c48e183a785e04eb6a9bb38cac3b7780a095017b0e24d32e84e6398b4d5dd295f9a8b15cf67a9536ba577f008c1d51f4213158fc50895bdb4c8bc69839bd90b8208ae6bbc098a5740f256fb3ac7c144bd46f2116f31e92097a11bc47953df270c7d77d1c205c596c3f429b83bbe5f373bdd8aae4f23d9cee896a3e357abe4b7b8d7433a005c9fb9ccf56751513cd796359f4dbc9746ed64aa8c9d34a001041036fe59fcc0da790a0513fa15d5729fc15ab70bf9c8ccb9dd0c9a89c1fde63096822b2d8c6374881ad28d8b1cdc09097848222749f2f0f6f67ed7e9519212411636a595de3bc1e20e6366540ab9983b3ec8bd885f175a1716a2627e0a6c855c511683bb4113c7b0ee24f9407bb1a502142dd4edd951788327a5c038e1c6e328a2d1f70b7d46a1b8c97a8a8163e0031e2d7823956aa8586d8469db59b3422af1cd438aab9e1fec2567e0b00d0b54d0dd1abba6381ecae6930b64a7847cecfbc221a07febbeab30587c81fa42775f7116118474c9a85f66ca5d68cd70eddb68224e50deb1ca81e3b922933f97c7af2bcce56fe31e1a069e775bd80c83b97fc4b5221bf358cf58f76cc3c84b47034dec52280f35ff7f4ad5453abea423c9ad3229888ee3341c451dafef5100658bb32c0719039ed62c65a50447ffbe57d6fc7f51d36f973547eae3a1151529fdd18e1a1945e89e3a4c786b15ec358fb82ec22ecaf5ae329ce268adbc88afaa34c3de365d3bce2ad9c9b3b515bfbfcd9bffa56ec979a144ce35029495dc730fb5a0de976a0a81f7b38f10fca0cf6d3aa1b6f1dabe365418249c93a87ef0319adbc8b1805eae23dc92027e89bc81e886cccb21ebcefa639c29e0a3ab3549b41fdf4e40a374cc2af0979ba0f86341cbe592f74d3c9b76ac0f8a990f08b93603e0bd79aeb0876461666d76d216a16dea50a91a6388374eed1d4eda2391f5b74d2f08be81400973680d05c80041180465e40fc1572d135ea58706c1850f6b082ee85c5e870c6a64661992833f1feb9885f4e3bc3797e3c0f047d9d688045fd13c6710a813d4168773bd53cd8ed7484ba1b25d9ed3932a4f44419afb27f2761b0030a48ea061ef24adba2c65ae218ac923386c32aa0ecce066fcb73d3e3ccfe74d4be97708aee6119bc88dc126f88a14b35d6147b31fada0b016d5ee51f20a0436c2445a4f2d1886f4dd773cf7aabf2152afa5484d0ed27531df1ea5c92f77e07b29017e712400fbce50757b5926d2da0aed00a632684545c3356edd3d59c2ddcc4c4873fb6b6a139a417933f27c8c23115c93ffa3a07ecbef0d048d62f87e811ef75bfdeb41a3f2f4263b19c1b79c5a5fd2acf4ba4362aaf253cbb1f859bd9affa85c6f336e3f97d36f306628506dd4d59fd537c7a95bbb4217e31367f8417ed81dbc93e8047d52a30f61df75006038ddc0208f6dc9f6317bcc8cacc5fb9b1096e9b6ab8a25bb3a8543c1e4d16c2d35bf23fa52c0cae97e08e1d671825e10dcca89c41f5eb227d07f3d291ce34283cfa5a421e5f75a8256a8d00f77a4c70ea03db12eef61cc65963eeb634e5a67df4093eef006891922c7b890bfdfe9b3336ecc8773837fab49a1a00ba8d15bdeee37ad1629a6ec3a9da13f9d867710ee0246e9bf8edf3d9c73c63c77c57edade2930176d033a4eb9a1bf2cbedd0ddc706dbebded244580024fa2a8810f83161f7a6708ebc37de9b93b068f1e06dec4f601517a3e20ed972e0f8d9a89ef6caa5b9a887f929fa9abcee5eba65d083f6ee18670b5921884e84e0ebc21b08eb62a09652bce81381f1b1f526a6ff1ea84706bb7ae67e57fa1cf773c5f3f80948cedddff00f5a6aa0ed99d8461c28b0547f43c745c1d1b82815e2b2e4f979a6515906df796d1ad46fcb7427218175813b2214214c036b54d35ba0de2f513fc9e9e4fec12b0539b5001838c1ca9d8d9e68a41d082df71387d9168793ecf81e4f66e00747d57a738b91e924c8cb09d5748e60e2ac53c82978e3255d34b3969cd5eac709b02b6a34b0741feea3d24dd12651771e5e25ff25cc852676740969ca3fbd4b79b92bf6e6235725453778081c627d8b28efff5900a6935a1e9b50a56049a600597d00c3e7be55255dc74d3c209672dc56c3966d5c8069b1416e17f2c2091fabcfb0497cd4992bc25661afdca263df1afa98a84232a7e2361be124791ab0aab3b0dc5168014da3ae432212fb30a318de5aa77fea85115dd7c193457d0f2f12d97621049fbf353492bb9e671677baecc0dd1eccfb38d402e0034941627783888b2827bf1815745bbfeb03f5dc19fa86399eafda9990947da273ec6a1ed99bdb7f76e0641036b8a3e5b51f746b1575678cd115048e06c5817d0ba1c0bedc7742b2991f96be1a47c868dd729f409794503737f3b4068d13a690d64807c0f4161c07e5025764ee363516c8a2ff9265c83e488eb0a5f47e1e6b51e9ef4188c2a9882b7a1c5ad0cbab0556f3f8bf4a8dc7caa4e07ddbacccc5a22efc9a3b04a8888410bee9d51d3d9025455b6d60d3e0a2e6d6b29b9c284f28e13be7409c27fd9a954102a10936fe7a768dd9cc5a1659889cfa13d5e3f55a1017168f4bfbcb8a277dbe98033f79148fac1ac6104dbb5d831600f1dd3c6dc14773b983a760721f532d8d573fcba50ebad5c4e539f040711fda9f46a31e2d701f915323a0f7ede562c954098ebf25044182177ab9f882df2e0b2f46bca235d86ede9698aa18fe1166ce6e6c4a722f52769105943d234640179966e3d5230212fda37946fcd3cf1a81794f0852f8fdbb8d3bdf5290d5955f6cca291013096aecb74cbcbab5ab0de1dca84590642b29700007801aa4e926fd411a6ad7dde48449bec0628bb78f4c20688ed4650be8005d30e590d2ced81c3b09ff927ee4d8fae9c2c69bc954c72b139dfe608fee92725ba65e26635f58b89a6b25ce21020a19dd81c495192a71ba600f88e6771499cba3af4574edcc782c620d03c4822e709bf97e30fd88ee131fc46d3ee5b14b5a00f6ed09da2b238402d5fe6e18260f71fe5cf0f0e1b609a31af12bd39b6b981b1f7b13bde475469c28910e31140b89793446621943aac026f7a1f20781405b5c616b0cf19a24ffb080b90e37ab7d2945aaf36556a45ee59faad9c8a2b19e92fd38767ead8e7d3cd8fdb990bb17eee2fc9992392fbfcbbcafaf213aec311974334023809d01dc3f20b0834959895aa4e231ff018d0321eb63c59e4ff3b37a7e9c0edc12179dd51af826d070afb6c81912652403d1bbd8ea8fdc224701e4a4c649c7311ed98f4eb8f73cf351e68d1135d30090b6f83805b4d81b521296afea8bd2c5b4e2e8b88dc874ff723ab4696442c1569155de320f28d110a4e62db2ae674bbe2c2ec38c6ae9c1f3c2ab43f1715d639939d828e12ac75b71ad7b3f70b92f366078d38ecabe00200c939e25e7614f9d653f823a4d20610226500eccc9274af28db3f28cef63e87b748ac7f3095e7cb91da8eec675319571dfd3d69b9edb48de5465d92a4bde5f3610cab467e964acc07d4817c1d13f652abe5072f4b4969e17f0db1440aa69b44f7edd3c5a22edcbaa0baef21735abe52d322751b7c5c3dcc444a8800721405531a3ed27b6d798ad80aefc7f8b5e9aa8ea02a859bfb819c116cdf26fe3245cbe7fef38ec7011f7be31267e8ddb8434e9c6d919ab9776f14c5f4300983712ecfedbd56c7c7d7e7ddf102c84854564600d149568011f19755c531e9786e6a100e7350c2aa4889ca787622570f2ca8ce13214d581b10bd3d013cfcf4f880e8c40837fe5ecd3496072b34913f23d6897e53fba900c2c849cfc0b1b311474f72809a88d742353d35ef797d6fbfbf4f005cd77084fe1c9adb444a88da00ab2b8f1a8c5a857de41feb1ae4d473b5556cae045716a274c9e4fc3817fcc3b9105fc4727db9dcbbc8197004e1fd25e62f467eb6a90bbe160e4bdaa8e3a2d0518908c4c356c75e6306efd24ef1977c7aa0f245606dff00b7c9fe9456a85d6071daa0df89b6396a3a35361ae9b165aa907222faee10c5da11a151d89863afe64b71b8fa7b3559a5a226324f22be38e4e549dab690e40c46a25502ff7ed09ddec3e9c231a8f6823f50607b7d73287c187226932cf8b90b357432c893d62e14e93444a720945d87f0837784e2d09a314607637c0143128aed1f8837333fc55890df6daf5f6605a2f3ccab085f8efcd51bc96e2b70640eab9325a511681b63346031acf715aff8f7acaeb25bb2f01b841c7882393e3b8f43755d31db2b7d0e4bdb00ed41188e0758e0dc56275b1131ee4fbcddb431ca83a01edda895abe4b30ad9640efd3cbd3e61546b963ee1c273757d5f3df15cde1a73c59bccc0dd87dcd6deda0d44b02a53cf0babfd4894de23b032e1eef7b3d6db621f716a818084ca31725bd47dc8963308b3add74480b5530369d56ce513b9ce097c1abda28f8cef02836de5bbeebbe3ff4b191dc37b8956db8ca6bb9fabdc3697adc4eb5cfd1a84955b3f7059d9f7dfb7ffc33b34e80eb9417cd111fdeb6e31cb188b3ceff3f7958f624f8bd5abd131d0e0b4e75f1f1030c820d833c3f660384ff873dd9da0b4542dbe9338d83b7fd75e6d3e6e2edbe191868b6f5e54c629d04650c8bf6f98b32d177815f86bfe46728ea24291c7e357b29f8afed677c06b8ab058a2a4a0f71bc2e5ff960c4f35cb535ae2541add84246223ca98b40e59142dc25f700571832c4b4e75288bcc0ce8389ff1a9bbb8dac25b4f8b3346bb490841f643d490fa80abdbe66a4240b269318fb81de78bdb856181f017a1a1523372a1f11fc2f9b2ec64572455f3de31a869802d6d820a90f180246c7d245f2b1b5cbae4b71417b21a24e6b64d66469b286216a0d2e2fa0645ae7f2e25ce616a48e9bdb9c8a11514cc4bbe9f8cee8a0c7921c8d66d3fbd8b11b22f7a74ab29426590dd777336", 0x1000}, {&(0x7f0000005cc0)="f0ad0e8b0a9b656cece3779f59ef5b10c9306c9fe42764d1f48b0cd3a00601040af67abad0177ee923b0c1c9c74da23f33e5731fdc91f9af11d15fae2a7ac406a9af427ef7ad36ddc60d7e7d04ab032ef3f0ddae6dc27cb34377e77f886583f8e759c3557690c9bd510cd97112cbb8619eb067c6f862c9089c2cadfc2285e635e80d364f78755f4a516021d299fcec0bb19a2aa247f7717decd1ae95c57c37bf396c5b55259ede0f72d3f55db500da7460d9d58393e53a0fc2dd45c83a42e717ce5602468a6810556f2bc690b55cac913dd519973b5ef97204c435123c", 0xdd}, {&(0x7f0000005dc0)="10dff18af94b2a007bf27167a0e595c9204f2775f9d39dc6482a44f02ae24d1801b4b3e75a6618fd498f289090f9316f34cb3ab447aa4741a383903b8bb5ed75945e8cac103e005bb1ac8ad00fd4ef10be4b724bccce02ed1aefc94c05b64199d5c347c3aab13dcae0e1b113958999d43771d01bb1bba396161506f25aa14bb88221af71e646fdfc8aa1", 0x8a}], 0x4, &(0x7f0000005ec0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x30}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000005f00)="6b8fb5287cbf6360107a2acef08eea683de888973526ef36cad501b9c37739f307ce9699c1ae972c3dd046b402b0a3015c225d36f30934f8f33d35336662278307c0ae4efd0e60f1234862ceef84f21da9731ee2368c46b21897656e9b20afdc586c243f", 0x64}, {&(0x7f0000005f80)="c72a01bde21d9e17e9dc0c01f6932c4c7f9ca26d11336152d2fa2144a41b532a7b06477598c7fabad4cd3c6d32d747858274b82e463da843145656eb19a0fbe3d2aa584455723691fb9bf4c3845a0d7a86ea196a742ce623a13ace5dd861d6d94723b5f05c080a91c8f3c95037f3edec17cda85854e8ca7b678a8246fcdbb6162790798db55fe2b6b214e8eec194984a17f2879775852cf0ba4b5a0328b44a31b47aa44f6123efd4c1985002d4050eb91271e1dad9f86a52f112ed2a068ee35ccdfcd8547ebd6e7a67e7f8ac4507832b4a6fb4b8c63c68339be9b5e5b2ad83d3f24aff17a745321a8922b72875", 0xed}, {&(0x7f0000006080)="688e4ff55ef0746a2805b6aa6e5aabec910379b83807970cba8ef296c68753496bb4fbb052a89ad5d7234967561c320b5cf17098cac7333cc732d3f6c738018e3a3ee48d3ed209e2d2a2243fb3bc4058dbf29f7ebefb9954d4512b708254fff455d76e8e5792d6b11b0c7be64e7ea6377b01dd8ad215127cedc18af6d3d134739f904efae187eb57aac9a77c38925a05ea615dd1e8e5e1fceb9b55bcfb4485fe58cb1409c94014cf2c4773759bd1d299a6c99e1268845a1b007897cd4ff4824c1ecf696d9c67d9306e975b98c67fb64b84f25393ed6e82", 0xd7}, {&(0x7f0000006180)="83be45b84a87f3e312de46d95fba33ea08a81d2b4d8128d5119addb5f2a997245799176578dac680", 0x28}, {&(0x7f00000061c0)="d8c7968618d7e0a434aac0e8e3b81ee6eddadda8108e4edf944ae2b66705327caf418a1489258b58751e80873bfbafb2024b9b31f9807f5a60502afe9926a4fe2cefb74387e122f3d598f2b282a0b27cc2c4268c45c006754003f27072580d19dfab76ac41756acc5a42c71f569451abf5aac08e280d72797aca25d41e6feebd3367e4760e052e1227fcb079e706e6c1dc41bf25e636d9547f17dc79a28fa40e9128f65241866e5df62758a8b10f6a7c00d1106a200af7d0a8", 0xb9}], 0x5, &(0x7f0000006300)=[@tclass={{0x14, 0x29, 0x43, 0xfffeffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0xc2f5}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xcf}, @jumbo]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x0, 0x5, '\x00', [@generic={0x93, 0x28, "9011cf1cd9ca3cb6766574b06d872009a5adf4f1287f4e61972d546ad0447fa8ad892ed71bace5b3"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}], 0xc8}}, {{&(0x7f0000006400)={0xa, 0x4e23, 0x6, @local, 0x2}, 0x1c, &(0x7f0000006600)=[{&(0x7f0000006440)="3bf4c2eb1a35e684e7de322cde334374feb0cee9304778d9faaf566953ad01800278ffa3f12ded2c42ef2f61212c95f6ea2a9015b1ec66049ed83cf120a4ad7b1b07e7f945cb81e3d78f648eab85271645b739b6f16f2e174a04cd6713b636ee5d7444b8cbbe14624926e99694d7f2ce18214da0a8e6fd477db209c35ceb7c30173f66fc53b2ed1ce607587576e0c85b6149062851ca94bde0c6aa4063996d5bbecea14d61ffa36bcbb41f25e6b8563076fe338d5db4d685e46669c51ffb283d2c763b0852f7bc584291749b0f4f1d2e12c3d50b7a25a6268cbf7874d1aeb6fcbed86dac59d91b20896fe12c9cff71af", 0xf0}, {&(0x7f0000006540)="00995567f47353804e274ae4fbf16c025e4fa55d937ab55296e05dc93e02d6d177dec4cd0bdb81f698a5b8f9c3575a6aa7b1c7cd90b1da548a131396e439205eec7eced5fdbb91cfc3ab03e2fcfb1ca740563b00ef2a2a30b10fa12be977cbbaea44e0fc7b6457eac4dfd684c03de9b566a5a9b3b6f86cf8a3ff0668b88f10f1077df24a5923509b2a9a86486526263a2c4b1f923ebde77e6406230ad3c568ea5ba61440152a5881d3409b", 0xab}], 0x2, &(0x7f0000006640)=[@hoplimit={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x10}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x3b, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x28, {0x2, 0x8, 0x2, 0x76, [0x7, 0x8, 0x0, 0x2]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0xa8}}, {{&(0x7f0000006700)={0xa, 0x4e21, 0x7, @mcast2, 0x4f}, 0x1c, &(0x7f0000006e40)=[{&(0x7f0000006740)="ed7c1d9962516cb9aa2aee6175796c44f1080c46d17aab89f6db1d8bb9bf345acf582fd20c64949bda13543af6a5ab5ebf0877d04560a1cb38ae2c4abe6b38506e92b5c3e271b8800c926affad0d2494bd0c53789167dd39b7d4202b65e4599683c8f8224a82710bd3e6ad1d83ad654ed64c5000876a308eb3e2346a1e8d4952b1bc56307d3290b73cec19b1243117f9d99f09b49f25dbac61302628f718a48ee62c5867b2fa9e0306f8aabe4c8ba89076ec87720271c9a55d5b3ca3836eb08b3c9d7730914a190dbab5abb39b83ca1516214b69a8ba18b39346edc77f48e4bcafd8fdb0c33426694f53ee47345b3ca73b5137", 0xf3}, {&(0x7f0000006840)}, {&(0x7f0000006880)="b0144966c8072842e24cee9b8e9c2eb93617c108c878ccb80c7746d68ec7a8c1fc22aab9b70be0e000582975e43d80947000c3b1457eaccea106e6ceca3c024734ec6f5a80158d8b5b07e880c9be4ccbd104943e31beb89e96dd99bed3ddbade5c38c89328c3762a9e691db6933eafb09599ed374065502f2880f1e6a2dddbb384ae7bae3488bad8e95fe7e5c08b8e7b32b10a68da1e18155cc0392c794f37f7922719a04e5c47abe940359d16f19596a61123a35c6f8e53c603dd28f0e3546aaca15d7544f8a13476f2f02b9281baaddb4d", 0xd2}, {&(0x7f0000006980)="be4cb5d724bf95b871543a06d53ef2586b497a1c45553d6d22030e3a5b2eddaaa0658ff073b2978e842da4df8930ebf76b157878654a045982e9db61d239d4086e10c77fa57ee75ba9a9f370891ed9141b3d2ca5841b1f2325bae39b5f85871df16dfdc8692b06d80a3fa447e77c39ae406c4b103e25708b4f8b17ed2fe9c2639d102123c61f867af697afb655e8a6a125ac35bc2f3fea2b8c88e5ccbdad42ff6cb47f37e53a", 0xa6}, {&(0x7f0000006a40)="348bcd2152ac6b9b35a95ffb8d567b3eb8ee07bfa4215a9348c24fbaa5", 0x1d}, {&(0x7f0000006a80)="c33da77c6f75a02a8daacb1fa2aae5f95cc96292d527c5e21a53ff61d19d7b4fa86ab6d27608fdf3f3574be84e609afcb73a18ca240bdb93ceed8477795b5c20359ce2456c1446f86f090c07a1f22570ad4053b7f96f095245e883d1e47b181984333562534681398792e85726ac36928b264e9ed6bb9388e10100ea68bbcdfedf45170555a78493abae3f", 0x8b}, {&(0x7f0000006b40)="0168635f9e2324a2a32a325e780e2dd638d6b801d162dfcd6bd9a145fa792d602d425a93938f1bd876557cbd83c03503cae9213c2c3696b2ca8bdff36e1262ae22a9b0cdc7785eb01f6eddb9ad0306ceb2d34d84087777654de04db5d7615b1ed4e2b1a48c91d3972b1869d6b045c957927d85ecdb77192436e71ea4ca383a6f05d25795413cbba03458c9238864de75889fd8b8022a25feea3c0db8bc1c1865db2b003d03a409b66d4e221bd73dcef03e75af3ce994795993956bb84d6c5c39e6ea9c674decad4633", 0xc9}, {&(0x7f0000006c40)="c945341a415c6740686d5848cc51fe2e29b96efb6cadb02b455906afb5108c4d95c58016908afc37c8ab141bb334bc58f4f016fa3d87acba929e02fc66d14982d2ff45ef3b56a36a34dc167d0eeca54fa4cd4c9af93be5f25cff3f896ed16991b9ac11bbe45be63a1dc37a12438bcef423cdc48e85b3c5830e650a9f21db535f98edfabd58cc9c2057e55173cc5c9b833ec82229f36db7e8e48dfe9457bbdd151e036734291486f98b08cb82d898637a14d5b655a71e94731cc5397dc14708426beabfb5659c820eea29e25d", 0xcc}, {&(0x7f0000006d40)="8653c84f09011185a476b06c256b9fbb449ef7b379820fb7ce5f55517552a2f7811764934a2ef664b6fb8db5d3eddb58bb72f2b3e2c5a92844e4bc614e71c109d9eb6bf019149d26c9d23e941e2ae6a4fd90fa56ea4b141767fdbb6104a2a867d836e3261a1247c51502edb6efae812141cf6d4b721b73238e00feb348f4d5da568973f16a5fe997f6212e4c20d0", 0x8e}, {&(0x7f0000006e00)="20884964b47d6f1b54af45c1c2f56351e9e059474e708235d9f37f0d9b258dcedf8b89918d65f8dd88", 0x29}], 0xa}}, {{&(0x7f0000006f00)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x3957}, 0x1c, &(0x7f00000071c0)=[{&(0x7f0000006f40)="6a6df801d88e4b63957684a71988a7e141d85456e73a4ad8803ec85ac1a9b3770408a13a7754cd98e25e156a498748da01cca3993b89599601dc4f968d1ced15ba05b85493a6f915885b34b4436032ed7c8dbc79a7c6e1bc26c7", 0x5a}, {&(0x7f0000006fc0)="2d14b1ebba0c7f22f3ad61b9b51d3f6980a05d96a73ae5913ecae179b9ec5629f4f83c7f5a389e611aa86031164c521a0b0772cf53c4c43f1605d36490c183", 0x3f}, {&(0x7f0000007000)="474a85193a6fad2ba7325db7db717aae45e7a703a2a39cbd8e33c7c72900637a761871ce81fee28f84b61265a8b4745b5ffbd24f43f91769f6ead24aa84ae1ed0e3342577d81bff586c7183a1f8b7c8b5f73617d4e5c9154bef251c82660185af996e2434d5fe1de069897e59dcc888b4dc93cd68aba849f0747f0", 0x7b}, {&(0x7f0000007080)="dd03b924cca64879b5ffd95e33044c6826b45298e05c01d2644e8af0aefb36c12fd8bca65d6826d704ac838a6f94387a1a1b816c76e3cd73960e2d3f9ce22d404c2bb4c615f1368d7d7d3663445c27ff0567927332c34eea0cb263c756372c299362fe237635c038598dd3e38a3e91ccd9611da71e157d3d58cd22e241cd1ab1705c7cc4714a46dba3a94f025af4787e3b5e4e3425ddd4ac61610e6ddb85fbbf2edcfcb6a8b1dd8e0f8cd6a2d0ee91fc3ef898a1ff15cc12f93979cfca29cca670d66001", 0xc4}, {&(0x7f0000007180)="79dd3d830831975faa3798ddbdb563994dee0a67a13a3cc8208a2fd454493bd3d8cf83bf1edbe9bf", 0x28}], 0x5, &(0x7f0000007240)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffffa}}, @dstopts={{0x80, 0x29, 0x37, {0x33, 0xc, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2c}}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x55, 0x3e, "9067c32ce1d4cc344486656aee10a11b4ab0acda377a3db7ce5aa4197bb843a3078336de1c843f7586ef6577bb5cbff9a3a4c344fcb6e72d6c8c1a6bd871"}, @enc_lim={0x4, 0x1, 0xa}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa00000}}, @hopopts={{0xb0, 0x29, 0x36, {0x3b, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0xda23}, @generic={0xb8, 0x73, "a923366e557d17f5117be35ed80a80eaf20dbc60d016b63d34a593ed4a0941a500c85ac31ac38a1bef7c608c72a3f18d421b58f0068f8e261786f47b78f2d99e77e6ba596a901b1d44d7ade2a5b3c6687a3e7eb0a213cab54609267fe262d6efd34679953dc55915ae43cecf177b58ebdf6f96"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @jumbo={0xc2, 0x4, 0x988b73ac}]}}}], 0x160}}], 0x7, 0x800) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000007580)={0x6, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000008000)={&(0x7f00000075c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007fc0)={&(0x7f0000007640)={0x964, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2f4, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x25c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x7}, {0x3, 0x4}, {0x6, 0x3}, {0x6}, {0x6}, {0x2, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0x7f, 0x40, 0xb0c, 0x7, 0x7fff, 0x6]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x4, 0x2}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x5}, {0x7, 0x6}, {0x2}, {0x7, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x4}, {0x7, 0xa}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x5}, {0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x7}, {0x2, 0x7}, {0x3, 0x9}, {0x7}, {0x4, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x3}, {0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x2, 0x9}, {0x0, 0x5}, {0x3}, {0x4, 0x8}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x7}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x5}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x3, 0x4}, {0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x7}, {0x2, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x2}, {0x5, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0x3}, {0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfc95, 0x2, 0x6, 0x6, 0x3, 0x8, 0x7]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0xc, 0x9, 0x18, 0x4, 0x4, 0x18, 0x6c, 0x1, 0x6, 0xb, 0x12, 0xc, 0x16, 0x6c, 0x1e, 0x48, 0x6, 0x1, 0x12, 0x12, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xa, 0x8000, 0x2, 0x40, 0x3, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb92, 0x8, 0x80, 0x9, 0x0, 0x4, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x18, 0x24, 0x30, 0x1, 0x1]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x45, 0x3, 0x1b, 0x16, 0xb, 0x12, 0x0, 0x6c, 0x24, 0x2, 0x2, 0x48, 0x16, 0xc, 0x24, 0x1b, 0x2, 0x60, 0xc, 0xb, 0x4, 0x3c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0xa}, {0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x16}, {0x5, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x8}, {0x5, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb7, 0x6, 0x0, 0x6, 0x1, 0xf28, 0x92]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xffff, 0x77, 0x969, 0x2, 0x2, 0x742]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x1}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x5}, {0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0xa}, {0x2, 0x11}, {0x2, 0x8}, {0x1, 0x8}, {0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x4}, {0x6, 0x7}, {}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x4}, {0x4, 0x4}, {0x3}, {0x5, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x5, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0x6, 0x6, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x0, 0x400, 0x5, 0x8, 0x8000, 0x5]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x554, 0x11d, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x61}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x7}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x3, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x2}, {0x2, 0xa}, {0x2, 0x2}, {0x3, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xeaa, 0x5, 0x7, 0xf9, 0x4, 0x1, 0xd11]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x8}, {0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0x4}, {}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0x2}, {0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0xa}, {}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x8}, {0x1, 0x9}, {0x4, 0x9}, {0x7, 0x6}, {0x3, 0x4}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x6}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9d11, 0x100, 0x8, 0x4, 0x3, 0xfeff, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x4e, 0x18, 0x2, 0x6, 0x4, 0x48, 0xc, 0xb, 0x9, 0x60, 0x1b, 0x3, 0x5, 0x60, 0xb, 0x1b, 0x48, 0x2, 0x5, 0x18, 0x24, 0xb, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x9, 0x33, 0x2, 0x8, 0x1, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x4}, {0x4}, {0x7, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x7}, {0x0, 0x6}, {0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x8}, {0x5, 0x7}, {0x3, 0x1}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x1}, {0x1, 0x3}, {0x1}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x8}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x7, 0x8, 0x6, 0x101, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0xa}, {0x2, 0x5}, {0x3, 0xa}, {0x4}, {0x4, 0x9}]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8, 0xcfe, 0x93a, 0x5, 0x6647, 0x1bd4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0xa577, 0xfdeb, 0x4, 0x5bf1, 0x8, 0xfff7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x200, 0x7, 0xfffc, 0x0, 0x7, 0x2, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x0, 0xffff, 0x1, 0xb, 0x3, 0x0, 0x17f5]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x1, 0x5, 0x30, 0x4, 0x30, 0x24, 0x60, 0x2, 0x24, 0x2, 0x4, 0x2, 0x18, 0x1, 0x6c, 0x18, 0xd125a09c68bb3650, 0x16, 0x2, 0x305f04cf2d928a99, 0x1, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x30, 0x2, 0x4, 0x1b, 0x9, 0x24, 0x60, 0x18, 0x60, 0xb, 0x5, 0x1b, 0x12, 0x36, 0x9, 0x2, 0x36, 0xb, 0x30, 0x1]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x32, 0x7, 0x4, 0x5, 0x74, 0x5, 0x6, 0x401]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x6}, {0x4, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x6}, {0x4, 0x4}, {0x2, 0x4}, {0x7, 0x6}, {0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x2}, {0x1, 0xa}, {0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x9}, {0x5, 0x6}, {0x4, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x9}, {0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x6, 0x1}, {0x6}, {}, {0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x5, 0x5}, {0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x9, 0x6, 0x60, 0x4, 0x3, 0xb, 0x12, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x30, 0x6c, 0x4, 0x18, 0x4, 0x6, 0xc, 0x1b, 0xc, 0x12, 0x36, 0xb, 0x12, 0x4, 0x24, 0x48, 0x1, 0x24, 0x6c, 0x9, 0x36, 0x2, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x40, 0x40, 0x693, 0xfff8, 0xa, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x9, 0xdd, 0x0, 0xdea, 0x7, 0x9]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0xfbff, 0x5c7a, 0x200, 0x7, 0xc, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe, 0x6, 0x4, 0x7, 0x7, 0x4, 0x7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x3}, {}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x7}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x3, 0x18, 0xc, 0xc, 0x60, 0x1b, 0x5, 0x18, 0x30, 0x4, 0x16, 0xb, 0x4, 0xc, 0x60, 0xc, 0x2, 0xc, 0x6, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x26bb, 0x8, 0x7fff, 0x8, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x9}, {0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x6}, {0x3, 0x6}, {0x7, 0x5}, {0x7, 0x3}, {0x6, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x8, 0x7fff, 0x1, 0x8, 0x10]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x62, 0x0, 0x12, 0xb, 0x9, 0x3, 0x3, 0x2, 0x18, 0xb]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {}, {0x6}, {0x0, 0x1}, {0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x5, 0x5}, {0x6}, {0x5, 0x1}, {0x5, 0x6}, {0x5, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x3}, {0x6}, {0x5, 0x7}, {0x4, 0x1}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xc, 0x2, 0x16, 0x16, 0x14, 0x6, 0x6c, 0xb, 0x16, 0x6c, 0x18, 0x6c, 0x5, 0x6, 0x3, 0x2, 0x48, 0x6c, 0x1c, 0x16, 0xb, 0x5, 0x2, 0x48, 0x49, 0x7bdb1d1af0d98a0b, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd10, 0x1, 0x7, 0x100, 0x6ab, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendto(r7, &(0x7f0000008040)="7ee06f48d21aa5d172ead6e4ba91d0203f38d5e512659d6bd196d4f2b2a0c91be2713cb8a6ea5775018a73a2439f33a6fe01abc2d711c2967c5c5dea5011848b81857f3bec4e7e48a942ab68e875698deb3a42677b106e29a771216263999fec859858fa8c6811124eeecd49c418ea7904b453341da249484516c6ee78a7c5259a17fa232e3d167364f258392e39a86bfb035f19d5295c2b1d814e55", 0x9c, 0x40000, &(0x7f0000008100)=@x25, 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000081c0), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000009580)={&(0x7f0000008180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000009540)={&(0x7f0000008200)={0x1320, r9, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "e6ab45383a18f75670b980b9a5762c0c46d0d5c83d44f988b03fb657015a0c9c24af47ba962a86d49e30138aee1a51dc0749ca7eaa305c70b7800f421b3bc65ac6937385ace03c8279bfe2b94787e84c2e1e544bb1e8997fa8ae9c2aa4a8ffca4ac2159f8033af1d881bb43ca4fda496a217aab555d288041db128d4ba3d1d846b29fbd5cd729b2e0c75cac6bb5aa6559288104bb3de8328d246a8a9911365700244eda906e77da7f754b1ab0328463599ce0be10ed83f168a27616591c99b1e26debf151958ae4b799a24ec434e46ce07d5b5c3558cb3f63455a6a924530161a5eeb037503665edb87d224a5de725a4"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "7416444a8cacd0d26af9e9e45b42a321a515d9507b744d2ccb2d36ef7025b002a7521274bd"}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "21382d73bd7bff2a6eba08514e4e310889240ec840d29cf6dc104843f277eeaeb60d3e6c1e3e78ce1e412d62d5bfe3b50ff509c9648520ea72e32161ea4a1b0b14f0d1e5ef93878a561769af593cf3757ae3b6fc40837c4c29c43aa4e7cd0b46f7f5c36fc39efd604014dfce3f1cc9c7671c7e67551e8da810c9d33956d1292f114f51be818c96ebb14f651d60e19ce64590c14608f8b352303ba3af2a14e7fdeac4288638f10d04e7a27363631429a196826371501efad91b7b2b9df97a40c01e772f9ebb61142aa96f942660e81d4dbc00facea8b8b3d1cbfb96f502f7f9180f29837a4a79957bfb4fad35f3c759943a4d95"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x945b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!\xdf\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1070, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "bf498c2e1af4df006bc87648870a163d8af5783ba3606144e71877f7c94a09abe38f2d74efd75c0d08bbf0be237b60d3609bb203a71c56964f051690b6a8bafacf1f54d6fd4f4dc74f81eb2514d7024429b84e68a228dc6f278f8c1b6b88d9749593"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1320}}, 0x2404c050) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f00000096c0)={&(0x7f00000095c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000009680)={&(0x7f0000009600)={0x54, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xd7435a472db01a1b}]}, 0x54}}, 0x20040000) executing program 5: syz_emit_ethernet(0x40, &(0x7f0000000100)={@local, @empty, @void, {@generic={0x88ca, "fa00"/50}}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x200000, 0x0) ftruncate(r1, 0x7fffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_usb_connect(0x4, 0x5d, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=r2], 0x0) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000ef580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000ef780)={0x0, 0x0, "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", "9a88c58f235ec7adbd7c26ab9d553ed4a9e7a09639a1bac55698dac16ffb96159fd524e85aa6925969100a1c60e053c0bd80be7444343207bcf16dffd24218a7a7987b1f58121a1ea216004fd915ae1a0747c99dc30d8f00a0dad53610282815e0c5744b29587e7b063fe1b90ff0cc4d87f11334193221a78c09d7e850aca82fdce65b7285239a12f855981ab89aef040a8aa09266acb3d61a0714c396919b2637c8a9f67de2e627b09b03cb5d328cc13cffa8a89961c5113ee0fb5781bb6f8146ef89e5f4ee44d0bc463f73a1b03709535a01b9f39cd46286aac9d1f564d2561d1c8d30a29c3846a6ed4a55526b9b48d73feaca5fdd9a7d10bae844a733d7e000b292b012384da42170c5a502ab3e7e3e466370a615b37e826d9cb3958d93d55fcf1c9a4660900c257b6dbdb81d1b4ea5483e57348269f880725b1c492e9a6b59e1322b753eb93e9fe0076c4f3b0d555a58b41e2379b14e9b2ba773fe419d427902ce00bbe09cfd3509deea7637811bfc323f893e81c0060754f59cf095a44a93cdfdd943a9ecabfb7ef9772981bdde8b1383b0b9cc949aed393fd8728bc7d1a7ae0fac430a9dd33fefb9a12f8cc6e334dc7d1dcc1f0f48f5bbaf75bd6ccd648021913f9a62c4acc1907c93bb83e2d88f561fb6c3641fa6375a458769bc7cdb26b2c43776298621852358c09f329a9ff25f03b1f9977eb832186f0fd0d50ac38a05477ff842e570dfd1508abc8e2973d7211baa92f3ca0c958e89c4f1d41a42d5003f435993b1ad48c92437528944e3abef5738e365421cf0ce271cac067c050aad0b3e8c87054a1b7f1e8a772f70a11881893f1bd13a41caa3b44421daa4a8dd20e7d87deb276fcbc2d645c83d16462a1a9908a176a5f29610cb4ee50c4c20f1201b9a30d1db29161171567d435561ca5141410e76b1a99d687eccba412965760632dbc3d3eb36b0ed8818ed21a5ce19714cd3bad30a3ead1426cac957a2a7a8a828a7754a9b1588d774bf6689ba55559355aa72bb0951b69979cd3f64b2bfbeebc8a5da5d7617fbcf74fe2259c08666c6452be32900a12899e6ef523a59d2679c568193e0bf2f5335e3cc425d9747c232ade0e0bd542451da28d1452c10706360061098d6c48652d5022b7428dd6e9dd6b933df2ef53758119a199b25e061ff3820fad41bace90a3a247a87484e5444f4786b1b2604160503c3c6bd4f107053aa319b7868755cb19048b6f05f59e3ef41908ded3069a9dc67766cd25c12751647b5df693183cb6e03ce836c015bf26830774f1c9aca5b9c722dba8417afaf43fd7db680c8b4508aa4d5ce07c79783bd2b25565575228761586187598b641fd1e77107b456d040478cfe9c014b739edae83267283650a26a7e7465540bd44d22526d99545f6705d0b011a34efd423dd2419c81716ef763503aa7e789e92b68357573883681fc3f90e23a167c191d8dafe4b922a1a229b4ea03aba0390fc2176853714842a46a16b5cd6de4552805a0c68317ca74b77dfbe1975c6be8f0040420620e305d664f7b5bb1d2394c36c4d2c103ea1a9153d3df01794af550920bd85a8c7370ae0197e4e7558d8054e7c2e7916e55c48f42750aeb3b543a8b0aa22ee42f84ea219fdeb273019fc9f6163fbd646d7f9845ac4d739a961f7a89e906659f746e04d722e5e5dbbafca5eaf4b9c731cc3c9987bb097ff43ee9f6a9ac7075a4a503a2427ce5ed49389d29c46fd18f396af0137e5949675113dae4a94e6b64bff5826338046067b3dbd4f1a9aa6d9f9f63947c0f0508046e4e7ccbe47763b944051d5f555ca5a851d95395092fb844da81492d5b41bfa954b7ac046d1ec1c635d88b2f6d3cb8b18c5fc3122af46518abbefee3044cf620af2e9aad4907e7c38b8e28f227eacf79ca56967fc5a8776aca668ef1595d07781442a02474a5092c6f17847efb50822714e5468d52e7dacd0b076c532e0226e9be1027d3ad65572648987fee9b53c9c7e0ed67c962697940059e62641916d737c30d1b3aeed6783ff6856754b3f29558aebe10a7c2d83d4b5a18e08a2bdb38eae99f80baf5fa650d726368b402fd17bb0f3cf5d95602905fb63432f1d3ab26c155bfa46f86d6e4e7d6ee4959440125b76a1f9647e50441d49537459ffd025ffcd9e1965909585ab09d1d1a1544c35592a9431d84937cfb20e4695b73d577e40600b360ac206e4f892b4b89fd842c8107355353ae4fe1bd9baf683fb465bede233000c4171dff42876b195752426c51c6d0c0d2e9ab8b44b90527109a601f4e1fb4723d2068f010ace03deec472569d985b4f581c3e9232b810283a252125056d2ac085809c15ff43217c50aff89818dbb62cf57cfcb2051ea96062f3a6184eaa5f3c594fba676d99a213cebfca699232e995476770b2a93942e0a0f9a886d196d2f9b3613acdb097d7cd888e8bc2c02040761fd5a2b8e2f67cc727f8f7770802f7647780e4f931748e3a1f5391b15d99c3f4889a86c694495556868f059275bf4e8a992030eb69e149033c1cc1e2e73bb7d587814ec2208b7dd9b6a2d04e4349d1933ac63003f19fc5e80b9df0ba652d3f9ddd251bf2fd89f41b5f0757cd93d31a1038fcfdbb457c9031cb78b8c52592ff04f26dc18a9ee1ebff9667584b71c0154d8cb6600e4488be238766f705c7a0f90708474f2134eb2e2a6b490532fff14f0753c63bff5968919c57a762dad692ccedd2b074022daa01206055fceeb9c80a51da3e83e37591add2528add75921800f5bb1ef831d238ff3105271dd1e1a6758ababb0c7ade1850c75e9b4a2aaee57c18860648159bbb9f4321b790b1ab7e30684acc3bfade2b8ffbb5c24bc03ee8f05e2dd9e95d393612f09f386a68e921a6de2f7670fe058acfbdaa3a819aea247d5e325cf86d36c3f9298e67f8facdd0da37907c7bb3d092eee68eb8a0e8095286c66d91c8c062a7d4f8dade49167cbaede30d63fb00dad3783d75a3097c85fef2b0571d003e90dbb4d5d0c97a18c1fe74955efbc61b3b3cff0515db2badde1a0332d11f325c2f29f21a965cdedb0cc7535ab429b59fab6037b727ef7687393545a2b6a2a7f89a08d1d150bd6640fd07929105f0b0b68998c45973a3c14eb58a89dc3b85c9c89d7bb9bd6cb2a92b95468b3e15240e09deb375eef6787dbb693cf5cda7f84e3f33ef418bed80c05098d8a60198231b4858bd38f0f31950a98d62ab26e5467f4018888bf1ee5bdb9a6a9e2549aee74156f7dc4ae0b069a1fc9bd2b7ee459f291a38486b6fb753c15231bc1d31c06c2aa8050e9182b71a2ab81a0e47fa0d32355eaa4c5a15de8630a8eb00b7fd46528afa34f0e2f34b6b90a7b03faf767d9429904a3029ffcd7a357e3bd3888cd087096a1fd9def0f192ac625378d4fb17acbee6a7b815b5a8e6296ef7afae3ef9012224fcf411fdb8861743084b64307fd01bb2289f7c96be7fbd095b53457d9eb45dec752a399d4909828bd3fd0b85ffc77b4f9875985ac0cbef320ecbd815939c930e515c9e402363b870cc8e4e9385654643f40cdde137fcaa7dacb8444893e2f8a7a7c48b99324f5a97e265c679b20d2549f359de9945ef08097298b48565692af5d2c55add7bccd16db36b94e167a719138ff70d5008ce3b83a3105c71a9521a08338810ca0a017e6f38add5a4370981c564a451b23948cbd6374a7692c6492c1389394710d829466f91db5fe4d730afc33046e1812cb6d37ac8571ddeedee922f1b19edd4394e1520a3b932bbe8c9f5402e19036d58ea8c79332eb0647892608e78959ea46e48ce32c07d751ccfc2c285cbd0edebdc019d93fef62f72947bd0f586a0ddf139c7fb43084d049d9a9ff2edc829000a66c321448a47926980c5e3b68b977bae36eb78cd4d11fea934c6f8c2374376359d013fc4371fe802bc3b04f1a32bc305d1ad84e4b3f25bfbeb3adb92af7895dc569890579e75f6cb6a62c3afe2b7b2513c073dbe94fb74ef0b2e31c7708b82c69024f766b43ea9aa0676b0f8c604e503c88589a4c098de036af7914df77413fd4acb521648dfaf6dc75351d9839d9544cc89f25939e2715bd94589459b142b356bb4c4b10db6240ecc1887a6a07b2792eaceb36f4c7f45637e1609ca788688a427faa146dcc0eaf3271272fb4ebf9bbb8782a2a6877b28be97adf10adad2ab7c2a9ff0ba33777bbc6e5abcf776adc439576da84dd2ad6cac06bd0b1b26b0a0aa6b6f46361791d9d525a40912c7a61af29d122675bd5e42a9163fab8a6ea14d23945f5a6f7dfc50f7ab57eaf4b749412ebbb44547109c5067d2d8ee2d9120c182848eb7df38f96ff9af492750bde916dee5d9246454aafaf693e5b15c247a12731c2c3a4b896c10088b9e3d83240fcba62a4995c4f402d12f0f4cb9a505a3e61dff7303365d04e171e6629f3911830d464da462347b0e58627bed9c44336136da34d59364f1ed68d6c5043a5c0af5f2a6013d22771ca2988cb5e62b169eadcb2f602551567fa9f1efb5981f3c53885193a6a56adaf4b26422fca9d8d69fa072d5045359d9f1fe0eee07c4c07a4422e284a6710e8295925c52ec1d1eed3e582ff1ef2be770a5f08b599b99ed26341385d9f9808fe9ef4a4cc29e1ae4372bca1472dc2a8c5aa36ec3bb3c76ce241f0d45bc6b63921aedf31820b96ddcb5c5a4351e2f5847433e3f0ee4e3a3ce74ce6e11fb4a7fd2bf2c3c960a99a236ef7abef47ca2071eaeabe7137bbb769b3cf49f28485f95f9875d871644ce846175c69a4468a8690ecde3dd048e6a143e5dd1c9a9b7cb8358b628b800ccacc1f54fb2a75f64dfdefc00aa72dac2c53f9c7ffce6b273e27193286066dd7305f6cbabe78dbc82cbf9a3d7b5c64c9e0266dff11b83b194b5eaca12ee5dac5ce747e516b067869b5ef8bcb2b9a41f2c754d835b7435e53e5ff6ac92bc625ae73491095c8e6f584e386a221c39baa1296a73c4be6865ea19bfa29a34f0ea530970a46465adbdb8add49ac76caada3d73d5101533f7c7869bf47ed013d5cb2d5a682d80a9f7ca8a705b5c1dc59268af867a7565536389dd8c8bd8a61af0aaec14a1eebef4256e187d6a91b6e9510612bbaea3b5fe9694b0928fc97cdc0cee9129bb67000ade41c2bca8b9057784ad7fc19bb87819be08c9001dedb11e693345d7665942cf7d924b2d45836290b097b2b016d412b339c886453e034251aba4686da8769bc1f90e59cf9f1cbd1d95706e6912427af0bab334e7cb61bd98d987f55ceabb0ce49501a1b008b8202717d0cf92bf8680f79abeadd440c12d37c111069b1a1291b6bdaa0f1913f25b9d8024391feb6fed14528016598c5be23fbed1465710968a626c34944b3f11f819dde2d908a28fe0b7eeff505f533e74bc1e0ffc391dade7b5d369"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000480)={r7, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000f0780)={{0x0, 0x6, 0x9, 0x4, 0x5, 0x8000, 0x6, 0xd1e, 0x5, 0x9, 0x4, 0xf190, 0x0, 0x7f, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000f1780)={0x0, ""/256, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000000480)={r12, 0x0, "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", "ab2d796ea2c7a277b04ee407f2b33492bb68ba3d617d5f857d9f38421e3dd7360ed5301a79916344b3e7212671fb8674d1e47c2ec4defdef2fc53d0e91835b2a88d4293328e23a18bee9187dff6507a096cd070bfc8758c792d407fc1b5c40777426eab22e70a35b41a83573e12a1bfa2f5076dac3f4a419d0f2c78d24a6ff84eef1b1c323de887c8c34ddc4d7c931426070059e6b62cc13dc7a67e02ba66a196c8c010fc1637efd24eafd01bb2638325fbad9d59b9435cfc2129fa01b89ac9d7d6856a62a980cb3a4688b04ebb4d255c504f0570a4463f5d3bdac6a63ead1323a1352db40a061c026dc3314d19e0cfabb7cf8b533be1493d0b58787d10490b7bb6e1bd59a3249dcceaba69cffbc3596a62ffad0e2fc11c448f6cbd132ff79b0a1b7799a6b8dfa1ffe8b1340d31ea4d4a562533be69e3ffa7f5cd86a78205084624690428406545bd7dd121c7504ac445d5400d971d3e68763933b550304363571077045b9bfa8b2c953ca10212766a1e82e2667195fa46f198d3c37de0a73989b21d971518d05e3f33231ed0c676622029684468f80aa9ec9b281991dd14993868750b6f0e11881c4903b65297698333d0cdf222e57a084f7b0fb0ad1fe7cef8af3e997974df56b49199b79b4d5883b44f71fef9a2c9982db0657da7ce4f14dfd93d1b6bce746b0a8a596bf6a0a5735746e3276fd16c8ecb430eb68874ab439350390f161e38dc80b6b6b0d22fc7f9407baa78ffb019ee89c27ae36a81eaf0c36e2ae1c1538cfe0b48aa04cf2cad6812d12c54c598691362c9c33048bd7a763ce0a25e593454d2f95b3941ddf2273eb86b3796bcac8dd2938b33ceea3d73d5772d7c2a3a0134b96d6479a2d083797f19d2b44d2c3184525510296e84ef95e747719489ff87da458563ab4ad33657f447d184f9e504e7c35a83140c3706892eef72bcaac28ca986988e12f81ff2471df608e934c3e48a8ab56cc8c57c269ed0d5a27bf0d93d1b2e12d2c24dc35edf9ab4001cead8c3b66c55e10a6c01fb459762df5ba42ce23a825b7b9ca2fa3ae2652bd02323d1989fa222a1086c265d424c4c2757ef3d97c14edd7b232a78fbf7d14f30fd92c8696b34fdbab0c8796cf99fdfc5d60d22808b54351272c99eb7a7474102639b960782ea29e60f50437c4fc109580ee06ecba47b81260b005a398d162e0c7c059a4a7d81ee51c3a662170d92f59a189149d13a4acd5df4f3cabd96de3866da7a49fb1d8948da119cc2c82e839a917c6b05fbe3844b164426907f2ce04d6ca542f3e377723b52fa52dce84e9e28b0d5ad3a4a5aa5312bb4db5c81cacf042f8043b7f0e51fbfcc3373285355ae2e7d1d34c0ce6fb72ff21dcae7e280ad53b818ed96d3841cc6f6a6402e7a88594cc19721f3a921e5af890fdb22885d65c0db13b49c278c271d83853e700ec41acd90db9221f310bbfb26576af38fd0861d1a198ac4b7a000c9dd2bc04a50baf0707dda6707a7b01fc697724c05c1e0bddf41b4dfbfec18b9149a902a97edcc87107e2ddf6a1a628d64835205f0e8ff9707ec7f6eb1cb5a7fbe9fec8384f57d1076571b9213d3270e48951295d62a104e1e9013184153cfc40d38416f85a5ae5a4c5358abddd6f918d1e2eee0c970203154b6e631f37f1f464e0e469ce41ae569d0ffcafe8758c670cd7494c844f426f6f950578249c82cfe3074faaf18c06741fc7059ba54fcaa5274397f03f6a1d27f80e2ca39765510b4d7496092aa7dd9d82ef83218756119098072418976867ed02ac1cb7c36eb7c7c78b38536e1bba74ce87d85d64135be14a5308b9520c71cba13b6d59f76ac8dd628b3fbc3818250a628890af2c7efe5b2e38c2aff1f29fb6ef09d68a33abe041600d10374374b69538d3ae5e1b1fa7e7424a14d8a557a52f85743a1ff67f9bc952e7cef786343253bce6fdbbd06731a27ead1ca558f7cd6cc4173e9e40b7f0824b8f96d9c02dfb9f013e4ad3598ccb7f4d68001e0172cfcef6cbffeeea360b1130ed133225d0931399963a7450da7fa907c591ea0c6613113764cf56548f4eaa4d2911b06ef52971c9101e191637412ea4c2578b55cbfaeafb8c6faa3b56275f32c95d641dc25256d00fd4dd03559d95bcb2b7ff101d75e1744c44b35fbfce3546c7ac51e71c5149781006ef5c68180bda83d9ee1c8bc7aab6c68c13dc736456de0d8a3a3f886753b2730eba65de653add8368ed3b6123fb46e4176a1c64bfcacb989dc5979a783383087cf5c5c5ca3b39f00bc35fc94b12a3e90ff82194e118bf7a9dfcd892995208932e5c3e288b5b7cb85d7e2f843c94255d7fa9064a683d40516a204a63a7d574a2beaf18bbb9edebc2b45635df38d9931c8c46d21b185cc9f76aa99cde3a41d6d9a8f690915ee259650e7341b5ca0492608d259106817a93058dc93a64371b77a81ef093860033349e536e120ff90a5bca42a32e5234820229d94fe6afb19eb030162c87abe8b57d61b769fb1fc668a23f73f414f44a0276a11b8641bf7313f071fc2c28eb26db0c8f1331a1298bc1df7e892a8cde38fb132a2dca7b2200e772bc623263a7188c9a75fdcaa55caf5f62df17a61fb7e9b2af738c939518ffa5eac9059ec02ef557d1efb0352dfe877bdf9fc03f647d8d92c672447ade1a3d199a7b46730b7c752b6bc834f0084a5d3a8d76ed26c70606ede6bb759697558f9f1db60dab2705a6977502005c13ea1a96de4a2df15bf9fd19fafbfaf7cbec7570ac427ba76579035aa6ddcf1001420dc0b511f89f762c5bb1c9285c94a7740886eb8f1c5e8dc2a80028afaae5c107d1fc32b5465ea784084bc2ca78139b0eaffa49a59e9c30f9d181eb0247dbc2b67ea869af1f016293bc19a29193dd3a8f335fffdcb3c4ce939e52c7078b28ec55d0aa77bfc750bb769674041e408126cb9b55d2fe979f62cd0ddcbe6ab68396760cfb73e1669e898b064b55f7d91a8cf8b3806f36bc1afcbd4da66567739db00bfa73f22e7d645e8e633b1f7e4197517e47008ce68f1ca87c886816a0606005a5c5f4e0278f23e770d25438f60374786f9d10ae9c3053042d41e3704fa9b1f7bb50d58334202a0fe7cf722f13c797f68c1d9d9f5a40f2b72534360a05be59c117ff1859bc3a9c3b4691c3d544d9a8a29a941654e46d37c80187d76a26a78c18e4082ee46a3823a8f6ffe85193d0f54968dd459ff1655f1a6071f30e7721adf3d4e74217d5eb70b748559a7955ace4bafdf7558112a5af93c176167eb004d5920494c5c08c0245ca500e315755d1c68d2471475396af5ad6bca9ca13578d529120d5f61f14a1c6f1964f0f0697b99c324714bc2c8a0eee49714084ac0d61d53a526155bfe22bd00f46bfc44880edb45d241eeae4ee5aa550856a70cb33afe3c1dd3f277e15101bfbe0789b92446adc82068d37b04359f2cb00fc6dca36c0a8d128cf00f0c5424f0aeee0f156fde23fcaf6613b9e88d3e159053fa162e048f4967d07fd3d609aa46f44b8fba84e809d74fe309a94a0304618b172fd8b0934e2f200d5218d410a343dcfee6d93e0bc3fe2a78325e4f21560284f8d75eb52efe3df63ffbb90cce2c058177a6bef086fec9968449485937d51eabba2fc784866ad26c7bdad6679b21bdbef733f3fdb44ab499b8b7f54dceb9007725037e1023b92ce5e20a3fd9af457dedf076c958b6b2860401b1f9bbeb0d2bfc3183a114d737c52b1ef7e6c4b8c7082068be31640ea9b646db1603273a6f964ae9887cbd4a9da0a2dcf96aaab3f161ce6f96e8e0bb4d6ae5c32112515b573e808bd360648c700528f01001916e2e27dd24c5264a4514da184a83e36acdf3e0d58944558c99a924ac46a53691ced3170bd405e1fa3789973de7d93e3cc7d4221f8acce9b09af854339f211c123c417b6eb05abf48e7ead51901183bdbd940e627fb25ebc3d91b4fa327c075a041c2547f8c2bd88b3eae56ffc019f16d0be9ae68c4d8571ae62300399809e50c02fb8987c7e784151f00947bade1291d3b07b1d62c6dd66e7685d9051c970ea8c009386075ba1cab1f784fbaba3bf9562f90eb84fd216e3b6385efd488333f5872f681b155e9190bd322d794a06709112fb2032f81d09931a167da0f83271ed34b8714973e0f0dc9d9a36fe7b75222c590616d2c6b10cc61b5d46f683525226c6dba70a3817c3cec0e5fa48674b2d8b27052b54bd57f95fc6798c9f02da6820617def85cc1cddc5467ef8b769af4e42c4c13db7da2d0c91ce873a76b305fba9f3e8782399933f1306e5328cd071a3551b158f18b258cfe2b4374fd620900148ff0d9ffd4270095c9f7c5bab5b6e1b902ee6762a8699249dd0a8806277f93fffb0752ede9e87f6d3f14bd62e3433143f8106476a0b7a09817533e3091ddc6b539b08ee4a0bd05abe23264a041377ae62ffec29e3147d47f4b994d7e8fa67338c7723512532bbc21f53a3d2c641dc09c672d91923bd12d6daf76b58f437f76dea442dd70fa5375ce5d8c65f182c78864ed8c5bfe499abc1f2172f68941f1f73bc21b0e4f5da3346973244be8612a3ee10d6999b6a23732911413c37ab37e6b87918988732dfa06d3a4a61ddfa51630cdbc75be29d1e54e8b16f208826870059fa82dade23b048bc1746a53596a8c52a105e67d181e0d09a87da0738c18dd18aba37fe93626405bd733402d8d47e5fc7ad283e1af79287c9d2f732c72015aed7377d6056336be5b8c8166a1b5edf0bdd0b7cf396268b6d220083778e102146f4380398bc336fb66e98002385731ba09929e7aa6a6efc6a8d984fd7207d801bd1b37f253322a6d105fade9f04d3e99a7d044a1109de73b72d718283a66b47e02dc9f62b7195a2355327cb00b313d34988419bbf4b39d6839d434d3556b1e29c62134f6c4bc7403b7672e99c2b1337dfb4d6b62f6834c8f117fcd09041060a459875403fb4b1c9b503e7436eb581b2a877ca7438ca7f4fe9348750c802d62cc351419339a5557d0e31854ba51e039ba92db30098ada5d5bd0fd7758c9cb9e9faebf1ec06710999a39e5a6cd54f9f0dbb5cb2bf635351b95d6583edc0a1daafe780282a17c3e7146f4d0f51efe931cf64f19bf9bb1730607776874f50e0cf64dbb5d1f4f51630baca8028e6b5035e81c59b104e93b16f8b3f9923cf50f9a6031ce9993687a7acde05c62c14ab827ceb9cabff99f550babbca6fd6a25f017ccd28992d7979f0a7666a8b1ebc59b2db9f5c1faed03e957c0facb7c95bae0ad0ef3f9d23498909560a3041c06a983a6a2890ff62007950604487303007c084267a6b6b2cf907559bef8a106a9fa35783e3130c0a4e596372c39f8ffa529c63ed791f92bcf84b4870b7acce0d4eafe12e4eb3122906531d3f013f0049b5b3393d230f664e"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000f1980)={{0x0, 0xfffffffffffff000, 0x6, 0x8, 0x9, 0xff9, 0x5, 0x7d8a, 0x8, 0x5, 0x7, 0xea9, 0x8, 0x3, 0x9}}) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r14, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={r16, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000f2980)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "ddc843dad18cef"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000f3980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000f3b80)={0x140000002, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4, r7}, {r8}, {r9, r12}, {r13, r16}, {r17, r21}], 0x4f, "4330dd298ec924"}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r22, 0x40047459, 0x0) r23 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x101142, 0xea0d) ioctl$FICLONERANGE(r23, 0x4020940d, &(0x7f0000000100)={{r23}, 0xd, 0x400000000007, 0x7fffffffff7ffffe}) executing program 5: r0 = syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRESHEX], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) syz_usb_control_io$printer(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x16, 0x3, 0x4, 0x0, 0x3, 0x56, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x3) r3 = getpid() setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ae000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xac7e, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r6, 0xcd2e7000) r7 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r7, &(0x7f0000000fc0)=""/224, 0xe0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000201aaaaaaaaaaaa050037000000000008000200", @ANYRES32=r0], 0x40}, 0x4, 0x700000000000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x800804, &(0x7f0000000240)={[{@nodiscard}, {@noinline_data}, {@discard_unit_section}, {@noheap}, {@checkpoint_diasble}, {@jqfmt_vfsv0}, {@io_bits={'io_bits', 0x3d, 0xa}}, {@fsync_mode_posix}, {@disable_roll_forward}, {@block_mode}, {@jqfmt_vfsold}, {@lfs_mode}, {@noheap}, {@atgc}, {@test_dummy_encryption}, {@noinline_xattr}]}, 0x1, 0x5529, &(0x7f0000007880)="$eJzs3E1rY9UbAPAn7XQ6b//5F3Hhbi4MQguTMOnLoLuqM/iCHcqoC1eaJmnITJJbmjStXSm4FBd+E1Fw5dLP4MK1O3GhuBOU3HvrTB3FAdPEdn4/uHnuOTl57jmXUnjuCQngqbWQ/PJTKa7GxYiYjYgrEdl5qTgy63l4LiKuRcTMI0ep6P+j43xEXIqIq6Pkec5S8dZnN4bX13584+evv50/d/nzr76b3qqBaXs+Iro7+fl+N49pK4/3i/7asJ3F7uqwiPkb3QdFO83jfnMry7BfOxpXy+JKKx+f7uz1R3G7U6uPYqu9nfXv9PIL9oetozzZB+7XdrN2o7mVxXY/zWLrMJ/XwWH+v+2wP8jzNIp8H2TpYzA4inl/86CZr2fnQRbrvUHRn+dNG82DURwWsbhc1NNOI5vH1r+50/9tb7Z7ewfJsLnbb6e9ZK1SfaFSvVWu7qaN5qC5Wq51G7dWk8VWZzSsPGjWuuutNG11mpV62l1KFlv1erlaTRZvN7fatV5SrVZWKjfLa0vF2Y3k1bvvJJ1GsjiKL7d7e4N2p59sp7tJ/omlZLmy8uJScr2avLWxmWzeu3NnY/Pt926/e/eljddfKQY9Nq1kcfnm8nK5erO8XF16fE3zZ3X9HxeT/of1w8SUpj0BgNNH/Q9Mw8nV/7v3Ik6+/g/1/1icqvr3Cet/64cJUf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy1vp/74rXsZCFvXy76/1d0PVO0SxExExG//YXZOH8s52yRZ+5vxs/9aQ7flCLLMLrGfHFcioj14vj1/yd9FwAAAODs+vLDa5/m1Xr+sjDtCTFJ+UObmSvvjylfKSLmFn4YU7aZ0cuzY0qW/X2fi4MxZcseYF0YU7L57JHbuTFlezKzx8KFR0IpDzMTnQ4AADARxyuByVYhAAAATNIn054A01GKo63Mo73g7Jv3DzcELx5rAQAAAKdQ6eG+PwAAAHBGZfv/p/T3/z4a+90AAACAMyr//T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n525ylgbiOAD/W96+4Fckxr1XcQfH8AguXRoO4CU4gAu8ghfgDLjzCAYMnRFBujDptI3meZIyTFt+zBC6mJlkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIb0rdmtv3x886lvzvHUT5neAAAAAF0OzW7dvlmm+rN8/kU+9SrXq4ioI6Jr7D6Lx5vMWc5pft//+fr+5o82fI1oE87fMc/H04h4m48fL4f+FQAAAOD/td9sV2m0nl6WUzeIMaVJm/r5u0J5VUQ0y++F0upz3utCYe3/+yE+FEprJ7AWhcLSlNtDqbS/0j7ul1m7xVVRpaLu/NilkcX6DgAAjGh2U4w7CgEAAGBM76duANOo4tdS5mUpcJ6KvLz35KYGAAAA/IOqqRsAAAAADK4d/4+0/9/J/n8AAAAwjbT/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEM6NLv1frNd9c05nu495msdl+707wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mfdxQIgTAIg73rO5O5/2GlQWNDkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf2d2Z2OiYoySQ0QUPOjFptva2pt4UIIH/wQhpNsau/VHm4MtRczFm+Tci+hRRFDirf9Dzy30Um897KGCZ2VmZ7LTJtZV6cyafD7w5n13GOZ93wRCvvNeFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKqO3J3EnPyyO47Q8d+v+tY28v/1Qn7uxc2clb3mcTG6z0Ejis+/F+odkub1EAAAAODo6VX0fEXez3bW8TxeL+j+rrslr/m+fHsdVPf9w3V/1Ve2ft19+vvf83kCL43Hym57bHA6O70+l+/hmOdue+dsrusWTL969dGI+0kjf235ulBXPM/n65s13ekU410S2AMC/cazqy6D6eyjv+20mBsCR0a0V3lX931lsNycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJoy248kqTiJipTuJc7fvX9s4qL+xc2elaqevX9+JLyf3zG+RRcS5zeHgeKOzmW2Xr1y9sD4cDi41H7wUEW2N/lY5/QsfTHFxxJR3nmvvYQr+OkjLH/as5PP/CFr8pQQAwKGUlS2v6+9mu2v5uWQp4o/vHqz/X63FMWX9f+/D07fqY9Xr/35jM5x9q1sXP129fOXq65sX188Pzg8+fuNE/83+yTOnTp1ZLd6VrHpjAgAAwH/TK1u9/k+X9q//L9Ti2F/3pwfV/5990/+iPlbnCNX/SdR3PjzaZNHv8eYEAADAoz378u+/JQecT3q9+Hx9a+tSf3zc+3xifGwh1X9srmz1+r+z1HZWAAAAQBNG28kD6/9na3FMuf//qe9f+DHK/QVRrv/Pl+v/xzY+GZ5tdkozq4l/J257jgAAALRrvmz19f+s2P+f7m15SCPitVfGcfk1gFPV/513v/qhPlZ9///J5qY4k9Ll8fMo+uWI7nLbGQEAAHCYPVG2vNj/Ndtd++inhfd79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3PAAAA//9pRTdi") executing program 6: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853"], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @any, 0x7, 0x2}, 0xe) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0) dup3(r2, r3, 0x80000) r4 = socket(0x8000000010, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x842cc0, 0x0) flock(r6, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) flock(r7, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="0000000000000000ebdde3c7ad58", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r5, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x88) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x1fe, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa3b86dd6002adf701c83a0000000000000000000000ffffac1414aafe8000000000000000000000000000aa"], 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r11 = inotify_init() inotify_add_watch(r11, &(0x7f00000000c0)='./file0\x00', 0x904) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) executing program 3: ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = socket(0x28, 0x80000, 0x3) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000040)={0x8, 0x7, 0x401, 0xffff, 0x100, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private=0xa010100, 0x1, 0x0, 0x30, 0x0, [{@empty}, {@multicast2}, {@private}]}}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000140)=@sg0, 0x0, &(0x7f0000000180)='./file0\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @dev}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7, 0x7157, 0x9173, 0x401, {{0x8, 0x4, 0x0, 0x28, 0x20, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x5b, 0x1, 0xa, [{@private=0xa010102, 0xc}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x7, 0x3, 0x80000001, {{0x20, 0x4, 0x3, 0x36, 0x80, 0x64, 0x0, 0xfd, 0x4, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xb, 0x2c, [@rand_addr=0x64010102, @loopback]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xe, [{@remote, 0x10000}, {@loopback, 0x1}, {@remote, 0x4}, {@multicast1, 0xfffffff9}, {@broadcast}]}, @ssrr={0x89, 0x7, 0x9, [@remote]}, @timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0xc, [{@multicast1, 0x3}, {@rand_addr=0x64010101, 0xfffffff9}, {@empty, 0x6}, {@private=0xa010100, 0xe9bf}, {@multicast1, 0x334}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x7800, 0x40, 0xb59a, 0x8000, {{0x1a, 0x4, 0x2, 0x15, 0x68, 0x67, 0x0, 0x6, 0x4, 0x0, @empty, @empty, {[@generic={0x86, 0xf, "267075587701a72048f98eb545"}, @generic={0x89, 0x11, "d094f58eaba87fbeb52205d2f2f3ff"}, @end, @noop, @timestamp={0x44, 0x8, 0x13, 0x0, 0x6, [0x0]}, @lsrr={0x83, 0x1b, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0xc, 0x15, 0x1, 0x7, [{@broadcast, 0x10001}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x10, 0x40, 0xb63, 0x6, {{0x21, 0x4, 0x2, 0x29, 0x84, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @broadcast, {[@noop, @ssrr={0x89, 0x1f, 0x26, [@rand_addr=0x64010100, @broadcast, @private=0xa010102, @local, @local, @multicast2, @multicast1]}, @lsrr={0x83, 0xf, 0x43, [@empty, @loopback, @rand_addr=0x64010101]}, @cipso={0x86, 0x3f, 0x1, [{0x6, 0x10, "0453c92367b119c85f437a33384a"}, {0x7, 0x8, "6be29fd6d859"}, {0x0, 0x7, "cabb7ed295"}, {0x5, 0x3, "a8"}, {0x1, 0xe, "eb7d7882d2cf534e494f042a"}, {0x1, 0x9, "5355ec9d7f1feb"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x20, 0x20, 0x7, 0x4, {{0x16, 0x4, 0x0, 0x2, 0x58, 0x66, 0x0, 0x7, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x7, 0x3c, [@dev={0xac, 0x14, 0x14, 0x15}]}, @rr={0x7, 0x1b, 0xb1, [@private=0xa010100, @empty, @broadcast, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @end, @timestamp_addr={0x44, 0x1c, 0x6d, 0x1, 0x9, [{@local, 0x7}, {@broadcast, 0x6}, {@local, 0x54}]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000006c0)={@remote, @local, 0x0}, &(0x7f0000000700)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1f8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) r11 = accept4$nfc_llcp(r0, &(0x7f0000000a80), &(0x7f0000000b00)=0x60, 0x800) r12 = accept$nfc_llcp(r11, &(0x7f0000000b40), &(0x7f0000000bc0)=0x60) lseek(r11, 0x2, 0x1) getsockname(r12, &(0x7f0000000c00)=@tipc=@name, &(0x7f0000000c80)=0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r13}, &(0x7f0000000d80), &(0x7f0000000e00)=r14}, 0x20) accept$nfc_llcp(r0, &(0x7f0000000e80), &(0x7f0000000f00)=0x60) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r15, 0x6, 0x14, &(0x7f0000000f40)=0x2, 0x4) r16 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000f80), 0x141000, 0x0) waitid$P_PIDFD(0x3, r16, &(0x7f0000000fc0), 0x2, &(0x7f0000001040)) ioctl$VHOST_VDPA_GET_STATUS(r14, 0x8001af71, &(0x7f0000001100)) sendmsg$GTP_CMD_ECHOREQ(r14, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) executing program 3: getpid() r0 = socket$inet6(0xa, 0x2, 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0xfffffffffffffffe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB="050000000c00b2a58915913427bd22ff69be3c16bd0000430000004000000008000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d80)={r2, &(0x7f0000000cc0), &(0x7f0000000d40)=@udp, 0x2}, 0x20) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = fsopen(&(0x7f0000001340)='cpuset\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r0, r2, &(0x7f0000000100)=0xd7, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) executing program 4: r0 = gettid() r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/218, 0xda}, {&(0x7f00000032c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/4110, 0x100e}, {&(0x7f0000002d00)=""/221, 0xdd}, {&(0x7f00000035c0)=""/62, 0x3e}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f0000000340)=""/163, 0xa3}], 0x7}, 0x8001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x2100, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket(0x10, 0x2, 0x0) close(r3) userfaultfd(0x801) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0xe000001b}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140)={0x2013}) syz_mount_image$fuse(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x1000000, &(0x7f0000000980)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfffff010}, {0x6, 0x4, 0x3, 0x1000}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfff}}, {@lazytime}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@test_dummy_encryption}, {@errors_remount}, {@jqfmt_vfsv0}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0xbe1, &(0x7f0000000f40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007112330000000000950000000000000072b93e0ae20ddfc9e924efe904d5e0a4718df7e77c697ed6b5df5f2a0a3d04c3db18dfc3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x45) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c) accept4$inet6(r0, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000f00)=0x1c, 0x1800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x1, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$cgroup_ro(r1, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0xe8) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r5}]}, 0x28}}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r7, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x41c, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x134}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x700000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x62}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb981}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "1f295e358d827b4f578bdc2313318a8b9ba5ea8c408e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "0247ad878894482db50a45c31f00ea6c7e8c23967ec3ac5b0937e8407b5bd9baadd59f5e17a051cef922351395f41cdb5a22cb157b9d0b1e670f3221baddfe191df71b4979de29e913abaf257d384ed2929df4a8d0c26bf498e50697ef9f79c5fcc5789a146b05bb634e359011aef12778d2bd7eb20d119e7ca60eca8cae51e42b5a1beb458b7f08445f5eae374cd6bd71564c890727b2900beb735c9cef9d37d25d7988dcecf73a9350f4d9"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "bdb9fe942881ef82f384467c6071acb41bbfeb7b006247b68c53b0ea9b59a42320cb87501b030e82f89d6d715d4db19cc17968cd0f79478247af82f57458e84a93190a585226a1c3e24e95b958d2ecc7a721fea00702ed014ff317cfe0b0f714078bb4d720e6dd5b5d46777ab0b2e2ff053ccfed38ba81e22467e93ccace014d18ba7cc1426bde65453ec9"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x10040050}, 0x4008800) r2 = getpgrp(0xffffffffffffffff) sched_setscheduler(r2, 0x1, &(0x7f0000000540)=0x7) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000580)=[@nested_vmresume={0x130, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x40a, 0x7}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4010, 0x8, 0x0, 0xfffffffffffffff8}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xb0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14, 0x800) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000700)=0xfff, 0x4) wait4(r2, &(0x7f0000000740), 0x2, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d0, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xcfd6, 0x54}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6fe}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb2, 0xbe, "c6f39037f9102ea701dd49ca453342819f226e7533049a6d1042010438732486f39dd2a360aba00c4db14fae09568b705b9d3af04ad66f28b82f39c278d377ece91218649748aaef33258e45c1179c181b228ea7c2a1de29acb634026f2e6348aba61c0dd8df880f92ea7763fac3815105e10463ced6768a8ed0cedf370799409285d08c6473fe259c1d670b1e7e95fd7032a5dc244ef0e2100bf444b30f854678f8cade97f50473edaa787021f0"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xea}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x59, 0x1}, {0x9}, {0x30, 0x1}, {0x1}, {0x6, 0x1}, {}, {0x24}, {0x30}, {0xc}, {0x1, 0x1}, {0x1, 0x1}, {0x2f}, {0x6}, {0x48}, {0xc}, {0x2, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fff}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xbf, 0xac, "098a35970fd5a4d65a0a84e52083016f26040f62f836a27005f6843aa91afc3a52d2c6af289b90568ba09006258037b427d6d4aa50948b7193b7516a595f1dee9efe3690f2fab768c4721c979c1564f3cb0690893c4e5db3d8eb80c162665c7d15ca02b3d78c973e4079122d36b90f0068c97bf47c87bf34716783809da92e2e2902ad7ca47eada4c860f587c4152937795ecc1897d49be792f74cf9b5e20f36649ab23c48a4c1ebcf469febb9f0f38f40935c8da6b855769d94c8"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000004) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xbc, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7660}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40050}, 0x4004040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r9, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff8001, 0x15}}}}, ["", "", ""]}, 0x28}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, r9, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x98, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x60040) r11 = fsopen(&(0x7f0000001140)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000001180)={[0x26000, 0x4000, 0xfec00000, 0x10000], 0x7, 0x10, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{0x1, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x240, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5255, 0x4}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000015c0)=[0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0], 0x0, 0x9d, &(0x7f0000001640)=[{}], 0x8, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x17, 0x1c, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc5a}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0x40, 0x6, 0x3, 0x8, 0x1}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x50}, @map_fd={0x18, 0x2, 0x1, 0x0, r13}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_query, @alu={0x4, 0x1, 0x4, 0x7, 0xb, 0x2, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0xff80000}]}, &(0x7f00000014c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', r5, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x5, 0x9, 0x5, 0x8}, 0x10, r15, 0xffffffffffffffff, 0x7, &(0x7f0000001900)=[r16, r4, 0x1], &(0x7f0000001940)=[{0x0, 0x1, 0x9}, {0x4, 0x5, 0xc, 0x1}, {0x3, 0x3, 0x3, 0x2}, {0x0, 0x3, 0x0, 0xf}, {0x4, 0x1, 0xd, 0x5}, {0x0, 0x4, 0x6}, {0x1, 0x2, 0x9, 0x4}]}, 0x94) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80600, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") removexattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000880)=@known='system.posix_acl_access\x00') r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0xc0000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x7ff, {{0x2, 0x4e21, @rand_addr=0x64010101}}}, 0x88) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x3}) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x830, 0x5}}], 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 6: setregid(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x72461000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005340)=[{{&(0x7f0000000a80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)}], 0x1}, 0x5}, {{&(0x7f0000000b80)=@caif=@dgm, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000580)=""/39, 0x27}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/18, 0x12}, {&(0x7f0000000cc0)=""/159, 0x9f}], 0x4, &(0x7f0000005240)=""/200, 0xc4}, 0x4}, {{&(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001080)=""/202, 0xca}, {&(0x7f0000001180)=""/36, 0x24}, {&(0x7f00000011c0)=""/82, 0x52}, {&(0x7f0000001240)=""/76, 0x4c}], 0x4}, 0xf2000000}, {{&(0x7f0000001300), 0xfffffffffffffd3d, &(0x7f00000014c0)=[{&(0x7f0000001380)=""/43, 0x2b}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000051c0)=""/90, 0x5b}, {&(0x7f0000001480)=""/7, 0x7}], 0x4, &(0x7f0000001680)=""/76, 0x4c}, 0x2}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)=""/132, 0x84}], 0x1, &(0x7f00000006c0)=""/36, 0x24}, 0xc21}, {{&(0x7f0000001840)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005140)=[{&(0x7f00000018c0)=""/176, 0xb0}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/32, 0x1d}, {&(0x7f00000029c0)=""/227, 0xe3}, {&(0x7f0000003fc0)=""/80, 0x50}, {&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x7}, 0xffffdff7}], 0x6, 0x2, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x301001) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="090000000082000000000000000100"/24, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28]) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x1067ca5, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES8=r0, @ANYBLOB="f97e878363a244e175278867451fb3dc03dbcc8bce3a1eba04914059f07fa1ce8936b343e1a56e91203b293f04a86e1d07b7b6ab067563186364d8f3dec6cbbb31563f98083fb98a28dc007eddc69da0cb94c2c8bab7a6e0e7ccac161ec9b24a5135961ead111ac7a420adb517c65370c5c55997f875bd37edba998a39eab575546fa15582dce2468448d13c97b37f9d5c"], 0x1, 0x37a, &(0x7f0000000700)="$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") syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000001540)='./file1\x00', 0x200090, &(0x7f0000006d40)=ANY=[@ANYRES16=r0], 0x1, 0x1500, &(0x7f0000002ac0)="$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") creat(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x125) socket(0xa, 0x80000, 0x8) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) rename(&(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)=0x6302d2648d09c26a) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x288600, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r6, 0x7434) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) (async) close(0x3) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (rerun: 64) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000002300)=[{&(0x7f0000000480)="18e4", 0x2}, {&(0x7f0000000340)="8423", 0x2}], 0x2, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1e8, 0x0, 0x118, 0x300, 0x300, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv6=@loopback, 0x2e, 0x18, 0x4}}}, {{@ipv6={@private0, @remote, [0xffffffff, 0xffffff00, 0xff000000, 0xff], [0xff, 0xff, 0xff000000, 0xffffffff], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x11, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2c}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xff, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x62, 0xc, 0x1, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x41, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@rand_addr=0x64010102, 0x1f, 0x3, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8000, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2c, 0x23, 0x7fff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) (async) sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2002, 0x50000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040041}, 0x200008c0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f00000000c0)={0x3}) (async) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) setresgid(0xee00, 0xee01, 0x0) (async) setgroups(0x0, 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0x100000000) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582"], 0x0) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x53}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="66bad004edc4e1f95be2f20f0766baf80cb8a474d486ef66bafc0ced66b855000f00d8c74424004da7ba63c744240277a70000c7442406000000000f011424d9fe82ba0e000000002e0f01cac74424003bb2fe46c744240200000080c7442406000000000f011424"}], 0x14e, 0x6bb6c4a5b2d35095, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) executing program 34: r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611824000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) pwrite64(r0, &(0x7f0000000180)="6e97164cf729de37a7c3b86087af8173a2d6dc468e636855ced4c4282e3ecb9d09eebeb5453c179e0db879b4312160eb6237d809873b41e1eb7a3ec3600b99071bec491eb575cde263113231d87b494a6a2932786358d9fa867e6b59566f07fa042ea867a834094ad1278cad00c03b3269cb10c742e758033aed49df54ed50114bb2e272745fd3ba3c8987606e409a92dacf426ef3fa6c5d311ecc9a", 0x9c, 0x4) executing program 6: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000007a00)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x163) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fallocate(r0, 0x20, 0x2, 0x6ad) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x401]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xe}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0x148}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r2, &(0x7f0000000200)=""/189, 0xbd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7600fbdbdf251b0000000700210080"], 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008110) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="000000000000008000"/18, @ANYRES32=r6, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="7c050000", @ANYRES16=r4, @ANYBLOB="040026bd7000fcdbdf250000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x57c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c4, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x58}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="52400b0d5c714c47aec841623a8e6b58a6445cc627614b23f00b0c71ebcdf5c7"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a2002acd5b7a49a0797e999838f8b322afb4a2fb41e498b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "70f8fe52a73e61e9"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "139ed29fc5a6c29b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="08063eace174bfcb27a37a568b317ae8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "762faa0a52db5a65"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="41bd6c556770756198f1ec147ca52126"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c3db73089c05b3a2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8bfb27a8515816ba3b8e7a68048d15277760adffdbaf1534"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="208068f7953388ae3e855446da85648f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9633e3b3d0217691"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0894d5f55cee0e51272fdceda8b4dc4559c23ae9ea554b2d"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c359c0e404ee4266"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "92eb92bb065df78e"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="27824ae46cd6a45c1588070aac6b5fa45f35cf0b00d4d62c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fc436b0968b31f5e9c9658bdd9509393098575781267fcc84f653e211aba495f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d0ac8f91cc4f5066cb2118e744369bc0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "684dd4660455b22b"}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) syz_mount_image$f2fs(&(0x7f0000000980), &(0x7f0000000940)='./file2\x00', 0x150000, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRESHEX=r2], 0x1, 0x5549, &(0x7f0000008440)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r6, 0x7, 0x1, 0xfffffffffffff000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xfc775000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0xc4) pwritev2(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="15", 0x1}], 0x1, 0x5401, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x4, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x100}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) shutdown(r0, 0x1) recvmmsg(r7, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000008300)=[{&(0x7f0000000540)=""/127, 0x7f}, {&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/24, 0x18}, {&(0x7f0000007080)=""/30, 0x1e}, {&(0x7f00000070c0)=""/93, 0x5d}, {&(0x7f0000007140)=""/190, 0xbe}, {&(0x7f0000007200)=""/35, 0x23}, {&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/151, 0x97}], 0xa}, 0x3}], 0x2, 0x45833af92e4a18de, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "8ace54cfff0845e5c163bf56781d98b7"}) r9 = socket(0x11, 0xa, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1c, 0x0, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x2c, '\x00', r11, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r11, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) executing program 5: r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000007000)=@svm={0x3, 0x1, 0x1080, {0x1000}, {"8dc509f272ad640e077a21c3b3f34ad769f40b8fe2322ef151feee63fc009e256e1648ae442663ab1378e3d3edbb66680ca1ac6501a207a41486f26e2eddb2acfa070cec77472252a27718e64a1d18ee6a158f8d1fbafb29b4daab0c49c5b1b3f8d1cd35d9e15579ce8916ed8eb210c0f02bd60b4e59944d228aa49f207fb097edd85fafadf47e1cae7dc0aab713596f28016ddf8d60b7a46fa62575f52b75ada8fc7e348f872cb11c99c08cad0fadb60dbb86a4787767af8937c4adc85b5b76784f2bbcd7ef39132e4a7a581af8f85fe4cd8c07573188d1a025b96299a0c3731012ba458b4f222e5c1e93569f21d9f37ab52efd2fbfd0e12f62e0cbc6016a65e33f22bcdd0debfe9f7ca361af1a4d6475b0240b81e9f96e98b36f1bcf05b37d688c2f48b57fd6df66a940c924456776b04c2cf17dea85554f3e5fd0a76f815b44f9e84502a27cce7bf5abca9fc245c1ec41ca9991727ffa627ecb92322b2614c13d8812d6c86a1e3ad94d4d03392b352d557dfaf41f6bf4b904563a698f6b204b7d5e088a072b21d3db9247231ac911e6c7005b61badcfa1a43923422e90ff30c66547fb78c4e40f45e6d39ab8aec504a44d070e2aa98709c512ad952e14a874387d96f54824d8276f61a9f36234a040244902a30e8d9caec9cf02f7c0b00d3677fe5185922965e07496fb869ff2d14c2f87c46f3390bad001fe0f60e86b95e7c6186959c844364f3c2f9e0606e99757be1959ef6fb0cff41347481d7486d57f4c6e6c709f52c56f079466b0d6ad410308a7a4de611ef6baa9f903530e7a4a84767cb162e7df667f7070ab8a61209be2198fa631bd8c3caa777a3a3f5edcdd286f6333c46f681867584417f867c028f08cdcd6a4505babc1d283d4a4da25e994b7604c12158ca7f6c9dd844f6d0f778c1f8e360ab91ac40a8c64ac025d5c7c318f3b378a2840c7e71322add523ad77a099cf37439b2b6031aa06bb6fe5d3ee421177aaa52372367f9b33fb88c62a13ab3199228c8e9d06f0d1a953a1ee6bb38dc62f43d1fae048848ad46a843d57b28d4d45f727910c605042cbf65e4dfacd511402d0bcd20eb2847c0ac8e05bb3cc6190306ff0d0333cc9cb86fc23bbbe512c4a69e6c8e300e3b4abb8c8f7ad0a7522581cd3df992c7cc7baadce00bd1dde522eacf069c093f4b893ef530560adb1e5e7565fbd5ff5e26cad7d3d1ba1078edfe4454d87007d762474ad853be42514382aa01b5264065193ae59f11843afa6b1c371582ea1ce421665df2628fb5180ee5786781aba7ad1abdcc6e7fb4772b3c72a93ee602285f27355391e9836a96b304e28d44eb227f6ffd3dc55d09784e98b791afca3da4d0f1dc68ed6ef029926c3a9e126ec9bd2cdd6c50eea848f883edb811221c30f40ba44b9f62b855e8f8a2ffddbe56f7fba91eccdae2699152c9888f295416ffc751bb6471656bf0d12ff61ae1b00fb5659188797199fe6f4f427f4df3725b815b86a9c2b658a6e685bfe75655d1ce5567fafbd73beb099b7aa30fd20a9a26608ff0ce16eb6246df39e59fdd9e30c33fa8b63f6b693404b610695780e40b017f196352e8c4b7333f5485f3cf94e24bd37d071997bcccaf9b2c99460968720baa529655938150ad7b584a2af59684fc94d9878ec0f6932249335d5f76b18e96fea20fa421c8851492be364dd46c0d59bec6f3079ed9f786d6503d1da9381ed33b6ca9f4f33ebc4bda0c08576584fcf4cff860ee1a1ab33b114ec3dee23f6034c6933d987a4494e4783f7044e59b72cdaedc34b46b9660888e1cab1095b35560da047a1a51f6b834a369ccd324829e8dc8b5ca6c5bcf2863c82fb6510e948b0347d8cc8a3cb82a2561108af599e01b3b4552cb93c458f1778da1be9c494b92f17d5aef42a91de32ede16a378e4317c13372795f5fad65147258c0ef7df0aaafde42bd0fe0017f73abff3d6825a87e31805b3e6000b5887f2ef24664a9a6d00707be2b852d5244b4680427ebec8d6a66b9e711f12ff6f625c7e593e6c14c59d2105d32410cdb627ea2d2552bbd5dcad64955dc8da7bf49a3f250bab359129457d6196283a52772cb5c82893c0c8abed4513a085e4da93504185d477248f7b07e610b419c64c0c7d43f1295da9564ac00bdc73adfb65e9c4495ba47ce2ee238175f50d046907fc7fe3f225d0b0f322f84083597477581654c1adf2028465d34ddb3199a6a7d4493e188d5a9bf1ef210254c173b539db2a61721de4fe4207bcfc4b2f51f716332711475f8543bd7908a18aec2779bc1d8b877481a89e32a138487bdb88e2f9665f414118558228d8901a606375b34a709916678a02732475cde265738c5da8b663fe6d78af0cbc9f6c3c55d876dd8f8dc02de6c1235151c962fd07fb8e4036fd62b5419564f81c0b4488ddcabb138f7901baddfa967cd3a0e0de2c7df9b0b09e3328da93abfe7ac9747518fa69afc0f61e27c7e2626f9d283ab79797aaf519652b40cc9ad0ff6cbb13779bbf9742dabddf2fc7774e89d35be5e1bfaeeb18cfc3eafd560792f2514ffb7d403be915a342ff825634304279e812f633ac2c4e67b614622ecdb549680961c81dd39288c0c288854f6651397e304f56c9e8fe0c307d700fdab28e28e3de7a8aaa28630562ad93af9f630b96d970cf687b8f6741cab2d5c02ade4d7bc3b53fc61031a6f43ec98fc30a70cea691bd649361392f00f0039abf777814f80c04910827b73e202201a8db8b0f364b5608325dbaafc8b887ad70ef0bfd659c36824575342e91833a0c4fa9dbcea45bd827b5426d089aba14a6713c7ad0d119d75a83f8e3e064f9bb08262517fff9f599e8c9e5f1fbb3bb85e44165a70a61213773cfa65509b7bcf588c787be25d83c143158357c6fe4a80f90e4c95cecc90a5eb0084a771c76c694c35e2a2361b2c7847a9479dfd66423671a6fb54b7fc8f00a24d5570ad3321029fb0755e80344d9d8e41048d8d1ed58d4cd3fcb7679c4fa90c9f05b323d95f9711941b96a7e2f7116065fef80b82ccc0d5e2d77a2c533bb89fc680febd503df99e007966d1de1d2e097021bf8aad84dc98808a751650cbf96b3c0b954d4ef69db1a640ddd5c765700c901dc3779af55534912ef3a1152f4c55ea9bc4ae12884d51234e570b39b983e6ecbc150bd118bea9a4e90c13051cd34694115a5e3bce52aadbdd8c67c43f58fa43de86c6f3d0cb01f07939ec60bb69405241fbd67d9434845112827cb5cb2ea9a71d6a1e44aedba573e091c231ef44758ba35ff38837322114bc2c3f3699dab3e8e35c870cd2764c7eb38bece602d90f8f0ad744886241985423697aeee651945dc6defb4c94b76543cd3efb802b194ec5bac077013c716b3fc0642c503975676aaaf0a1e5564bd5c1798c0fc7080c11284a02b69cdcf0f0ce183abd208ada49bf39cbc18246b95ae433564226749db415f1fef8a329810510e580ea29e8aefe60989a153e01fe64c2a3ec06b8459357a53ab049a7e1102e7f8b15345a72c6595c7254cb123f337abd35fc3be2f5e4d7e34dcf3f6b15054795d590190d7e28a98fda24ed5e3ace8c46d3450da7550fa20ac65a0aa8f5f0d58fa93a2d41262bec763dece861f60f0b8351d258c689235300fa505326784fa090119d8c17ef71bfd9b273d9af3971a944dc593950c40f82e3772152c6a89308bed0337b8c4fa1559dde1a827030b095bebea40f8cf26d9e8eb3177a671bed43edbfbf9c8f417e2ec22d81ceb192357fa7d59f30cd061475ec021cc80e4ea281b873bfa73c4f5fb558b63778f8c34ea7ec22d0374c213d279f2fd6fee294d669c042b39a8fb402dec8938f0dce307654f1d85d1d29d2f53e0423bc6374d5239280595bdefdd9b60956ad36431678b702f5e9b7687013028cea4b3fa4f90bdd43e41407da4910ff54f9a2d86cb447ad85d21afbe0d4f6d964a5152773e3ebfc74dd24a90c7317519fbfce4de4f00e3a9204835a4f5c8d8c06883adc0f70af573259da6d1c024a60100f1606216bd521e499ac24a298eb2615c13400bf9801d45d76c1442d68a9be53517a3e253391aa8381e8bca436e59003a799b48816a4c511a8312b59daab9c04abf8d15c1932b161248f81e17bc3c6f9d2122119f5f3b35a2bd404c5caa7ca0d69388929aa849b11454450a5ba054edeb03ffacfdb4a6ba2db559dbf2d9db58aee7e1b2393a9fa1a370f3e33c59902c899991a904a3f9ba6256604bd46af3a5fe904c591c9b0aae51c1c5922e6f9eaee435953d3101779851b30a6d7f34a5cb1b6a61cb1fbb266b1774a562e4ee6c51556f89b7b96355cce7b52f515d983f539fd3f3a5575d250bf18c92b6152067f06da6017e5c6103caa2d19b7b4c222e6d888dd05fe3ea42a046856165001f712535dce457146612cc7ca29b52210c184b5eff6216eea669e1b20cbdeeb72784bc919bb84e72b24773a3cbc15fdca52d206319472167e15b058737a89e1d2fe0e9d0f0c4c07d468d35172c20b99c0fd83a0bc55fbc04367acf836750d5599ca2aad848a9b5fc23d8d49e178cfdce55b5aecbccac27b009bd01a517f652aa18b2c444df5f8823f70edd7d9e69bcd8533c7c4f62b57dc228faf437bb496d1c36b252651f5dcc3e06c426368dbc3856236bf43948ad24c966ecf65a7eb67e3092071fbe19da50f46c22c36f42ad4e5e241c59db8d60659ac0c9a5ea6c8601ef8cec1f95db9a2af2a9974e11864a8194b181fd5a410b33e6e8d133293d48237d7c4afc123b881fefa0bf80e2860206f60f15c1bf6263af9c8f3f6fed2c61a9a28ea2639db176a054ae6db6b3fd9d85202d417fb97579084e555c67bbd970b728b46695a410d93f2c5d5581a22d0869c3c430e0db3053db7dcf65d7cfda7749474f70354d4bd0593c217c513c97aa2760f481d8c27b2afcee16cb11f329e2cf6c2856ef2766142e91fc5bd785b8cc93fd63d9fc84d1f5201b4f0e212675bc817814c3da9e717354dcfe5e9db17807a61798d788e6eeb2f77587b8d87b7b9717d9aa1156f839f4aad96f2119abb459a8580ceab506a0cb138a940dc5336325eaa8ee51a5f26c366508947b2bfb4ab75b6ce332eab0e135b7c6fd58e910d71878f1325f6632f07e3c345e8123e633abc758224866667306a7db160cd6f588e9e7f563616b31481a1d13f15b26251c7dbf41e2e241379056cefe7aba5e4346b4b2a5881daf26baf4d669511ffe395755bcd95622ee227470bc2a6ffd9b060492098934e966bdc0886742909ce2796b2d9856609acf34af61bfffa5032f5efa86614ee5b113747ac99caf368a6fdcb489bf759949b9086f887c10ec01e20f2e56eac3dd4da9ec49917267a985254d462f5890504ece9ffe2e788b56cde205024e6143ba42afd18fa3ae1a4e5b57f00779666d8e59dc23a460a4b49671c730a20604c10ad12e956528ef0b98728b639c1ffd3de56ba007a7eaf98e0388b3e745b8d3921e35970a0dae73be8a248f76cc106e9c5c2799aee01548a32054dba29db2db595f41077f40c3fb13fdd97b18a3d6470c11bc3cf891adb5dddd964693ac1e6d4c2e02781cd1bb497895c8cbe58dc74864278578f031eedbbf3b84493b817ad23924533429aa945f5de9f0df21090b89199ff6a8c9206f24f68200890edb15cf27f8c33880ab4fb66d6d5cb72cfb7fa78e90656a89ed8218f20b9d46494c6cb274dc2eedcae2afb4d9656ea410189719aff4bd28da40240f42cc8055ffc59077a701859b1a70576a9a07a80a7aaf29af56c49305"}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLOCK(r5, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write(r4, &(0x7f0000000700)='0', 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) executing program 5: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x7f, 0x2b43938dfd2f7c33, 0x11, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2a, 0x77e}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x4, 0x5, 0x6, 0x5, 0x4, 0xa, 0xd}, @feature_unit={0xd, 0x24, 0x7, 0x6, 0x6, [0x8, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x1, 0x21, {0xa, 0x25, 0x25, 0x40004, 0x5, 0x15}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x80, 0x3, {0xa, 0x25, 0x25, 0x1, 0xb}}}}}}}}]}}, 0x0) executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='macsec0\x00') sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x4c}}, 0x0) executing program 2: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) executing program 7: r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000008a00850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa <> (0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r5, &(0x7f0000000940)={@void, @val={0x2, 0x0, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, "f6e700", 0xfb8, 0x3a, 0xff, @remote, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x2b, 0x0, @remote, @mcast1, [@dstopts={0x3a, 0x1ef, '\x00', [@generic={0xd9, 0xf6f, "edad24e3396dba53e1b881af030a0ca2b6cd58bca0492c74d93aa6c77d821ba56735405caacc4174e924c3979a9a5d0000000000000007505cd87248514efbf3ed8eae32d72f2d854256f465f4e814f8cac37807f7c940d94f4f4c67ee97db16f638809fb0b52eace652993fa5516566d3a875bfa657c83b84fbda3babf4a7640b0cf46d80c3696c8aa9774e25df9422d76f9ede05a57aacdfc3a672ac10ae6b3a21b39f6a91e5a923e7c4d1532a8bfce888fefd676d1c3d3b848d5a525d361cd14b5c960688f0edad4f0e63559c55cc65c954c35bdfe90a9cab842e0c9a8aeca02c3bc3d3e5cac951d4863539083c16457dfb09110342736fffd35911feb6d7d6215d0f1f0ee94c47739f448f5a7862ab51686d30aa49a5b62d23fdb38f8f44c027b00133d851e8813e8f75d9c1e44e99b1f8723ed9e5d8554e8d4ef44581233b9cbbb608cf03e4b0017b519fb5e5e3bdbdc688c4e780b2abb0090062bdf9aee6aca16c651454c2e012f6a59b3df8398d299417a2ee7a26d0fb257aa42d8a3529228df4e85ca507aad6e14089c2fae9605b18bd207163f4e43977a4f039c7af97fddee0b9f0c3486d62b4d135f30c7d92fc1265706a7dcf986aef48d4152fa07676a39497d67add36f539138333df2c4f5948d3ed8f4205590d29986c858a9d45a8c29afdf24fabc352286d8a1b6e5189c96fca077828bc2ce24e6a33292cade32d54b11935363a6540de5f2317cc95ee9468369b8a9a6e4dd0da4c82d2f27b6a1bd78ffbf8d8fef4b95cc46888dcf9926b6113ddecd246c060dc0989793999c5697bcb97d25eef93192f8a38a0a0fb8f66a193c7266b0e6cd33a894fa96cd390e2a1fff57e3a626a2d5f0d0a6e60af7b3f6842b591892dfc87d97328b6e35f6ecd863fe4e362644b9393bf150208d2b67943a318e1ac02e01c1f328e84b5e7770e8defec4df6a54bd99e6b8c043191720f04d6a9f9ca1397bac9a368110903b6129bc21a9f16642132aa9599397c0348eb3649ec6011ffd91030e4072a98eb3943c6c89656fcccafd15c4f7701a8620de486c73f789f2e6e6ac5d47d3887a8723c68d95bed214ca4f0b4a294bf251436e22abb1f357371bef29a31bd59349de04b2b6fbe8c7747bd5c342fe9d79f5845bedf336fe50274a978e8695ef2757c25ce2f34f8a8b6231b47961612c58f7f16c1728ccfd946cdef66724089ef77771ded76c1a1b172b2810c17cae3c70c1824f94fd1aa3f23f18f8d2a139c9ab321d62c409c1a07790a6c8cfcb2350c057c106740c518cabbb8b2d9e287059626436e72304c721bc55d045b6ebee8746873a53e9751d76dffa25654d9012985b2183d147b69eafebcaa258d5f64e0604a972d4b2a3db095c6e65f47ad4ec2246fa626d6e01ea69167bcd5ba51b9a70114f8465101e739fa4be10526754c893fb03f5fecc43fb803c10d90233bfac78ab619a484a1d944d9bcbab7933988b7c45f9c8bd976c2929913a966f7061e649d8684f6291e18fe0091d155e7f4a0b57375e4000858dc25be91c6c7d1e57384cd43fe45959936ad2164e2066ab1c93f3e7372ac6b728cc20513ac0ecdc696585584660b8523124b3b1fc0825c58999cd6437634fc884bc9823d17aaec52929b7993458c383f1e88ec4e396b4896852b6fa5cae58b32d79777ba4fd2e2631a28a692b5aa1005f772de2932303ee5bd685447f855473d8ccf12d06acfb562e36f89352e57a65731fb732bb931ff01871bc3bfb864b48a0e2113f9117af307c251cbf7251f6979f8ff539448d9f4ede03e5de98b06d441ed3430a096baa4920151bbd0234e64c26e39831659c75ac6a30bd18d6d2c4047bc785b3edeed6129d3c234c8a888c2236222a499ecba97dc0e49fc88bfc7bdf1b56ffbcd41a2b1376ca25dd582c987d09855c5ed00308ca663ab0c75b53aae6ef523ce6d08d3ba0c46896553aa55d62791c23577d19fa9fe83ef8df365b137f4e29ec383dc1cb78c42713b2e8934132ff730cbf7e7909355b08510f5b914bb6c38c63f106980015ea84bbbeebc8c581801b1de44a9b54522ed0aa01dafa220d1a6a8e491ab3e4808c885756d6cf1a518e7ccf3035ff7fac8fe7d22aa0c5a97427139757e98462eb136932140cf20a579a3d9ddccabea5c7a0d59770f66984fb5ec13c5b198a447b3d555a6d18fc99d26185b34d3f6eb94a5bc8703d30e38caceac6cf62e3ce627bfa7045668bbb8567df7513f429d259ab0ecf731daee7f68e1caf48a616ea70b50830f5df5ce10c8a42bafbbddd26818fec0ab539d356f8ec7899b17d27e236b876eed62261a3adc87b3cee089259c0c43c40ae901df83cb99ba2bd5dfdec9a5c763207611e98ed050f3e23094d9c4115841b5e7202f918def55b6c191beb97506da7dc80f3b4eadf219592a2117d332cb9ee7bf2d9a27fee5db07c48a52767bdb7b428e062935c6321de2c7a5140897e2a59fc9eba1697af0e16a0a0aae4c498c6478116837449ab5cb5e87aee9e0dcb3dda639eb265b537d111a932c9e8e4e77a2b3ec2cb9769d4627ca3df7e2d789051b299d9e26d6072af52a2b9fa3ac4d771445bd322ab58ffcc92098af5f3be8aedb6bc30fcd6f42659e0b4b50bc912c5d01b7ef57fa57f861e11d89d23a6394ec8ee1f9e9fba351b6d85c50519777fa1a4f7b7c76ec9931fc000cb27099d9ea0f933f7bcf525a8199000e0cbe7686c5df05f8d2928aa1a72ebb5fc4c29975a5b31160a835d9a67f85c0efaf71378afb7dfa9f8b6ae9b66226451aa3c2c14b5fd8b2e6f37e4aeabda215e8c732f5d2e07854033b6982714f8fa7117f9629fb75fecb0835f3b86129a8d1e065a4c2cb94d954e1ce5220b4997221ad61f19a41a2fa12756dca7cf2b1d37c0a6ff12feb3f85ff9894f5777f74552eef5e3ce1e4b03b8143d19bcfd94844ef0c5ce8352be0528b91970990cceeeff7e82e8b969d754cf537f0c98dc2f701353e9e30f58eec1f42fcac932f72e8e53e7bd7f73b190b39b778c655ef490de474a6cf22778116694134b289b399c96a120d2f463d2c1cb7a1534f8aaeb667de68f63aee56c0999213e9a73688a9d779ea3f50aae41137b1d737d3c011f282712346c03269a5c529c36f557746a24aab357bcc82d95089bc294d3cc0d9777debc25cec22e52dd2cdc6140c0db927727070f672eccf0115a4823e051aed4e0a09ba7df05d5fcfc3d81f411a1f8188b11d8b01753e69d323d68e3c02fde3ada4ee28e33f20ab10487c78da84a91929e4ca2da62c86c561b6de6dbec52e1d76654f5cf279b1b35dc02c7e1049fad0960c6526b6b270f0cc0e86f1547c38730bbcd05a01f3dcd8e02ad9c4079f270e2778c35fbced8811d241c9c57ce8d3eb82eff900d1a876858a91aeeda3a57fcb8d9035afb19db1f900873293ded3d95fbbc4bf943dacd2f28aa331fc5f867a403eb231fe00a69a293f6f74fed7f874a6cb0e768536900d3b116e3869c68ecd180953638fad19fb96fe91540abd59511b9859230785cc64fad46ad938a5c429590a747ef774cc86fbd03c660d41e45f673bc0727e7db4e97394e01a9c55d08fbb947dc5697e3f8ad30582d539c877f3c5010d710d3b72adc965501e7519a6ecb446d4ea09cca5016c0ae9fa636b59cf93d6cbfab3f4d92158a5da0be2a82848a06d050c60db88a3ad285c8b34b403015cfa3edd468c5b743c85a56268bfa69cec0c7ddd7ebcf38e1e7ada3c4e32d21b1abffaf4cecead1d73505841615972605363d71de95e0e8a5b36c613f1be3e755913d17f420c9ad3ddda5212c32ae863a54eaabba7c2c9437067d79969ed28133c373fe76f9d319c28165eb271ab6a28e78eb14df25d2dcc27474a25b12f1c7e1725eec80a5ecf907dac67d388bd460cebe4036b3137cb0a90178b0c2c873073dfc1e8dd75316223479462504fb4786d083fb4abb2cf2899faaa46b8527016e1823e06a10c29b1a930982e46458e3fbe9510ac42ecd9be4cfd5321796bb2d97f6432319646f6ee8a2e3fd8af0f6f7912f605463cf025e1a8236d495d49e7c21597aa76c0895139e87271017bcd4ed3858a0d18cadfbccbc4475f5b349e6abd8a4a91fba5c0bddd9e9e66f65317d3dceb45fe8a279bfb55737f2a2fc50027888fd7b8b334106310c1e71b6245233bb90f0b6679f836f47c8b9feb60446640635b6e621e05bd9b9fa1239a419ca10815373bb5fb9fa45c26426e69df242e5a7e5aabd688b11f9bd3b256b8f538c957afe70ba85a9e7aa710c99004dffbb15c96a5c7afa397a9de0abe943448886bb30170b292f2e7de1ccb8c63b709612748291e3817b63ae143dd63aa69e3af7fe03e2eead6a2954e252547a7c2ed39039ee05b57ee33b4c8b93db821682c5a1f30db3389d8b1280a137cea5b6ba5e5f1f4cfe14db678c5b9a50e543c0488e6b21a777eaa1570e03fc9db0cedf5463a4345429987987f2505526a9429987dd04e445772d01e7b047265bf49a988615abf70a270c110f93d1c741dad185935116d287028fddcc414109906bdea43a796f9273d15094a44c0849268b910454dc9030cdd5068ec409dc1b129be1bfed690cf73242ff636aaca6e527a9993c6ab417ea0bbd2be83f471102d252fe81dcbe7f707cc08fbdc279caa147beda3e316a3259ac03cf4726b4b5a72217a266cceb27594c63ea8f17a61840fb8f3a2c1697b0c927010ade965a9970e0f04abf58f94de9b5e5554d99facf41eb5a2f40f9576f64aaacb3f5a5a65ec94c3cdcfac7459e14fa4bbf472b5265a6d37c47fbebbf59a6961d72102612b95e23e08ff83bcda56c9fbfabcb0b67c0af0720ba51c3c8bc98303d7a934db6cfec39e68e84b11e98327c4bba402b5c2fa61f0ee88823871ca38839976084dea63fe1c401b61b67ff8303e08d3739d4e664982792fecbf74e5cdadc7232114237c5056b0186b79ec34c19727e16392015b9e4fc8251252ee63ac5f692e815e45c5c3c5f9c4c28cab690730928a72b705d420ef0c4a4a62ef23b116d86e75d55e91279f1ad804277de389f62f9e137728e6fa14451567096fba8bcb01f4a3901ebeaa51275d82e698d58bec1ce7369b84446ac066bda02d58eb8d836afdaf77195404e746a6d30a47d28df0717ae2f20343f65258021834df0ce3bf564de659934226fa9a7b881fe23dc3889aefd83c426e7245e972e2323bbb94f8e6d05f4505a12f381ace92553f2aa9de5ac6dde9a3253c7bbfd014a5301a5f5b4e94562ac0d5774b4b5a2e672965991ad050eece078f71525944a447699970aee81d4354dc1742556f6f762603b92767345fa2471a75e7e58048963cc8318b3367465c6804661ae7f950866c115e061c217a28bf7abae271dd52fad3f9d3d92f2d6f4f86c79fdbdeda50f1e15c1660c62023b2355af0f9e0af6026cd2b89c0d95e1bdeb038da10b93044ecf8d8e3dfbac2379e6eff713844e4ee09c46439915eaa9fdca7abb26999a9848988245fb8967e47254c212dcff28b29bd7630e192c9e4e4e52e4d76657079c5d0caaa73d2226848c848dea3fb1a9d5ce5032c75aed436"}, @jumbo={0xc2, 0x4, 0x7}, @padn]}]}}}}}, 0xfea) (async) write(r3, &(0x7f0000000080)="822a0a65bd8c002b0304070e0580a7b6070d63e286a5cefe254407607704aaf9beb3aebb9c2b991ed80e9a573da3441e7ede2cbb78c72f0b779bf79c291951d6630f21f7163e448e0e7454c0d2883b40938cee89f343eb2807152a135cc3b3beea3b56f6082fb7d00ad018305887458e547d671773fe8a43c6acf4563679fb96ccf158bcaaf1b8af3b8350551538d87ca06182f3bd3256844779576766fd72", 0x9f) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = getpid() kcmp(r1, 0x0, 0x0, r0, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x9, 0x81, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) (async) socket$netlink(0x10, 0x3, 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BLKRAGET(r7, 0x1263, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000fdff18", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b503"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[], 0x31) executing program 32: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = getpid() kcmp(r1, 0x0, 0x0, r0, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x9, 0x81, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) (async) socket$netlink(0x10, 0x3, 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BLKRAGET(r7, 0x1263, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000fdff18", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b503"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[], 0x31) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000014c0), 0x4, 0x4002) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x10) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000107, 0x0, 0x6}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000280)) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000006ec0)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x460003}, 0xc, &(0x7f0000000a40)={&(0x7f00000001c0)={0x868, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc00}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',},:{$}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-.-:(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff9f}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\'(+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\xbb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x99.#-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xe4!,}.!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '::[\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3800}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '!@{!9!:}\\[!,.\x12\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "4ff49b97b3450a3f7b27a58a07bedad8be5d5a5eb2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "096a4418a892c8a4d1b2c720c273adcc5e7f0166e5fd61992feded7217632bb9488e16fa"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x76, 0x5, "0600d14a935b82426165f1f5abdee529ee552b556c7b1e25d0ad1a3d1b76567f0114d05b3963f8d223bef3a57f2ded34a76698e4509a451a2cae779a2764342fd1ab6bad183a589fbcede299480387d84ef5695d14f82d6fda3e4c8c10e123a79d7c1929f9fc840b78a5cb1c86309c6a86d7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "7ab5e3e62cd534b0bdc97aa63f9bf7fe625c9edd313359a7ba7517d68fe660c8148363829d5f7f13b0b0f447bd701260ef369103596d6fbc98c2b4fee14865e33a9f51ce6a0dff179c22b2f2fef657e6146228e65070300ffea08e0e2d89a58cc4eece3108a6b7bcad65798ccbabbc747aa769d45c2c41bc5fd8cba9c0dd1efcf508056411f982d34a6270459020b5118d6f8db77f3d94e13617346d93f6697948f274"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/5:(%$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\-@+#.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x397a}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\\-(\'\xd9,\x9b-[.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "06d1ec2889f9ce05"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "27293ebb5d626078a218649fd554e2871828452680e02337e434197236dfe0e4d3d954b58b08ea1269904a42562ad7c1be193b2bf16b182c2e87ca2d2d4ed3410f526294ad1b251a009f3e7eaf1919bef92fcfaad04c7109d5d5374426b860ead03bc935415f7c6edba18e93b8e6d77e2fe955e296"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*(^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')@%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(4[@%-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3642}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100007}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x1f-$$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+%/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd717}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '+\xe0^[)})+.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':#-\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x710}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x868}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir bisect: the chunk can be dropped bisect: split chunks (needed=true): <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 30, 20, 30] detailed listing: executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x10001, 0x2, 0x4f, "0d41810700943aaa91e15b1b6f6ff88c6b00", 0x9, 0x140220}) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000c00), 0x9, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000c40)={0x7, 0x80}) (async) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x9f) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x2, 0xb, 0x7, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfd}, 0x10}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) io_submit(0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r5, &(0x7f0000000940)={@void, @val={0x2, 0x0, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, "f6e700", 0xfb8, 0x3a, 0xff, @remote, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x2b, 0x0, @remote, @mcast1, [@dstopts={0x3a, 0x1ef, '\x00', [@generic={0xd9, 0xf6f, "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"}, @jumbo={0xc2, 0x4, 0x7}, @padn]}]}}}}}, 0xfea) (async) write(r3, &(0x7f0000000080)="822a0a65bd8c002b0304070e0580a7b6070d63e286a5cefe254407607704aaf9beb3aebb9c2b991ed80e9a573da3441e7ede2cbb78c72f0b779bf79c291951d6630f21f7163e448e0e7454c0d2883b40938cee89f343eb2807152a135cc3b3beea3b56f6082fb7d00ad018305887458e547d671773fe8a43c6acf4563679fb96ccf158bcaaf1b8af3b8350551538d87ca06182f3bd3256844779576766fd72", 0x9f) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = getpid() kcmp(r1, 0x0, 0x0, r0, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x9, 0x81, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) (async) socket$netlink(0x10, 0x3, 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BLKRAGET(r7, 0x1263, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000fdff18", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b503"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[], 0x31) executing program 32: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = getpid() kcmp(r1, 0x0, 0x0, r0, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x9, 0x81, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) (async) socket$netlink(0x10, 0x3, 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BLKRAGET(r7, 0x1263, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000fdff18", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b503"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[], 0x31) executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000014c0), 0x4, 0x4002) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x10) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000107, 0x0, 0x6}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000280)) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000006ec0)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x460003}, 0xc, &(0x7f0000000a40)={&(0x7f00000001c0)={0x868, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc00}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',},:{$}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-.-:(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff9f}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\'(+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\xbb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x99.#-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xe4!,}.!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '::[\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3800}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '!@{!9!:}\\[!,.\x12\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "4ff49b97b3450a3f7b27a58a07bedad8be5d5a5eb2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "096a4418a892c8a4d1b2c720c273adcc5e7f0166e5fd61992feded7217632bb9488e16fa"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x76, 0x5, "0600d14a935b82426165f1f5abdee529ee552b556c7b1e25d0ad1a3d1b76567f0114d05b3963f8d223bef3a57f2ded34a76698e4509a451a2cae779a2764342fd1ab6bad183a589fbcede299480387d84ef5695d14f82d6fda3e4c8c10e123a79d7c1929f9fc840b78a5cb1c86309c6a86d7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "7ab5e3e62cd534b0bdc97aa63f9bf7fe625c9edd313359a7ba7517d68fe660c8148363829d5f7f13b0b0f447bd701260ef369103596d6fbc98c2b4fee14865e33a9f51ce6a0dff179c22b2f2fef657e6146228e65070300ffea08e0e2d89a58cc4eece3108a6b7bcad65798ccbabbc747aa769d45c2c41bc5fd8cba9c0dd1efcf508056411f982d34a6270459020b5118d6f8db77f3d94e13617346d93f6697948f274"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/5:(%$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\-@+#.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x397a}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\\-(\'\xd9,\x9b-[.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "06d1ec2889f9ce05"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "27293ebb5d626078a218649fd554e2871828452680e02337e434197236dfe0e4d3d954b58b08ea1269904a42562ad7c1be193b2bf16b182c2e87ca2d2d4ed3410f526294ad1b251a009f3e7eaf1919bef92fcfaad04c7109d5d5374426b860ead03bc935415f7c6edba18e93b8e6d77e2fe955e296"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*(^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')@%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(4[@%-\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3642}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100007}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x1f-$$\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+%/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd717}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '+\xe0^[)})+.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':#-\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x710}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x868}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 30, 30, 30] detailed listing: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x20200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) write(r0, &(0x7f0000000400)='off\n', 0x4) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0xb, 0x29, 0x2}, 0xb) executing program 1: r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000040000)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x80000001, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0xffffffff}, {0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff}, {0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000010000)=[@text64={0x40, &(0x7f0000020000)="31c0660f388203", 0x7}], 0x1, 0x7, &(0x7f0000030000)=[@cr0={0x0, 0x80000000}, @cr4={0x1, 0x20000}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 1: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[]) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x0, @private2, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f00003f2000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x168, 0xb, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x100, 0x168, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc]}}, @common=@set={{0x40}, {{0x4, [0x1, 0x0, 0x2, 0x4, 0x3, 0x7], 0x4, 0x9963b34a06fe5c33}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYRES32], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) write$selinux_create(r0, &(0x7f0000000280)=@access={'system_u:object_r:auditctl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7fff}, 0xffffff3a) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir bisect: the chunk can be dropped bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 30] detailed listing: executing program 1: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[]) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x0, @private2, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f00003f2000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x168, 0xb, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x100, 0x168, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc]}}, @common=@set={{0x40}, {{0x4, [0x1, 0x0, 0x2, 0x4, 0x3, 0x7], 0x4, 0x9963b34a06fe5c33}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$eJzs3dFvG3cdAPDvOXabtinJgAeYtDHYUDtB7WZhW8TDGBIST5MQ472ExI2iOnEUO1sTTTT9FxASSDzBMxJ/ABKqxAuPCGkSPIM0BELQgQQPsENnn5PUOSfe5sSt8/lI1/v9fue77/eX+s5355/OAZxbz0XE6xHxQZqmL0bEbN5eyqfY607Z695/+M5yNiWRpm/+PYkkb+ttK8nnV/LVpiPi29+M+F5yNG5rZ/fOUqNR38rrtfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdvjqSfVyPitW/8OcvktV99+e0/3frr9e9nlZl8+eF+fEjl4xZ2u165ON23wtZHDPY4yvpT6VUuDbfO/VPMBwCAwbJz/E9GxBci4sWYjanjT2cBAACAJ1D6tZn4bxKRFrswoB0AAAB4gpQ6Y2CTUjUfCzATpVK12h3D++m4XGo0W+0v3W5ub6x0x8rORaV0e61Rv5mPFZ6LSpLV5zvlg/pLffWFiHgqIn44e6lTry43GyvjvvkBAAAA58SVvuv/f812r/8BAACACTM37gQAAACAU+f6HwAAACaf638AAACYaN96441sSnu/f73y1s72neZbN1bqrTvV9e3l6nJza7O62myudp7Zt37S9hrN5uZXYmP7bq1db7VrrZ3dW+vN7Y32rbWYPpMOAQAAAEc89bkHf0giYu+rlzpT5sK4kwLORHm/lOTzgr3/j1Pd+XuPtKZpeu9UcwNO19QQr3nvYnG78wR4spX7Gwbs68DkqYw7AWDskhOWDxy889t8/vnR5gMAAIzetc/2ff9f7t7XP/57gXK2RunMkgROhZ0Yzq++z/l0dlyJAGeu8/3/sAN5nCzARKkMNQIQmGQf+/v/E6Xph0oIAAAYuZnOlJSq+e29mSiVqtWIq52fBagkt9ca9ZsR8YmI+P1s5WJWn++smZx4zQAAAAAAAAAAAAAAAAAAAAAAAAAAdKVpEikAAAAw0SJKf0l+3X2W/7XZF2b67w9cSP7T+UngCxHx9k/e/NHdpXZ7az5r/8d+e/vHeftL47iDAQAAAPTrXad35v8edzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATJr3H76z3JuGePmlUcX929cjYq4ofjmmO/PpqETE5X8mUT60XhIRUyOIv3c/Ij5TFD/J0toPWRR/FH+EE+LHXP5XKIp/ZQTx4Tx7kB1/Xi/a/0rxXGdevP+VIx6pf1SDj3+xf/ybGrD/Xx0yxtPv/qI2MP79iKfLj8Yv98VPBsR/fsj43/3O7u6gZelPI671Pn86R7zDEQ5Ktfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdv1m6vNer5v4UxfvDMLz84rv+XCz//kjybwf1/oWB7RZ9J/3v37sNP9Sp7R+Nff74g/m9+1pndK4hfyuN8MS9ny6/1ynvd8mHP/vx3zx7X/5WD/lcO9/+k///rgzba78iO8sywbx0A4BS0dnbvLDUa9a2JLWRX6Y9BGgqPU+FiRNS3Wvd6LZVRvEnSNE2zfapg0YOIGGY7SYy4p6XifA4KA48A4z4yAQAAo3Zw0j/uTAAAAAAAAAAAAAAAAAAAAOD8OovHrfXHPHgEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzE/wMAAP//lDPSjg==") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYRES32], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) write$selinux_create(r0, &(0x7f0000000280)=@access={'system_u:object_r:auditctl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7fff}, 0xffffff3a) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30] detailed listing: executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) write$selinux_create(r0, &(0x7f0000000280)=@access={'system_u:object_r:auditctl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7fff}, 0xffffff3a) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 1: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) write$selinux_create(r0, &(0x7f0000000280)=@access={'system_u:object_r:auditctl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7fff}, 0xffffff3a) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a385d3ede5b695c71896aff5c914682aca4fa34ee81de38d27c8f545532", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) chdir(&(0x7f00000003c0)='./bus\x00') executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) brk(0x75555ede6000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) close(0x3) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) mlockall(0x7) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a385d3ede5b695c71896aff5c914682aca4fa34ee81de38d27c8f545532", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a385d3ede5b695c71896aff5c914682aca4fa34ee81de38d27c8f545532", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a385d3ede5b695c71896aff5c914682aca4fa34ee81de38d27c8f545532", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a385d3ede5b695c71896aff5c914682aca4fa34ee81de38d27c8f545532", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) finit_module(r0, 0x0, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a385d3ede5b695c71896aff5c914682aca4fa34ee81de38d27c8f545532", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x9) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file2\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") sync_file_range(0xffffffffffffffff, 0x80000000, 0x1, 0x6) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30] detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000140)=ANY=[]) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir minimized 30 calls -> 3 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 28] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 27] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 26] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 25] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 24] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$eJzsmDFv2kAUx/9nG1tUVenaLq1UJOhQY5u2KkMH5g6t1KpVt6DgIBITIvAAbFE+ROZ8gswoC98jGZJMGUK2TBkc3XHEB4QQBSUC5f2Gx9/vno/nZ/k/HAiCeLacnlwe72fSSa5fIg1L5s/0uEZT6rupq4+H1Z8Hu87FUbf3ozC+HwMQRff/fwNAr6gjlNdRNHp3Wv7+gTbUCXX9HxhsqVeg4a/UPhj+S72u6Dqvt+21auDbq/WgzIXDg8uDx0N+vL/+NkNZ6Y8p6812Z6MUBH7jEcWs+fWLGr4r/anvazgbJ54fXGhwAfGu82D4LfPfYA1nMxiJ8vxvjXh//Ymff7nFm9SMmgQWpdUJYS1GG0sgXsnvod1h4JnzJLAQjc0juNE9+PbYn6I9hoziT4biH7mwtpVrtjufqrVSxa/4m56X/+p8dpwvXk4Y0SDe4X9J4U8vlP0TU2pNZqJVCsOGO4g3117LQtjwbnNcU/ifhuwHQ9g+kzkVsfCavecLWR3YmdotQRAEQRAEQRAEQRAEQRDEPLyDKU5BRyhMpLxf4uTyOgAA///Z2Wwa") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 23] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 22] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1aa, &(0x7f00000004c0)="$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") program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 21] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 20] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0x7, 0x4, 0x6, 0x200, 0x9, 0xfc0a0000, 0x2, 0x0, 0x8, 0x3ab, 0xff, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0xfffffaec, 0x43, 0x4, 0x146eaa9d, 0x3, 0xffffaea7, 0x6, 0x2, 0x2, 0x6, 0x6, 0xffff7fff, 0x0, 0x5, 0xe, 0xc, 0x7, 0x7ff, 0x2, 0x2, 0xfffffffc, 0xffff, 0xfffffff7, 0xffffffff, 0xc, 0x1, 0x7, 0xb, 0x0, 0xc4d4, 0x6, 0x1b5, 0x400, 0x737, 0xfffffffa, 0xffffffff, 0xb2a, 0x7, 0x7, 0x5, 0x7, 0x10000, 0x1, 0xffffffff, 0x9, 0x85, 0x3, 0xa1, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xc7af, 0x3, 0x8001, 0x5, 0xd6, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x9, 0x3, 0x7, 0x10000, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x6, 0x4, 0x3a60, 0x10001, 0x0, 0x5, 0x2, 0x7fffffff, 0x800, 0xc7, 0x8a, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0x7, 0x7, 0x30, 0x6, 0x2, 0xfffffffa, 0x8, 0x2, 0x3, 0x4d, 0x1, 0x8001, 0x1, 0x8, 0x400, 0x81, 0x7, 0x3, 0x101, 0x10000, 0xfffffff9, 0x8, 0x6cec, 0x7, 0x9, 0x81, 0x4, 0x0, 0x5, 0xfffffbff, 0x1, 0x2, 0x0, 0x6a3012fd, 0xffffffff, 0x9, 0x1, 0x916, 0xb5be, 0x4, 0x67, 0x7ff, 0x1ff, 0x6, 0x7, 0x1, 0x3, 0x46e66a69, 0xffff, 0xfffffffb, 0x5, 0x251a, 0x3, 0x5, 0x7, 0x800, 0xfffffffb, 0x6, 0x2, 0x7f, 0x8, 0x3, 0x4, 0x3, 0x401, 0x1, 0x9, 0x3, 0x4, 0x2, 0x7, 0xfff, 0x2, 0x9, 0x2, 0x8, 0xa, 0x13, 0x10, 0x38, 0x80, 0x7, 0x10000, 0x5, 0xedc, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x9e, 0x4, 0x2db2, 0x1, 0xf1, 0x5, 0xb91, 0x1, 0x7, 0x0, 0x7, 0x7, 0x8, 0xbf9, 0x1, 0x8, 0x3, 0x2, 0x4, 0x0, 0x1000, 0xcf, 0x8, 0x6, 0x6, 0x32, 0x8fa, 0x3ff, 0x10, 0x7, 0x8, 0x81, 0x10, 0x6, 0x651, 0x8, 0x7, 0x2, 0x8, 0xf906, 0x5, 0x4, 0xffffff7f, 0x3, 0x6, 0x5, 0x4, 0x32a, 0x80000001, 0x1, 0x3, 0x4, 0x8, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f, 0xffffffffffffffff, 0xf4a, 0xbff, 0x0, {0xb, 0x0, 0xfdff, 0xd6, 0x2, 0x5}, {0x2, 0x0, 0xcb52, 0x2, 0xf}, 0xfffffffe, 0x22a5, 0x8001}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 19] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 18] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'rose0\x00'}) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 17] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 16] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 15] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 14] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 13] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 12] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 10] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 5] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 3] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 2] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 1] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 0] detailed listing: executing program 1: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) executing program 0: program crashed: KASAN: null-ptr-deref Write in vfs_rmdir minimized 30 calls -> 0 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-ioctl$sock_SIOCETHTOOL-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir bisect: concatenation succeeded found reproducer with 3 syscalls minimizing guilty program testing program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-ioctl$sock_SIOCETHTOOL detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) program did not crash testing program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs detailed listing: executing program 0: mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program did not crash testing program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program did not crash testing program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program did not crash testing program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', 0x0, &(0x7f0000000000), 0xc002, 0x0) program did not crash testing program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0xc002, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=43.07976099s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir simplifying C reproducer testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program did not crash testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program did not crash testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program did not crash testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing compiled C program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs program crashed: KASAN: null-ptr-deref Write in vfs_rmdir testing program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir validation run: crashed=true testing program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir validation run: crashed=true testing program (duration=43.07976099s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-mount$incfs detailed listing: executing program 0: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) program crashed: KASAN: null-ptr-deref Write in vfs_rmdir validation run: crashed=true reproducing took 2h10m38.715050216s repro crashed as (corrupted=false): RBP: 00007fff656a4850 R08: 00007fff656a5850 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff656a58e0 R13: 00007f1566593474 R14: 0000000000006eaf R15: 00007fff656a5920 ---[ end trace 34e090e3077976f8 ]--- ================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: null-ptr-deref in atomic_inc_return include/asm-generic/atomic-instrumented.h:250 [inline] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 fs/inode.c:423 Write of size 4 at addr 0000000000000170 by task syz-executor/365 CPU: 1 PID: 365 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:77 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118 __kasan_report mm/kasan/report.c:439 [inline] kasan_report+0xbd/0x140 mm/kasan/report.c:452 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic_inc_return include/asm-generic/atomic-instrumented.h:250 [inline] ihold+0x20/0x60 fs/inode.c:423 d_delete_notify include/linux/fsnotify.h:264 [inline] vfs_rmdir+0x2d5/0x3c0 fs/namei.c:3873 incfs_kill_sb+0xf7/0x200 fs/incfs/vfs.c:1973 deactivate_locked_super+0xa0/0x100 fs/super.c:335 deactivate_super+0xaf/0xe0 fs/super.c:366 cleanup_mnt+0x44f/0x500 fs/namespace.c:1123 __cleanup_mnt+0x19/0x20 fs/namespace.c:1130 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f15664fe317 Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007fff656a4798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f15664fe317 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff656a4850 RBP: 00007fff656a4850 R08: 00007fff656a5850 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff656a58e0 R13: 00007f1566593474 R14: 0000000000006eaf R15: 00007fff656a5920 ================================================================== BUG: kernel NULL pointer dereference, address: 0000000000000170 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 11136e067 P4D 11136e067 PUD 0 Oops: 0002 [#1] PREEMPT SMP KASAN CPU: 1 PID: 365 Comm: syz-executor Tainted: G B W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:165 [inline] RIP: 0010:arch_atomic_inc_return include/linux/atomic-arch-fallback.h:286 [inline] RIP: 0010:atomic_inc_return include/asm-generic/atomic-instrumented.h:251 [inline] RIP: 0010:ihold+0x26/0x60 fs/inode.c:423 Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 7e b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 f5 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 RSP: 0018:ffffc90000ca7d38 EFLAGS: 00010246 RAX: ffff88810dfc3b00 RBX: 0000000000000000 RCX: ffff88810dfc3b40 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff RBP: ffffc90000ca7d48 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 000055555e5f6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000170 CR3: 0000000126dbd000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: d_delete_notify include/linux/fsnotify.h:264 [inline] vfs_rmdir+0x2d5/0x3c0 fs/namei.c:3873 incfs_kill_sb+0xf7/0x200 fs/incfs/vfs.c:1973 deactivate_locked_super+0xa0/0x100 fs/super.c:335 deactivate_super+0xaf/0xe0 fs/super.c:366 cleanup_mnt+0x44f/0x500 fs/namespace.c:1123 __cleanup_mnt+0x19/0x20 fs/namespace.c:1130 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f15664fe317 Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007fff656a4798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f15664fe317 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff656a4850 RBP: 00007fff656a4850 R08: 00007fff656a5850 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff656a58e0 R13: 00007f1566593474 R14: 0000000000006eaf R15: 00007fff656a5920 Modules linked in: CR2: 0000000000000170 ---[ end trace 34e090e3077976f9 ]--- RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:165 [inline] RIP: 0010:arch_atomic_inc_return include/linux/atomic-arch-fallback.h:286 [inline] RIP: 0010:atomic_inc_return include/asm-generic/atomic-instrumented.h:251 [inline] RIP: 0010:ihold+0x26/0x60 fs/inode.c:423 Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 7e b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 f5 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 RSP: 0018:ffffc90000ca7d38 EFLAGS: 00010246 RAX: ffff88810dfc3b00 RBX: 0000000000000000 RCX: ffff88810dfc3b40 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff RBP: ffffc90000ca7d48 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 000055555e5f6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000170 CR3: 0000000126dbd000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 00 00 add %al,(%rax) 4: 55 push %rbp 5: 48 89 e5 mov %rsp,%rbp 8: 41 56 push %r14 a: 53 push %rbx b: 48 89 fb mov %rdi,%rbx e: e8 11 7e b7 ff call 0xffb77e24 13: 48 8d bb 70 01 00 00 lea 0x170(%rbx),%rdi 1a: be 04 00 00 00 mov $0x4,%esi 1f: e8 20 f5 f1 ff call 0xfff1f544 24: 41 be 01 00 00 00 mov $0x1,%r14d * 2a: f0 44 0f c1 b3 70 01 lock xadd %r14d,0x170(%rbx) <-- trapping instruction 31: 00 00 33: 41 ff c6 inc %r14d 36: bf 02 00 00 00 mov $0x2,%edi 3b: 44 89 f6 mov %r14d,%esi 3e: e8 .byte 0xe8 3f: 91 xchg %eax,%ecx final repro crashed as (corrupted=false): RBP: 00007fff656a4850 R08: 00007fff656a5850 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff656a58e0 R13: 00007f1566593474 R14: 0000000000006eaf R15: 00007fff656a5920 ---[ end trace 34e090e3077976f8 ]--- ================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:101 [inline] BUG: KASAN: null-ptr-deref in atomic_inc_return include/asm-generic/atomic-instrumented.h:250 [inline] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 fs/inode.c:423 Write of size 4 at addr 0000000000000170 by task syz-executor/365 CPU: 1 PID: 365 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: __dump_stack+0x21/0x24 lib/dump_stack.c:77 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118 __kasan_report mm/kasan/report.c:439 [inline] kasan_report+0xbd/0x140 mm/kasan/report.c:452 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic_inc_return include/asm-generic/atomic-instrumented.h:250 [inline] ihold+0x20/0x60 fs/inode.c:423 d_delete_notify include/linux/fsnotify.h:264 [inline] vfs_rmdir+0x2d5/0x3c0 fs/namei.c:3873 incfs_kill_sb+0xf7/0x200 fs/incfs/vfs.c:1973 deactivate_locked_super+0xa0/0x100 fs/super.c:335 deactivate_super+0xaf/0xe0 fs/super.c:366 cleanup_mnt+0x44f/0x500 fs/namespace.c:1123 __cleanup_mnt+0x19/0x20 fs/namespace.c:1130 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f15664fe317 Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007fff656a4798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f15664fe317 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff656a4850 RBP: 00007fff656a4850 R08: 00007fff656a5850 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff656a58e0 R13: 00007f1566593474 R14: 0000000000006eaf R15: 00007fff656a5920 ================================================================== BUG: kernel NULL pointer dereference, address: 0000000000000170 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 11136e067 P4D 11136e067 PUD 0 Oops: 0002 [#1] PREEMPT SMP KASAN CPU: 1 PID: 365 Comm: syz-executor Tainted: G B W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:165 [inline] RIP: 0010:arch_atomic_inc_return include/linux/atomic-arch-fallback.h:286 [inline] RIP: 0010:atomic_inc_return include/asm-generic/atomic-instrumented.h:251 [inline] RIP: 0010:ihold+0x26/0x60 fs/inode.c:423 Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 7e b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 f5 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 RSP: 0018:ffffc90000ca7d38 EFLAGS: 00010246 RAX: ffff88810dfc3b00 RBX: 0000000000000000 RCX: ffff88810dfc3b40 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff RBP: ffffc90000ca7d48 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 000055555e5f6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000170 CR3: 0000000126dbd000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: d_delete_notify include/linux/fsnotify.h:264 [inline] vfs_rmdir+0x2d5/0x3c0 fs/namei.c:3873 incfs_kill_sb+0xf7/0x200 fs/incfs/vfs.c:1973 deactivate_locked_super+0xa0/0x100 fs/super.c:335 deactivate_super+0xaf/0xe0 fs/super.c:366 cleanup_mnt+0x44f/0x500 fs/namespace.c:1123 __cleanup_mnt+0x19/0x20 fs/namespace.c:1130 task_work_run+0x127/0x190 kernel/task_work.c:189 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f15664fe317 Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007fff656a4798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f15664fe317 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff656a4850 RBP: 00007fff656a4850 R08: 00007fff656a5850 R09: 00000000ffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff656a58e0 R13: 00007f1566593474 R14: 0000000000006eaf R15: 00007fff656a5920 Modules linked in: CR2: 0000000000000170 ---[ end trace 34e090e3077976f9 ]--- RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:165 [inline] RIP: 0010:arch_atomic_inc_return include/linux/atomic-arch-fallback.h:286 [inline] RIP: 0010:atomic_inc_return include/asm-generic/atomic-instrumented.h:251 [inline] RIP: 0010:ihold+0x26/0x60 fs/inode.c:423 Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 7e b7 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 20 f5 f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 RSP: 0018:ffffc90000ca7d38 EFLAGS: 00010246 RAX: ffff88810dfc3b00 RBX: 0000000000000000 RCX: ffff88810dfc3b40 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff RBP: ffffc90000ca7d48 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 000055555e5f6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000170 CR3: 0000000126dbd000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 00 00 add %al,(%rax) 4: 55 push %rbp 5: 48 89 e5 mov %rsp,%rbp 8: 41 56 push %r14 a: 53 push %rbx b: 48 89 fb mov %rdi,%rbx e: e8 11 7e b7 ff call 0xffb77e24 13: 48 8d bb 70 01 00 00 lea 0x170(%rbx),%rdi 1a: be 04 00 00 00 mov $0x4,%esi 1f: e8 20 f5 f1 ff call 0xfff1f544 24: 41 be 01 00 00 00 mov $0x1,%r14d * 2a: f0 44 0f c1 b3 70 01 lock xadd %r14d,0x170(%rbx) <-- trapping instruction 31: 00 00 33: 41 ff c6 inc %r14d 36: bf 02 00 00 00 mov $0x2,%edi 3b: 44 89 f6 mov %r14d,%esi 3e: e8 .byte 0xe8 3f: 91 xchg %eax,%ecx