last executing test programs: 1m25.765317018s ago: executing program 32 (id=130): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x20}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000007000000080000000b00000000000000", @ANYRES32, @ANYBLOB="010000000061e9413f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, &(0x7f0000000400), 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) memfd_create(0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async) sendmsg(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) (async, rerun: 32) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "fee4aeca"}]}}, 0x0}, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m18.683906354s ago: executing program 5 (id=183): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)={0x5, 0x0, [{0x80000019, 0xf76, 0x3, 0x0, 0x7f}, {0x80000000, 0x40, 0x2, 0x20000000, 0xfffffff9}, {0xa, 0x1, 0xd0, 0x8001, 0x1}, {0x4, 0x1aa204c1, 0x2, 0x9}, {0x80000008, 0x8, 0x8a1, 0x7ff, 0x7}]}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x1, 0x4, 0xffff0000, {{0x6, 0x4, 0x1, 0x30, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x3, 0xb4}]}}}}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000002c0)=0x6, 0x4) chdir(&(0x7f0000000140)='./bus\x00') r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000100)) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="240000001a005f0214f9f507000909000a000000000000000000000004001e0000000000", 0x24) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'sit0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r6) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000f80)={0x1, 0x0, 0x3537, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000280)={0x0, 0xe71, 0x2}) 1m18.679730755s ago: executing program 5 (id=185): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000140)="c0abfba3b82e937ffa7ec2f55e8a42d2cc1d82180b0a065c562f43b6eef6b6b92e0c1aa6b731de7b4ffd1397e62561ba9125f853c79750f532a9431eb47bee35cf0ef64d21477c6bbc15e03eefca13b45f27", &(0x7f0000000040)=""/15, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x501600, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) rt_sigsuspend(0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000100)) 1m18.679353844s ago: executing program 5 (id=186): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000008c"], 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010049"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r7, &(0x7f0000000080)='./file0\x00') 1m18.678600054s ago: executing program 5 (id=187): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000700)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nobh}, {@inlinecrypt}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) close_range(r2, r2, 0x0) 1m18.482516769s ago: executing program 5 (id=188): bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40012020, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000f40)=""/4096, 0x1000, 0x0, &(0x7f0000000500)=""/173, 0xad}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x15}, [@generic={0x3, 0x1, 0x1, 0xff, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xa2, &(0x7f0000000280)=""/162, 0x41100, 0x9, '\x00', r8, @fallback=0xc, r9, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xa, 0x80000001, 0x8000}, 0x10, r10, r3, 0x7, &(0x7f0000000600)=[r0], &(0x7f0000000640)=[{0x5, 0x1, 0xd, 0xc}, {0x5, 0x1, 0x1, 0x3}, {0x3, 0x3, 0x2}, {0x5, 0x5, 0x9, 0x1}, {0x4, 0x1, 0xd, 0x5}, {0x3, 0x1, 0x2, 0x7}, {0x0, 0x4, 0xf, 0x2}], 0x10, 0x3}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 1m18.344570131s ago: executing program 5 (id=190): setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x81, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x800) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) listen(r0, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000000180)={0x113c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "01133e387aa4aa906eb1ae61319f23574591e5544ccb2ff40fdc0852525fc8275878fe734034a949d918da903f34c132d7972e410df992d565e716a51cb7a64c9ab6b33d39a7201f8df2bf463ba58021e3b30bbabdd5f1934b4ddcfb30cbd3023ab20cf7e81480c32a713b723121a0b3fceee3a34bd5f4ffb8d741606c3d3968d77e00ae81016fbf50dbe56a59c2839c32ff089982f1bd0419b5cb8cae6a9873432e8da6d55ccb963848da235b4ab244f37287b1c11ad283e3d89cf14031d5464aed28196dd572c38740c2e1cc609b9fc917714cd15028884e52ccf96e68f2fb8b180c2b9e5262c83f7f359ef9c215171b8de0070acc4acca398a81be98cecfea075248c056b1cbaf9d358efe5b0d0bb2cebffec449b913ee96254a4dc8fda3929bbb4c2993de894a591ef842a561da41ae16d890e60c55345b4976f3f1eb5309dd4a7bace629756abe8b2c94bceeb464ac35212f41d10892441c54dd95873a5b8496298b4a562d15c87df427d997a8ca5d8780e6cb824b0042073506cb267af1ee13b664f1475b29eec01a51560074d754bf59f431786789f042fc9bd654e3737865ee597aa2bad81190dc26637e7b45edae794d4d922db4e3f2ce6ea6202f6679ed6c820b035266967efbfc134a5a652101297d4571f5fe39c8d0e10bb101042d598a2a075d4a86487c9cf726da2a8c639fe3ffcd6489e8c6e059aa9ceff5998975bf085ea7b31b1a0e83e9cbc225fe8c55381ee0399af0d1eaae25577f721b6ec9ef026da7e4cdd11f93343f1f2bdf2e7979fc11975b78e54f425c3f4abcc55c2583ca40f35c5ace7ef9547bd262271c36e6a60ecc8f48b6eb2ddefb0f6ed5a89fcccb69fad7f3ad3a3f6ecfdb0b8379d9daf63e39a72ad64d931a245c0d305a44cb8431601fdc8deb1b3842de43e464c224960e2e9db99b4911d5cbcada20329892f476437146b5e4b6b6e3e8631eb42411bbb893d76fa5e153d8e3a3a22666bd2cfa9549d4d4d89b25e088b16ffe44a42229e15b0edfeabc75cfcfb9c7d2452be939943176f3bc906e7d0945743104a6f1a935e79ee5d3014783a0ae0e5d754dfd39bc86d81e7679261e55b13f2cb1f481d0a586e5f0a4d91286f72036d4d10dec05661c721f0d0ff7742f016c03927386f404f62cd9ea90b689b36ed7ed6ff1335f224e2b436c3f3ede7d90bc65a36c96208efdbd85e5402d82133bbc797955074d57da7c1c7e45d988dbf6c23d85976406848dd96e28f777f86c737d974eb6036ed4c783f049ce90388bfeadab4732d5b18086947b2604ef0d13a5e8113ee06f0abf73995c34c7edcec4803f865553c7d4c58ed5c5530ac24c3e2e43f7b4edbf5c11d5a9afddaa192d709c6dffadf793e88cd04a16dc0da1e106f3a34e020b1923714c74fd9ff51ddbd044812c819f202ab1fbcb6746a92c44c1fcb8fc96e2f06c5bf0bfb086af37baf22be3fbfbfe8b3adbda4bbc1144e7dc4e7517a91a2e869ce3f7ed7c6fa0d535d1518567d5fa8b31875c1abbe7ede0f3253005895d1cad9e415f7c65468797dd63ddfb4b7d43e0f0c3bc26e233c5d9cbce633a35db5264e4c84218d7947929e954492a48deb163f776f2db4df71c6b30f85e1220f76499c1ae694bba8dbc3bb7178852ac10b8b215062030794f8c1adf8338c3f9c0dafd26a4ece152ea1f695adf85ccf45825867dd73ecc40475296e8de2355d826122f31df9d7282ff8269922739b1bdc18fd3ed95c9007ffd70b43d797dccc844797bd5489cacd801e735f4cf4ae80810269117421ef61046b1cae9a6aa74c3b52493a66e3342815bfd50102d351b7d20a89eb8f023605591da881b5ea4425aa928e91074a0af14473725608dae636c5d3c5877e7f2d7c828e560a4efa923ca93cf341f730e5fc74c465afa48a9610a304ec5d375e0455f769e0b388b723b60896a8d9d879bcaad5b69e43f8cfd9fec3a6d330a6bae42bda0b70021198b1dfb56cab6da03f911e84dfe808a325451b4a47e68aeb7cb33364b4445ff15ef65b29d4417e45321739cb87e6a98604fae675666fb8c246262c6a307a18c969bff46595f62ee58435b4a8620db72efa050eb6f8a28b3bfa90b9b7a778ac60594d0f073c4fea8b529b94a4e8db9303c172913fb1a2b0c5bed07d2ecf0e4599aa76c16e88f21409adb7b3ae834709f79d630ca278d0959254408a58c1e499e3e713cc05ad004a08ea9d34dffab07f8a7bca3f0424d0165f0cec78b21e9282c5420ec6567666fc9b46ce067bd36b130f960c5a569b3e9f61b3e75a670789b2ce7019607ed30bb11d42590cbfeae490d646f6e375f14956977c347dbe2433622a494a6aa1ac0fa1702592aa25e85ecd1729ee2e3f5e1fc4e362ea509c63ef1b5ca37edaed1421cba0e243089bdd321b9dd012ae3067e44eb908a13b762924a290b9a7589c9cb5bc3de3d39f73fccf0f5c5b0d4cdf7bd46e9e133815266e151d3c0f1d15850094bc71d0b539957b62e925e6830e1a925da04d8e5a308d6696d3c78f010e9eee840cfe93d4ff1e2564bb3df57abb43c7efcf88f672bb29d7f1d5eb2dfae56ec46bed8f6a7c6f837f5a060d7e02efe503ecdaa699f19c0beb3e871767474e869ce125a02ada6c96267dde7773c38fc9bf88db1d8ba7d3719882057eb6e248ad9fd6a58396dbfc193d088c861f27eb6b08be9ab45347b32a686c997a1a6ba075048251a1a26e79f1317a3c3c117f0f3e66338e209ea115397cf2acc7a966976b33a016f5c95f5f15021393a5f3b421dfd972582aa4373a727b91bad2c0871a44d941bcc776b377f1146c1c7269b86bfe6fcd5b77210faeaae3fee0a80d3bc2b88be975ad2f31bdf40f77b842822b675c6c8b803925031aeddada54471c42ace25c11a3d364c825b8730f1dd7c17677740ea6465325c03e2f993d2d24fce9df5039f5d554bdaa1b1d378f1fcff13bb1de114fa7e81f233417fb2cbb605a8d092c35ee772d422d9685e67e424989f88700284da6e471a7093ba56b1689ed353217bcd49189d43f5656b9a179a2e1c384c07d3568f9c32034befdd6ec7399eb2d996b53c785518727addae8f715445a6fc5461be25d8d1a209783b4407f4bd8d686a463ced4efa41de8a4900142d403bd33aad301cadc23c6669eb5e103bf5333f5ea8a8f9a83b0f725560c6700c8a3fc0b8d2fd839fbf4719b25769666bdd35a170e113d8109cc359608b1150a963c7b20d84fccd79780cd21e32ad45cc05d187b7d382b637c2e9ff81ff5772559ca7314c6aacbac759f3e4edc169fd77f1912132acae42a27c5343bffa999893249c85b24a893e98cd3d08a3254cc2fed06c1b173cdc1779e58b9af7ae451a1e469a89c89d63b058772bafc1cb946d24b98967584354c3ab870c62ea060a90c03a978fa078c5c87fb8f682e478f8da69cc632492b6ac4d37533a3b31804e46b7689d1308546fa6076ee9212ec62ff5e5d93e10ca66bbb0c38f9b14615622cb442daa1960f7f805a7cc316b66ba90eb8251cb05c094f5698a6d93c046f2a3b012aabbf3cb4853fe3e236db6091f086826c6918008edfd07aa775e5a31661b3a8e6cd11c04a9c32db231e05b188b579bf702ea7afc0ee459637f795d03477cfc710e23cf2eed662cf9bb7a01b8ad9c738ac730f4c558372415fec9153baf988088fea1882e185420539d570173ae051a6c5f40254449a55c31a4ac7df02ea964e5a54632e3df307e77bb846938ace2b6ee4914c05ad2da9a0ceac2a2e0c39910748c30da41ccb8971faf7a05f6bce85a6f6e3f9b1efdde01a3217ad9fbd665e7ee24da54399d252e3f6aa4a9edfd4643ef880b5061ffc733d8e0d7478912eac8856e4930a594c502cb4413556b22cec19e975f25e6aa0085599d219d057e44cf07baadd2e91724819b8da973ada5c9ed5ed58442a8f7b0a906a0ae4b5488805cbdddc2e5e1c703c5e95c70d695756e0fe81bc54b524197122804007aa428af84dc32e625182c2b922b9fe5d3385157a8f1b44d8277d7d70e58093ddf727f2da90dba87f9d7c2dbc6e36d188b6ca515f46dcea0226931e074cd26e6b79c950eae8e24115daa41171ed43e86bab0ad64657ab73d0e166685684161bb0658902f4843957a513af78d91e400cfb0744ab1010215bd7376f00f5b0372e329f090558b7efbf3e1e5983c66ded02a2dff38a964b85a4ff18115b4af03cb05ac582317649a8a11c3fdc5a02fab0490a9032d801f820ed5a183fa587089d7a70d5b75b38efc2616ffaeac72804e50200615fe48ae9b7aef309985545be4d5b8eb03fbfc7145fbe88ca708adc817ffd1dd01847e7635ebee8d4cad77d7557460e22cb840a23d922526335a474ede597f6735450421e6a748a6ba1d85a5ffbf602cd5ec117a53ada808cadbc61531c5bf36ee7ad7446faf4a90e7c4da863e31b749e187dfa4513eeab4dc2c5fa2a6bd720f42e420f5b1789f0d6c9e9a7a8e4d8b89f23da9e573ae865beb7c837f23cb6363a3f503aa0f848a3fa9622ba390bd160b500cdb4a0fb3addb8bdb2062f86a7466c7f5aab1dacf11383b8af47e1b7b5e2a4c98ad9f0a0e8d23c0b1842c6a98244e594ae9f5adaf4a6ca6d86fbd0a7db7716c9c3df4abb2d9276e3c91782ff3ddadba33c012ed3bc135fd8cae25a1b92a1bec7be636d375cf18ddceb393c6997fa6e85a3fdc09414c4a7c6e4c76a8ff476aeffc4d03d47f2c842211a0431b68c9cc14fb79df499cc80bd033dfa0dc0fe684e57a040bec848a21cdee9f1123a9330dd29fc9704fe7f051008b84dcb5d01113bf7ec7952222853c57fb9ab3d2bf085ccf4f87c7b0167a4cf6634e77b6b7381627f268fd28979db7298820b61a7420c3eb59e69ba9b1210e33c28aeb88519ad5d2c1ae1164978e520285390f00a93882a075f13918afd6070d7c4ffd89ef2200fbd6a438e5fc1cbb7952a9c8ac92361ec7b10e1846471ca38a5629d58e15ae8cde78833d9b18007564346a53bdda3e2bcc2dad401a593650277d9794fb132dce3e0fcf4f1ee12db6de29e37d05dbe7195485d0ae811377403e826dc75ecc35d7ca0fbeda561b154a102c9df77b49984a88601bcf12ba10a08e8a923a1ac2662531c88a7605508c66b852c42df0fc05fc833e28af86cbc513a7223a83e6ec9446f9cf011f6c28649769ae439cdc87ad12983de4fd7110bfd1e9dfc2e02833a135150ff1c559e54cad973db21cc1362e6d5b3c144fa4614e57c4af3e20757a90f6bffcd43a4951c9fbda09d7bca137887950ba160db0af286616dd1b6730c7e31a0a801a5267f354b2336d2ee6ab0bee64f51ccc65a184f9795a03dd3816382c384c61a671c6dca2f8100dd54d90f1795281e22282b21557a9d78fd7fb00d3d58e389767acf3b824b22b47e08fff6f79f5c3e8c19a1e20195931c2a80ef8540623b1f214eaad0e3737f1c2bed85f830a9f12a4056c79a087bc127fe9987522baf4e6c664b781fbd18eed1ff2b23de860206901eb77b1d69689f3567875e72b17f2786964fc1545d492d26ac6012d66837c9139ab0a50b872e105b614fc8c13f29d1ee541c97c9d94d1f38a12ee48f1ffb6209eef3b5221f11ce176ee9e1cb7bb03e76f47f0d42e831c3663c061d9a8886396896d141249b2ca775ed69d8cc24b47f8284f483045eb8051a180ee263914b2699247ca68e2304b1571e4d5ade31216576e19f4fd3f3c13017ab9e7ac370c1782230d5032e7dad6caaaf95d9f2bd75c142ff3871a40675a3f008ee8a44966860429c0805cd9cf3"}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "17075cc7811b7963aeb82bbeb9b44a12e72cde4c01a6b21b9b1b19e1b983cfdfe0fe90795e190847a15ebe08cc3a762a34e771294168f00b84bf90c84b4fdc55bb6ae3028510a58df8d64a3d6d37e41ce446c785907e60f8c861325402214dd634e5d7c5014012565f2831d93ad8036246e8b0d2ab464739d4e235c85c43da0bf27318eab04f49bee98a96fa594ef8a22b44e32000ecebc99323a4e70f7b74e6dff82329798d94c86d11c68cafbb32539d4e375dd15b058e027c5502491b921c76e29c25b57a1afb58fd788c79eb61bcc407d527bbdbe564b8700c24fab3f523d3dbc04666d56a1fce3a4d0a257aa9517a52"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x113c}, 0x1, 0x0, 0x0, 0x10}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1c}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44844) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r2) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x124, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8e3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x31}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x68, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xaa9, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wg2\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x6c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001ac0), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001b00)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b80)={r8, 0x1000, 0x2}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000001bc0)) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0xec, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x812}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24004891}, 0x4841) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xd8, r1, 0x305, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001fc0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x78, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8e}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000002100)={0x5, [0x7, 0x9], 0x3}, 0x10) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000002140)={[{0x9, 0xb307, 0x9, 0x46, 0xb, 0x9e, 0x9, 0x81, 0x5, 0xe, 0x5, 0xff, 0x1}, {0xab, 0x5, 0x52, 0x2, 0x4, 0x6, 0x8, 0xc0, 0xf7, 0x3, 0x7, 0x8, 0x800}, {0x10, 0x3, 0x1, 0x2, 0xff, 0xf, 0x8f, 0x4, 0x3, 0xf9, 0xc, 0x40, 0x9}], 0x2}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002200), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000002480)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000002240)={0x1e0, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xfffffffa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x9000}, {0x5}, {0x6, 0x11, 0xf15d}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xa6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x401}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x8f11}, {0x5}, {0x6, 0x11, 0xb4f9}, {0x8, 0xb, 0x7}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002500), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000002680)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002640)={&(0x7f0000002540)={0x100, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1m18.323339952s ago: executing program 33 (id=190): setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x81, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x800) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) listen(r0, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000000180)={0x113c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1120, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "01133e387aa4aa906eb1ae61319f23574591e5544ccb2ff40fdc0852525fc8275878fe734034a949d918da903f34c132d7972e410df992d565e716a51cb7a64c9ab6b33d39a7201f8df2bf463ba58021e3b30bbabdd5f1934b4ddcfb30cbd3023ab20cf7e81480c32a713b723121a0b3fceee3a34bd5f4ffb8d741606c3d3968d77e00ae81016fbf50dbe56a59c2839c32ff089982f1bd0419b5cb8cae6a9873432e8da6d55ccb963848da235b4ab244f37287b1c11ad283e3d89cf14031d5464aed28196dd572c38740c2e1cc609b9fc917714cd15028884e52ccf96e68f2fb8b180c2b9e5262c83f7f359ef9c215171b8de0070acc4acca398a81be98cecfea075248c056b1cbaf9d358efe5b0d0bb2cebffec449b913ee96254a4dc8fda3929bbb4c2993de894a591ef842a561da41ae16d890e60c55345b4976f3f1eb5309dd4a7bace629756abe8b2c94bceeb464ac35212f41d10892441c54dd95873a5b8496298b4a562d15c87df427d997a8ca5d8780e6cb824b0042073506cb267af1ee13b664f1475b29eec01a51560074d754bf59f431786789f042fc9bd654e3737865ee597aa2bad81190dc26637e7b45edae794d4d922db4e3f2ce6ea6202f6679ed6c820b035266967efbfc134a5a652101297d4571f5fe39c8d0e10bb101042d598a2a075d4a86487c9cf726da2a8c639fe3ffcd6489e8c6e059aa9ceff5998975bf085ea7b31b1a0e83e9cbc225fe8c55381ee0399af0d1eaae25577f721b6ec9ef026da7e4cdd11f93343f1f2bdf2e7979fc11975b78e54f425c3f4abcc55c2583ca40f35c5ace7ef9547bd262271c36e6a60ecc8f48b6eb2ddefb0f6ed5a89fcccb69fad7f3ad3a3f6ecfdb0b8379d9daf63e39a72ad64d931a245c0d305a44cb8431601fdc8deb1b3842de43e464c224960e2e9db99b4911d5cbcada20329892f476437146b5e4b6b6e3e8631eb42411bbb893d76fa5e153d8e3a3a22666bd2cfa9549d4d4d89b25e088b16ffe44a42229e15b0edfeabc75cfcfb9c7d2452be939943176f3bc906e7d0945743104a6f1a935e79ee5d3014783a0ae0e5d754dfd39bc86d81e7679261e55b13f2cb1f481d0a586e5f0a4d91286f72036d4d10dec05661c721f0d0ff7742f016c03927386f404f62cd9ea90b689b36ed7ed6ff1335f224e2b436c3f3ede7d90bc65a36c96208efdbd85e5402d82133bbc797955074d57da7c1c7e45d988dbf6c23d85976406848dd96e28f777f86c737d974eb6036ed4c783f049ce90388bfeadab4732d5b18086947b2604ef0d13a5e8113ee06f0abf73995c34c7edcec4803f865553c7d4c58ed5c5530ac24c3e2e43f7b4edbf5c11d5a9afddaa192d709c6dffadf793e88cd04a16dc0da1e106f3a34e020b1923714c74fd9ff51ddbd044812c819f202ab1fbcb6746a92c44c1fcb8fc96e2f06c5bf0bfb086af37baf22be3fbfbfe8b3adbda4bbc1144e7dc4e7517a91a2e869ce3f7ed7c6fa0d535d1518567d5fa8b31875c1abbe7ede0f3253005895d1cad9e415f7c65468797dd63ddfb4b7d43e0f0c3bc26e233c5d9cbce633a35db5264e4c84218d7947929e954492a48deb163f776f2db4df71c6b30f85e1220f76499c1ae694bba8dbc3bb7178852ac10b8b215062030794f8c1adf8338c3f9c0dafd26a4ece152ea1f695adf85ccf45825867dd73ecc40475296e8de2355d826122f31df9d7282ff8269922739b1bdc18fd3ed95c9007ffd70b43d797dccc844797bd5489cacd801e735f4cf4ae80810269117421ef61046b1cae9a6aa74c3b52493a66e3342815bfd50102d351b7d20a89eb8f023605591da881b5ea4425aa928e91074a0af14473725608dae636c5d3c5877e7f2d7c828e560a4efa923ca93cf341f730e5fc74c465afa48a9610a304ec5d375e0455f769e0b388b723b60896a8d9d879bcaad5b69e43f8cfd9fec3a6d330a6bae42bda0b70021198b1dfb56cab6da03f911e84dfe808a325451b4a47e68aeb7cb33364b4445ff15ef65b29d4417e45321739cb87e6a98604fae675666fb8c246262c6a307a18c969bff46595f62ee58435b4a8620db72efa050eb6f8a28b3bfa90b9b7a778ac60594d0f073c4fea8b529b94a4e8db9303c172913fb1a2b0c5bed07d2ecf0e4599aa76c16e88f21409adb7b3ae834709f79d630ca278d0959254408a58c1e499e3e713cc05ad004a08ea9d34dffab07f8a7bca3f0424d0165f0cec78b21e9282c5420ec6567666fc9b46ce067bd36b130f960c5a569b3e9f61b3e75a670789b2ce7019607ed30bb11d42590cbfeae490d646f6e375f14956977c347dbe2433622a494a6aa1ac0fa1702592aa25e85ecd1729ee2e3f5e1fc4e362ea509c63ef1b5ca37edaed1421cba0e243089bdd321b9dd012ae3067e44eb908a13b762924a290b9a7589c9cb5bc3de3d39f73fccf0f5c5b0d4cdf7bd46e9e133815266e151d3c0f1d15850094bc71d0b539957b62e925e6830e1a925da04d8e5a308d6696d3c78f010e9eee840cfe93d4ff1e2564bb3df57abb43c7efcf88f672bb29d7f1d5eb2dfae56ec46bed8f6a7c6f837f5a060d7e02efe503ecdaa699f19c0beb3e871767474e869ce125a02ada6c96267dde7773c38fc9bf88db1d8ba7d3719882057eb6e248ad9fd6a58396dbfc193d088c861f27eb6b08be9ab45347b32a686c997a1a6ba075048251a1a26e79f1317a3c3c117f0f3e66338e209ea115397cf2acc7a966976b33a016f5c95f5f15021393a5f3b421dfd972582aa4373a727b91bad2c0871a44d941bcc776b377f1146c1c7269b86bfe6fcd5b77210faeaae3fee0a80d3bc2b88be975ad2f31bdf40f77b842822b675c6c8b803925031aeddada54471c42ace25c11a3d364c825b8730f1dd7c17677740ea6465325c03e2f993d2d24fce9df5039f5d554bdaa1b1d378f1fcff13bb1de114fa7e81f233417fb2cbb605a8d092c35ee772d422d9685e67e424989f88700284da6e471a7093ba56b1689ed353217bcd49189d43f5656b9a179a2e1c384c07d3568f9c32034befdd6ec7399eb2d996b53c785518727addae8f715445a6fc5461be25d8d1a209783b4407f4bd8d686a463ced4efa41de8a4900142d403bd33aad301cadc23c6669eb5e103bf5333f5ea8a8f9a83b0f725560c6700c8a3fc0b8d2fd839fbf4719b25769666bdd35a170e113d8109cc359608b1150a963c7b20d84fccd79780cd21e32ad45cc05d187b7d382b637c2e9ff81ff5772559ca7314c6aacbac759f3e4edc169fd77f1912132acae42a27c5343bffa999893249c85b24a893e98cd3d08a3254cc2fed06c1b173cdc1779e58b9af7ae451a1e469a89c89d63b058772bafc1cb946d24b98967584354c3ab870c62ea060a90c03a978fa078c5c87fb8f682e478f8da69cc632492b6ac4d37533a3b31804e46b7689d1308546fa6076ee9212ec62ff5e5d93e10ca66bbb0c38f9b14615622cb442daa1960f7f805a7cc316b66ba90eb8251cb05c094f5698a6d93c046f2a3b012aabbf3cb4853fe3e236db6091f086826c6918008edfd07aa775e5a31661b3a8e6cd11c04a9c32db231e05b188b579bf702ea7afc0ee459637f795d03477cfc710e23cf2eed662cf9bb7a01b8ad9c738ac730f4c558372415fec9153baf988088fea1882e185420539d570173ae051a6c5f40254449a55c31a4ac7df02ea964e5a54632e3df307e77bb846938ace2b6ee4914c05ad2da9a0ceac2a2e0c39910748c30da41ccb8971faf7a05f6bce85a6f6e3f9b1efdde01a3217ad9fbd665e7ee24da54399d252e3f6aa4a9edfd4643ef880b5061ffc733d8e0d7478912eac8856e4930a594c502cb4413556b22cec19e975f25e6aa0085599d219d057e44cf07baadd2e91724819b8da973ada5c9ed5ed58442a8f7b0a906a0ae4b5488805cbdddc2e5e1c703c5e95c70d695756e0fe81bc54b524197122804007aa428af84dc32e625182c2b922b9fe5d3385157a8f1b44d8277d7d70e58093ddf727f2da90dba87f9d7c2dbc6e36d188b6ca515f46dcea0226931e074cd26e6b79c950eae8e24115daa41171ed43e86bab0ad64657ab73d0e166685684161bb0658902f4843957a513af78d91e400cfb0744ab1010215bd7376f00f5b0372e329f090558b7efbf3e1e5983c66ded02a2dff38a964b85a4ff18115b4af03cb05ac582317649a8a11c3fdc5a02fab0490a9032d801f820ed5a183fa587089d7a70d5b75b38efc2616ffaeac72804e50200615fe48ae9b7aef309985545be4d5b8eb03fbfc7145fbe88ca708adc817ffd1dd01847e7635ebee8d4cad77d7557460e22cb840a23d922526335a474ede597f6735450421e6a748a6ba1d85a5ffbf602cd5ec117a53ada808cadbc61531c5bf36ee7ad7446faf4a90e7c4da863e31b749e187dfa4513eeab4dc2c5fa2a6bd720f42e420f5b1789f0d6c9e9a7a8e4d8b89f23da9e573ae865beb7c837f23cb6363a3f503aa0f848a3fa9622ba390bd160b500cdb4a0fb3addb8bdb2062f86a7466c7f5aab1dacf11383b8af47e1b7b5e2a4c98ad9f0a0e8d23c0b1842c6a98244e594ae9f5adaf4a6ca6d86fbd0a7db7716c9c3df4abb2d9276e3c91782ff3ddadba33c012ed3bc135fd8cae25a1b92a1bec7be636d375cf18ddceb393c6997fa6e85a3fdc09414c4a7c6e4c76a8ff476aeffc4d03d47f2c842211a0431b68c9cc14fb79df499cc80bd033dfa0dc0fe684e57a040bec848a21cdee9f1123a9330dd29fc9704fe7f051008b84dcb5d01113bf7ec7952222853c57fb9ab3d2bf085ccf4f87c7b0167a4cf6634e77b6b7381627f268fd28979db7298820b61a7420c3eb59e69ba9b1210e33c28aeb88519ad5d2c1ae1164978e520285390f00a93882a075f13918afd6070d7c4ffd89ef2200fbd6a438e5fc1cbb7952a9c8ac92361ec7b10e1846471ca38a5629d58e15ae8cde78833d9b18007564346a53bdda3e2bcc2dad401a593650277d9794fb132dce3e0fcf4f1ee12db6de29e37d05dbe7195485d0ae811377403e826dc75ecc35d7ca0fbeda561b154a102c9df77b49984a88601bcf12ba10a08e8a923a1ac2662531c88a7605508c66b852c42df0fc05fc833e28af86cbc513a7223a83e6ec9446f9cf011f6c28649769ae439cdc87ad12983de4fd7110bfd1e9dfc2e02833a135150ff1c559e54cad973db21cc1362e6d5b3c144fa4614e57c4af3e20757a90f6bffcd43a4951c9fbda09d7bca137887950ba160db0af286616dd1b6730c7e31a0a801a5267f354b2336d2ee6ab0bee64f51ccc65a184f9795a03dd3816382c384c61a671c6dca2f8100dd54d90f1795281e22282b21557a9d78fd7fb00d3d58e389767acf3b824b22b47e08fff6f79f5c3e8c19a1e20195931c2a80ef8540623b1f214eaad0e3737f1c2bed85f830a9f12a4056c79a087bc127fe9987522baf4e6c664b781fbd18eed1ff2b23de860206901eb77b1d69689f3567875e72b17f2786964fc1545d492d26ac6012d66837c9139ab0a50b872e105b614fc8c13f29d1ee541c97c9d94d1f38a12ee48f1ffb6209eef3b5221f11ce176ee9e1cb7bb03e76f47f0d42e831c3663c061d9a8886396896d141249b2ca775ed69d8cc24b47f8284f483045eb8051a180ee263914b2699247ca68e2304b1571e4d5ade31216576e19f4fd3f3c13017ab9e7ac370c1782230d5032e7dad6caaaf95d9f2bd75c142ff3871a40675a3f008ee8a44966860429c0805cd9cf3"}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "17075cc7811b7963aeb82bbeb9b44a12e72cde4c01a6b21b9b1b19e1b983cfdfe0fe90795e190847a15ebe08cc3a762a34e771294168f00b84bf90c84b4fdc55bb6ae3028510a58df8d64a3d6d37e41ce446c785907e60f8c861325402214dd634e5d7c5014012565f2831d93ad8036246e8b0d2ab464739d4e235c85c43da0bf27318eab04f49bee98a96fa594ef8a22b44e32000ecebc99323a4e70f7b74e6dff82329798d94c86d11c68cafbb32539d4e375dd15b058e027c5502491b921c76e29c25b57a1afb58fd788c79eb61bcc407d527bbdbe564b8700c24fab3f523d3dbc04666d56a1fce3a4d0a257aa9517a52"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x113c}, 0x1, 0x0, 0x0, 0x10}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1c}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44844) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r2) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x124, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8e3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x31}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x68, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xaa9, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wg2\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x6c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001ac0), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001b00)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000001b80)={r8, 0x1000, 0x2}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000001bc0)) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0xec, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x812}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24004891}, 0x4841) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xd8, r1, 0x305, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001fc0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x78, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8e}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000002100)={0x5, [0x7, 0x9], 0x3}, 0x10) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000002140)={[{0x9, 0xb307, 0x9, 0x46, 0xb, 0x9e, 0x9, 0x81, 0x5, 0xe, 0x5, 0xff, 0x1}, {0xab, 0x5, 0x52, 0x2, 0x4, 0x6, 0x8, 0xc0, 0xf7, 0x3, 0x7, 0x8, 0x800}, {0x10, 0x3, 0x1, 0x2, 0xff, 0xf, 0x8f, 0x4, 0x3, 0xf9, 0xc, 0x40, 0x9}], 0x2}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002200), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000002480)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000002240)={0x1e0, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xfffffffa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x9000}, {0x5}, {0x6, 0x11, 0xf15d}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xa6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x401}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x8f11}, {0x5}, {0x6, 0x11, 0xb4f9}, {0x8, 0xb, 0x7}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002500), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000002680)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002640)={&(0x7f0000002540)={0x100, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1m4.208571233s ago: executing program 3 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) (async) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8000}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000900b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000900b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) clock_getres(0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff80cc03df2bac080045000078006400000029907800000000e00000010000000000649078200200000000000000000000bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da0b3d22b336984ffb47476e10c3ae64b1bb3b2195c4b058706560a70864bef1f0524a72fc660b8cd26e095f24ab642591"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c5e3fd2b000000000000040000000000000000000000007f2b9631ef3204137aee8dc3fd1631efec358e24d615929f9d5a2ca31b8fa06b6261b34ca453c83d32dfeb116d02e2e463b0a9d4d8388422e15249d115fedaa48bd96b030ba2f90a18a4ce0b194b354569909efbe494e4320c4350e1fe6f09b89228f7eb9fd535f09e4d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100008000000000f10000009500000000000000183f00000400000000000000000000001853000008000000000000000000000085000000cb00000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000871805009e60d3972976070000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="3ce43ad8f9f8ed704c5dcc1800000000000000000000000043699c618ee37a93e135b9ae9fceeb84dac6fb0402233f546ed13b6ff3b2b510717907da5b32019e38faa587eafffbbe66a3504f78735c718281e5c4ce7dac25d0bd163952bd21ca9b5be5508296586c3aa74a37d5a967678d47ba4b33b9b7469d0400403a0b5ea47ae04fc0ec32debb7fc8876481bd0e89fd1f1b71f85669fca62539e097f35c4ba14a428a38f246da6385d8c7ec52b93f65409a12d12d65d109be201522331ff4cb0fbb3b3a46485e569b39efc43434017d50"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) eventfd(0x2b) (async) r7 = eventfd(0x2b) fcntl$dupfd(r7, 0x406, 0xffffffffffffffff) 1m4.083865146s ago: executing program 3 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000004c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@init_itable}, {@usrquota}, {@nouid32}, {@bsdgroups}, {@oldalloc}]}, 0x3, 0x460, &(0x7f0000000780)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b801b400", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0xc04}, 0x20000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x10000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x1, 0xc73f, 0x81, 0x1}) sendmsg$nl_route(r4, 0x0, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xb0, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d13", 0x0, 0x24, 0x60000000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000200000000002e"], &(0x7f0000000100)=""/236, 0x43, 0xec, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 1m3.85199672s ago: executing program 3 (id=287): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m3.84383102s ago: executing program 3 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000180000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000082501358600000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000010, &(0x7f00000002c0)={[{@noinit_itable}, {@grpid}, {@lazytime}]}, 0x1, 0x7ad, &(0x7f0000000800)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0xc0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000340)={{'\x00', 0x4}, {0x40000002000}, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r10}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m3.660892284s ago: executing program 3 (id=289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (rerun: 32) fcntl$setlease(r5, 0x400, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) close(r5) (async, rerun: 64) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) 1m3.541251576s ago: executing program 3 (id=291): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0xe) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES8=r1], 0x1, 0x1514, &(0x7f0000001540)="$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") unlink(&(0x7f0000000180)='./file2\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="7a0bbc9a82b750ec86a68986db1fc9460181c9b93e868f0e99bdfbbe246bebce2d7649919e71e50eff2d03ed21d1cf1deba515bb", 0x34}, {&(0x7f0000000300)="52e9a0a25fb9de951329035e0d02ac77b199537cae0a96fb7e544d24a91473439b6d3395b7c1b80192ad8beed003368d598c9b24d6ecd249462be3d612ccedc868de65cf198ea560a263554ad305b5689486d7e79036f9c09aea2efa8b511a2634750b83831660af6b2d9e3c42af43ddc35520db1af523166bbe3c5a706a38990757a2fa08a7c0fb72b9b4a2d344b448ac3e91eac62de5f1194b9af88ed3976d113d1b551fd31e49b5ece3961dab48e41326641b5cdc1a8d84c00cbd8bf6c14accee2ff1cf766c0c82416b9790b726e2f68a4a35ea5cfb4a2ec2433b3d44b3c707c230353b301215f9dd923208", 0xed}, {&(0x7f0000000480)="0a5e8ec892d89b38b9435deb1646d6dbdf44e2ea5795ef52df6fbc9ede2e3112070c8c43b3262b81c6ebecef057a83706f231afe95fc7f3098133fe3a7761bee8d53b462b6d36d51b218dcda87993b11716d34ccd723ddd2c702f3bbc6a4fff1b2d94b0a72c21136bdeb14a08667cfee9c622ae0c52825cde2e6bc0e2c319e3db6cb0b0c4e01d778ed1968b3ae031082d4e2f3a77d8b5c40dad785c59a70f6e71c4f21c37a03df1a40a571854300f5247a0a572122dfe17a0317dd11672638ccc66200f6a58584e2c350a89a7a98", 0xce}, {&(0x7f0000000580)="79225840cb9e01f56785f64188c4464ac61161c1516ba5010b75465553b25de4d46b95ab93ed35830bb6a16ba6d17f11d1207ba9c103dc059b0b3cb5fd9f460b704f35917e8dc46e21f3c7eecf831b0d7cee947cbae9e5d7cfcd8ebe39914dc7a67ad3a40db55ffbd2a88672bdca6ff716ada0dab5c5c5311addf9", 0x7b}], 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/49, 0x31) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000600)=0x0) prlimit64(r6, 0xf, &(0x7f0000000640)={0x4, 0x1}, &(0x7f0000000680)) getdents(r5, 0xfffffffffffffffd, 0x58) 1m3.530719126s ago: executing program 34 (id=291): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0xe) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES8=r1], 0x1, 0x1514, &(0x7f0000001540)="$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") unlink(&(0x7f0000000180)='./file2\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="7a0bbc9a82b750ec86a68986db1fc9460181c9b93e868f0e99bdfbbe246bebce2d7649919e71e50eff2d03ed21d1cf1deba515bb", 0x34}, {&(0x7f0000000300)="52e9a0a25fb9de951329035e0d02ac77b199537cae0a96fb7e544d24a91473439b6d3395b7c1b80192ad8beed003368d598c9b24d6ecd249462be3d612ccedc868de65cf198ea560a263554ad305b5689486d7e79036f9c09aea2efa8b511a2634750b83831660af6b2d9e3c42af43ddc35520db1af523166bbe3c5a706a38990757a2fa08a7c0fb72b9b4a2d344b448ac3e91eac62de5f1194b9af88ed3976d113d1b551fd31e49b5ece3961dab48e41326641b5cdc1a8d84c00cbd8bf6c14accee2ff1cf766c0c82416b9790b726e2f68a4a35ea5cfb4a2ec2433b3d44b3c707c230353b301215f9dd923208", 0xed}, {&(0x7f0000000480)="0a5e8ec892d89b38b9435deb1646d6dbdf44e2ea5795ef52df6fbc9ede2e3112070c8c43b3262b81c6ebecef057a83706f231afe95fc7f3098133fe3a7761bee8d53b462b6d36d51b218dcda87993b11716d34ccd723ddd2c702f3bbc6a4fff1b2d94b0a72c21136bdeb14a08667cfee9c622ae0c52825cde2e6bc0e2c319e3db6cb0b0c4e01d778ed1968b3ae031082d4e2f3a77d8b5c40dad785c59a70f6e71c4f21c37a03df1a40a571854300f5247a0a572122dfe17a0317dd11672638ccc66200f6a58584e2c350a89a7a98", 0xce}, {&(0x7f0000000580)="79225840cb9e01f56785f64188c4464ac61161c1516ba5010b75465553b25de4d46b95ab93ed35830bb6a16ba6d17f11d1207ba9c103dc059b0b3cb5fd9f460b704f35917e8dc46e21f3c7eecf831b0d7cee947cbae9e5d7cfcd8ebe39914dc7a67ad3a40db55ffbd2a88672bdca6ff716ada0dab5c5c5311addf9", 0x7b}], 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/49, 0x31) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000600)=0x0) prlimit64(r6, 0xf, &(0x7f0000000640)={0x4, 0x1}, &(0x7f0000000680)) getdents(r5, 0xfffffffffffffffd, 0x58) 22.605174785s ago: executing program 2 (id=569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000200)={'wg0\x00'}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xfffffffc}, 0x20}}, 0x0) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0xf65a6e1e8201b40e, 0x1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xfd, 0x7, 0x14, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x10, 0x40, 0x2}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0x9, 0x4e21, 0x8, 0x2, 0x20, 0x0, 0x0, r6, r7}, {0x9, 0x9, 0xafad, 0x40, 0x4, 0xfffffffffffffffb, 0x0, 0x2}, {0x5, 0x80000001, 0x3, 0x3294}, 0x4, 0x6e6bb1, 0x2, 0x0, 0x7, 0x3}, {{@in6=@mcast1, 0x4d2, 0xa1}, 0x2, @in6=@empty, 0x3502, 0x1, 0x2, 0x3, 0x8, 0x0, 0x6}}, 0xe8) 21.701774062s ago: executing program 2 (id=571): bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000340)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xa}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x4, 0x9, 0x8, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0xe, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x0, 0x2, 0x2, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x3, 0x0, 0x2, 0xb, 0x4, 0x30, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x8, 0x4, 0x5, 0x30, 0x1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x49, &(0x7f0000000500)=""/73, 0x41100, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='cachefiles_ondemand_copen\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r3, 0x0, 0x8010002b) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000340)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xa}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x4, 0x9, 0x8, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, 0x0, &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0xe, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x0, 0x2, 0x2, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x3, 0x0, 0x2, 0xb, 0x4, 0x30, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x8, 0x4, 0x5, 0x30, 0x1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x49, &(0x7f0000000500)=""/73, 0x41100, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x7}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='cachefiles_ondemand_copen\x00', r2, 0x0, 0x5}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) (async) socket(0x1e, 0x4, 0x0) (async) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) (async) sendfile(r6, r3, 0x0, 0x8010002b) (async) 21.573352914s ago: executing program 2 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r7, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 20.722264941s ago: executing program 2 (id=573): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x5508, &(0x7f0000000740)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9jCJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmamuvUDhKaJ3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/drSulsWVVr4+3dnrj+J2p1YfxVZ7O5vf6eUX7A9bR3myDzys7WbjRnMri+1+msXWYV7XwWH+f9thf5DnaRT5PszSx2BwFPP55kEz38/OoyzWe4NiPs+bNpoHozgsYnG5qKedRlbH1km+6f+3t9q9vYNk2Nztt9Neslapvlip3ilXd9NGc9BcLde6jTuryUKrM1pWHjRr3fVWmrY6zUo97S4mC616vVytJgt3m1vtWi+pVisrlaXy2mJxdjt57f67SaeRLIziK+3e3qDd6Sfb6W6Sf2IxWa6svLSY3Komb29sJpsP7t3b2Hzn/bvv3X95441Xi0V/KytZWF5aXi5Xl8rL1cVztP+Pi6LHuH84kdK0CwA4e/T/wDScXv+/+yDi9Pv/0P+PxZnqfyfY/79wTvYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4t76f++L17GQ+H18r5p8qpp4pxqWImImI3/7BbFw8lnO2yDP3L+vn/lLDN6XIMoyucak4rkbEenH8+vRpfwsAAADw5Pryo5uf5t16/jI/7YKYpPymzcz1D8aUrxQRc/M/jCnbzOjl2TEly/59X4iDMWXLbmBdHlOy/JbbhXFl+09mj4XLj4VSHmYmWg4AADARxzuByXYhAAAATNIn0y6A6SjF0aPMo2fB2V/e//lA8MqxEQAAAHAGlaZdAAAAAHDqsv7f7/8BAADAky3//T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Z+d+bhMHojgAPxu8sP+0aLX3bWVvUMaWsMc9RhSQJiggB9JCGqAGcksJEUR4HAIRh0ge20r0fZIzGcv8eIPgMDPSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdOm+Wi9ur35ft83Z7dvJMxoAAADgkm21XtT/zFL/a3P/e3PrZ9MvIqKMiEtz91F8OsscNTnVy/M3p89Xr2q4i6gTDu8xaa4vEfGnuR5/dP0pAAAAwMe1Wa7mabae/syGLog+pUWb8tvfTHlFRFSzh0xp5SHvV6aw+vs9jv+Z0uoFrGmmsLTkNs6V9ib1z/24ajc9aYrUlBdfdiwy29gBAIAejc6afmchAAAA9Onf0AUwjCKetzKPW4GT1DTbe5/PegAAAMA7VAxdAAAAANC5ev7f0/l/e+f/AQAAwDDS+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0aVutF5vlat42Z7dvJ89oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGJ/3lEgBMIgDPau70zm/oeVBk1NTapA+PgbgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi/15SYEQCIIomDP+d9L3P6wk6BlEiICGRxW1aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi527542jCAMAPLt7eyHh6zDoCiMEEgU05HIJCekQBcii4CcgWc4lmFz4SFyQKEK4oUOu0yAoEUICmS7/IXUipQldiiuCRA2avV3fJrHk42v3bD+PNDvvrVY77+xJlt+dsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAyeWcWZ/HQm8Zpee72g+trsb/zSB/d3Lq7HFuMkyaT3h9eqn9I+u0lAgAAwOGRVfV9COFevr0S+7RX1P95dU2s+b97ehpX9fyjdX/VV7V/bL/+cv+FnYF603HiTc+vj0cnHk+l8//NcrE9u+cVneLJF+9esuILSd/ffH6SF88z+ebWrXe7RXikiWwBgH/ieNWXQfX7UOyHbSYGwKHRqRXeVf2f9drNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAJk83wZBUnIYTlziyO7jy4vrZbf3Pr7nLVzty4sRW+mt0z3iIPIZxfH49ONDqbxXbl6rWLq+Px6HLzwcshhLZGf7uc/sUPx8/seXEIrTwfwX8UpOWXvSj57I+gxR9KAAAcSHnZYl1/L99eieeSpRD+/P7h+v+1WhzmrP/vf3Tmdn2sev0/bGyGi2+wcemzwZWr195Yv7R6YXRh9MmbJ4dvDU+dPX367KB4VzLwxgQAAIB/p1u2ev2fLj2+/n+sFoc56//Pvx1+WR8rU//varbo13YmAAAAh9tzr/zxe7LL+aTbDV+sbmxc7oR4HO58Pjk9tpDq33akbPX6P1tqOysAAACgCZPN5KH1/3O1OMy5/v/UDy/+VL9nFkI4Wq7/H1/7dHyuuekstCb+nLjtOQIAANCuo2Wrr//nxf7/dGfLQxpCeP3VaVz+G8C56v/sva9/rI9V3/9/qrkpLqS0P30eRd8PodNvOyMAAAAOsifKFov93/LtlY9/PvZB1/5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9FQAA//+AcD1H") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000001c0)=0x400008) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 19.867966847s ago: executing program 2 (id=577): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x48040) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x3) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14, 0x80800) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f00000004c0), &(0x7f0000001c40)=r7}, 0x20) (async) sched_setscheduler(0x0, 0x2, 0x0) r8 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 19.825147928s ago: executing program 2 (id=579): mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b200097ea2d"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.802398358s ago: executing program 35 (id=579): mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b200097ea2d"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.211931736s ago: executing program 4 (id=612): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000640)=0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfb5f, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe0000000000000) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, &(0x7f0000000400), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_getparam(r0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000011d2cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="842700000000000008001b0000000000180016801400018010000600ce0000000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x400) listen(r7, 0xfffffffd) clock_adjtime(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x1, &(0x7f0000000a80)=[{0x16}]}, 0x10) r8 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 11.315910452s ago: executing program 4 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001b00)={0x5, 0x0, [{0xeee60001, 0x92, &(0x7f0000000400)=""/146}, {0xeeee8000, 0x17, &(0x7f0000000000)=""/23}, {0xdddd0000, 0x0, 0x0}, {0x3000, 0x57, &(0x7f0000000300)=""/87}, {0x100000, 0x0, 0x0}]}) 9.235861882s ago: executing program 8 (id=661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r6, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 8.198732522s ago: executing program 8 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xb, 0x0, 0x0, 0x5}}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='page_pool_state_hold\x00', r1, 0x0, 0x7}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x200000, 0xb) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000140)=r1) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000c00b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x18, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9bc00000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x4, 0x10, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r3, r0, r4, r5], 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000800)='device_pm_callback_end\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimes(&(0x7f0000000040)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x20000000, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "fcd1876deaf8e9264e6fa3ce2dff9281c9fe68a3000000006f0000044e43e740e077e1d16212fb00"/55}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r10, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r11, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 8.141738913s ago: executing program 4 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 8.047833055s ago: executing program 4 (id=669): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000540)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000880)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x80800, 0x15b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) open(&(0x7f0000000000)='mnt\x00', 0x143042, 0xa9) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) 7.173621702s ago: executing program 4 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0x3ff, {0x28, 0x5, 0x4, 0x5, 0xbf}}) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) ioperm(0x7, 0x4, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) write(r3, &(0x7f00000002c0)="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", 0xfc) 7.028775314s ago: executing program 4 (id=676): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x1a, &(0x7f00000003c0), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x1a, &(0x7f00000003c0), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write(r1, 0x0, 0x0) (async) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") (async) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) (async) bind$tipc(r7, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, 0x0, 0x4) (async) sendmsg$tipc(r8, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850018008400fe00b7000000000000009500"/96], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 7.019985924s ago: executing program 36 (id=676): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x1a, &(0x7f00000003c0), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x1a, &(0x7f00000003c0), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write(r1, 0x0, 0x0) (async) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") (async) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) (async) bind$tipc(r7, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, 0x0, 0x4) (async) sendmsg$tipc(r8, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850018008400fe00b7000000000000009500"/96], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 7.002452255s ago: executing program 7 (id=678): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x1005, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x1, 0x0, 0x6}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x105000) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='svcrdma_send_pullup\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "1d46f15e"}]}}, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000003c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.074724783s ago: executing program 9 (id=677): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) fsopen(&(0x7f0000000100)='anon_inodefs\x00', 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 6.046762983s ago: executing program 9 (id=684): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYBLOB="4535da122866a8fe28381b2ec2406efe2a7c6147d884213970b0cd64b8aa7d07f620eea5d1d273f3023881d5436595bcfc361d2fd6786a83b18776a21ebaa51b42f7faf80b669ab9e3f12dbe4abe0563f156a8b586e4fe66154c9bc38807d1961a4229fedada5c2a1e0afefacaba70f06d7165a12f01140e43ad79fdf8be8898bc224619308acc9aa098cf45388f366eb0fbfc8f77fadebbbd536e431c898f67e46f1938f4", @ANYRES64=r0, @ANYRESHEX=0x0, @ANYBLOB="84d2e373990cbcb49e3a5a69de31a72888292bcfa89e29019765a8f9226c2142d405b5fa8a309045e0d8300ee4f2b80196ee728e5d1ff50fa2bd83342d829a5a3b5b77c80eb87a885e8ed5fb64dad94aff553b92f70acb589c33eab7fbe95e7db680bf3a8faaa6f6d9", @ANYRESHEX=r0], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r2}, 0x38) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB="0000008000be2800"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0c020002000b000018110000000000040000421a", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000340)=0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe51}, 0xcb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 5.947727825s ago: executing program 0 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = getpid() mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4008000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r9, 0x1001, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x48) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x90) 5.889429456s ago: executing program 8 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x0) 5.841932177s ago: executing program 0 (id=688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r6, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 5.828095028s ago: executing program 8 (id=689): syz_usb_connect(0x2, 0x98, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x10, 0x3d, 0x4b, 0x20, 0x17ef, 0x7203, 0xc197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x1, 0xe, 0xfd, 0x10, 0x7, [{{0x9, 0x4, 0x1d, 0x8, 0x3, 0x67, 0x93, 0x14, 0x2e, [], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x4, 0xe, 0x2}}, {{0x9, 0x5, 0x7, 0x18, 0x20, 0x9, 0x6, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xffff}, @generic={0x52, 0x23, "7ca96c486b1f64a2e13368a426bccf54c957b84da6df6f30955f4afb7cfca2f124d64344aae40a896dcb7afdd52198848a1ab3347caaf37e8a52bec787f4dc1edebdeeb83c75b551646b7cd0a8640764"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x140, 0xc, 0x80, 0x6, 0xff, 0x1}, 0xe2, &(0x7f00000006c0)={0x5, 0xf, 0xe2, 0x5, [@generic={0x33, 0x10, 0xa, "7dbf61a2e0ebf279f1ba0ed0428d4f8765917984dd9c2cc235c9d36a4706b8ee802da0816965af8edda1124f05a8a9b4"}, @generic={0x87, 0x10, 0x2, "8023dda1567e07f94019ec3d3be40ce48ad7235e2c4333ba62f06dcbe466dbbda6193f6cd8efcad0095cfde2fdcf2c2d398d20d1c834a7d0259a1baef268f7ad6dd7ebf5e9bab00cd4636d769e8a898984c8f63af04a507d6601089a6bde5934cb2ee946d9f0e3c16573e0e6155fb3d4c375ed47bfe2ae850288f1c85f18fa822b606615"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "0416fff631ec5a9916e672ef7052c10b"}, @generic={0x3, 0x10, 0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xfe, 0x0, 0x7ffffff, 0x0, 0x951}]}, 0x3, [{0x7a, &(0x7f00000001c0)=@string={0x7a, 0x3, "40d84c6c05e80c8cef17d6daa35c9346971ec56d1a4a14248ed46f9f6756bd4bf41c2d15db04746531b0d4664963aa48a2a259eb4d1c7bf02d04b7a6ee12eee9444498794c7535460317809e6e05401ed9878635115d308b732ac349913d40b2a17ee41d8ba7c74d6ef8a7c2a311ee21e1f93bbf6af01fdd"}}, {0x4, &(0x7f0000000080)=@lang_id={0xfffffe50, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1801}}]}) 5.770399119s ago: executing program 9 (id=690): socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@gettaction={0x20, 0x32, 0xbd5139864f3acfa7, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48451}, 0x20040054) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109840, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x3, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 5.311882027s ago: executing program 9 (id=693): r0 = epoll_create1(0x0) (async, rerun: 32) r1 = epoll_create1(0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x6, 0x4, 0xf9, 0x7fff0000}]}) fchdir(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x79, 0xfb, 0x4, 0x4, 0x10, @private0, @mcast1, 0x20, 0x8, 0x0, 0xffff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0xfffffffffffffd04, 0x0, 0x0, 0x31, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000000)='.\x00', 0x2000775) (async) write$binfmt_elf64(r10, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4607020000ff7f00000000000002003e00edfffbff94020000000000004000000000000000cf000000000000000f00000000003800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e6000000000000000400000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c02e4e7b54d16b7f513c03a2943ccd0f78a6c99c6052d103958ceaa6f4b4626e99309c615b7967e5496eccd7b848ca60825d4f18680ec743cc3e933f1829f1f8b7b0891d49863ac0e4129f239a794f9dbe6fb106fd11a8f0a341a82688f09a000000000000000093962a6f7e4f7e18c1f74c7467b018f146a8747245ed2a6c97fb3902f21eb0e32ccc50f1eeefe840af31ab6c2502b3859ef55cdc0251ceb71125b8ba1ce3b7f37b65b0d785c6d6fed7ae70d9e92cd480087e6bd4f20ff3728b437bda4c3e9c18f9f308ff24d44e34242a1d5d9587f7dd7befed23663a7b6291"], 0x178) close(r10) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) (async) syz_usb_connect(0x4, 0x24, 0x0, 0x0) 5.311213048s ago: executing program 37 (id=693): r0 = epoll_create1(0x0) (async, rerun: 32) r1 = epoll_create1(0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x6, 0x4, 0xf9, 0x7fff0000}]}) fchdir(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x79, 0xfb, 0x4, 0x4, 0x10, @private0, @mcast1, 0x20, 0x8, 0x0, 0xffff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0xfffffffffffffd04, 0x0, 0x0, 0x31, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000000)='.\x00', 0x2000775) (async) write$binfmt_elf64(r10, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x178) close(r10) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) (async) syz_usb_connect(0x4, 0x24, 0x0, 0x0) 5.006683563s ago: executing program 0 (id=696): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0xb60}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/prev\x00') (rerun: 64) read$FUSE(r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) open(0x0, 0x14927e, 0x9) (async) fsopen(&(0x7f0000000100)='fuseblk\x00', 0x1) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) (async, rerun: 32) ioctl$TCFLSH(r6, 0x400455c8, 0x0) (rerun: 32) 4.947802314s ago: executing program 0 (id=697): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='vnet_tx_trigger\x00', r4, 0x0, 0x1000000000000000}, 0xffffffffffffff2e) setregid(0xffffffffffffffff, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3, 0x0, &(0x7f00007d0000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0x4, 0x8, 0x1, 0xfffffffffffffff9, 0xffffffffffffffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x147, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0x7f, 0xf6, 0x4, 0xff, 0x80}, 0x2d, &(0x7f0000000e80)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "a3267d45c8e1c3a87d0685cb1408f5e1"}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x4, 0xf00, 0x200, [0xc000, 0xff3f00]}]}, 0x2, [{0x35, &(0x7f0000000ec0)=ANY=[@ANYBLOB="350341762597f08f2ddaee3d1519b7691c9856181b82dd8a2976bb48a2d33af14c37b1ed052422bc7d0f6c286a4c7499511b5300a9"]}, {0x35, &(0x7f0000000f80)=@string={0x35, 0x3, "7c742559bdd38ed37a349778c65a5995ac4457e18d66068cc171f03aa9baca2a414a2e508c777700f563f6b7ae0f02f0c1183d"}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000001000)={'\x00', 0x7, 0x3, 0xfffffffb, 0x1, 0x40a5, 0xffffffffffffffff}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$binfmt_elf64(r8, &(0x7f0000000580)=ANY=[@ANYRESDEC=r8], 0x6ad) getpgid(0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x2, 0x0, 0xfe, 0x2, 0x700}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x4040000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000001340)={0x40, 0x0, 0x8, {0x8, 0xc, "392cdaab1802"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_usb_connect$cdc_ecm(0x0, 0x70, &(0x7f0000001080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0xf7, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x2d, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x2817, 0xeb, 0x1, 0x3, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x9, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x2ce82cb990ba90e7, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf, 0xd, 0x9}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x300, 0xdf, 0xe, 0xa, 0x20, 0x4}, 0x3a, &(0x7f0000001140)=ANY=[@ANYBLOB="050f3a00050b10010400000900090800020b10010c114d79e26500030b500108b8000e020600c10a100300090005007c00"/58], 0x3, [{0xf2, &(0x7f0000001380)=@string={0xf2, 0x3, "4e5ea3f839e7c1bce1a41068efb56366216794e8a0a6a97213402c0bb280311d2ab68122562fbd107c2a228130e926e5cfe49cae597365974dfbfe23f4285404f7f9f286254e954f1dfa512b0a3551108ab79dca2f7c5d137b89741c1615419c1bcf23636e70ac495b31941db9417b482a2cef56f67f050931adaa279591c25963a659937c1d364085d66e78f9ecb21b043aaca1adc17578c286464aac86f7b79af99938727a3ee3782230ea587758bf1939031fc73eeb0513d4a64b20a4f4ce1b49c99fc83a835e9616491378594db1da342f68788b94bde118fc082eb9aaba11cadfa7dbb0ce5a07b7402201d157ad"}}, {0x9f, &(0x7f0000001280)=@string={0x9f, 0x3, "8e2b062bd44e1fd86cae9f652ff4d6861fbfa36923b0e453b8081946bf10a9d939b6a0286758f38aae70f578a11ad2b2f2862284d7434e8475a3370a9b4d61f74d3a36354ab12c965f5622b70da274f9b40734e8321a73f68a2119406454a6cf61c4a591755e3ba49a8b538a8e69c1fc4d40bbc8d127028b8594f1ddaf5ca7aab1d3394ae36372e071f91f52570c9295baed665f9714d098e034c08633"}}, {0xbb, &(0x7f0000001480)=@string={0xbb, 0x3, "6d112fd4d4ef946bdff2ed57bf791091045a991d1a85fa3f728995f587dc7e6968a830696b0689af914da791acb40a370b780633afc772301e6f3930817cc23fd221e0178bd2aec2a1fb91834471cbf4939d1ae117f9aea9c4b9a6dabf7a679df4cc4904d8ff06eb0d83cf874c421c0835503ff949766c709d719aed64b4dd35ffec0793f16a3152ed280adbebebc5e4f743585455df29da89d20e1dc4f8de89f6b88e449469f47718918ff31305f0f42321d1df1332bcbc5f"}}]}) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x5, 0xe0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xff}, [@processing_unit={0x9, 0x24, 0x7, 0x2, 0x4, 0xf2, '_3'}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x2, 0x0, 0x6156, 0x10, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0x8], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0xc}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x3, 0x55, 0xb, "d5d185e8790d31"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x61, 0x1, 0x81, {0x7, 0x25, 0x1, 0x2, 0x4, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xf, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xff, 0x81, {0x7, 0x25, 0x1, 0x1, 0xf, 0x8}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x6, 0x5, 0xf6, 0x20, 0xa}, 0xee, &(0x7f0000000440)={0x5, 0xf, 0xee, 0x1, [@generic={0xe9, 0x10, 0x2, "c3578ab569f1a3ee284f3cbeb41dbc65137d9f2ff95e32600f97a6a28351b6d9c9000f53a05be15c382775a5c2ab3fd4b047dfa1adc7d795f3c4fe60929ea23a9f3eca6717ea554ebd7108a09972344a2b49fd4af378f67e79470e123ec8e1a3da22f075ab6257f98dee46fb16922c9b563530331da08342b9415f50bf1116fd66af397e9f38f74d8de06654363be30fd9f7140a4508bf8d8eac12c2646aef95046eb9cd99d96b77af3b7cb26e22d87af226bcb818d320748524bd42eb5ac6ca878bb258f8ddd4ed9a4ef0919604250b718a84a8688375ec4521a3c47e2b7ba01c9f8b98baa7"}]}, 0x6, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3409}}, {0xb8, &(0x7f0000000340)=@string={0xb8, 0x3, "4383a79170c29e0a2e718ab02b56c200412d1f8bfb20ed505edb2ae423805f425d1c03bcbdb6d3a60968619ae9d3e4a0a769f706820c249a0824c02b4cb20198e3bb0dfb6d6adbf7c82df39fbc0a34ae7ca7c5c1b70563c56b95fb7a451dfafb34bba7e6b0b2e60c09b75a96532ab92543615026f5ad5af5c1c8003a76f5f8c7d874ed16f82a0eeeae73c6275bc8f3c1d1693f3fa4fbdb985722204871a526dd6e8efd7e72c165ad21e84c4596ff9a408d497a8418d9"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x804}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) 4.005078022s ago: executing program 7 (id=701): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="d58c8ab3ee63880a44a4d8a3826175ecbba41b268f48545823e48389ed389f9028f01130d45d6c08799afd04d5c4b6409d1c818b85b61200832cb296c42a2250913c347740e1cc85e08e7a962fe89b7ae0e3c2369d927c2d5ee41f7b76ed229934c04af9c11d731d162808da8dd169a7f6223136036f3fba893bb1dcd9ae2a520f2a40ae63b8a872d879c18bd8347c80be10f6a1990bc8e0d2de67b33699346d01037527ac9a24a7a03c7ab138dd633d8e8087544209e9423543560249904536915bacaa3945c99a"], 0x84}, 0x1, 0x0, 0x0, 0x20850}, 0x49) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x12, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000140)='syzkaller\x00', 0xe1, 0x6f, &(0x7f00000005c0)=""/111, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x4, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000100)='scsi_eh_wakeup\x00', r2, 0x0, 0x8}, 0x18) (async) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x3bd) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) (async) timer_create(0x0, 0x0, &(0x7f00000006c0)=0x0) timer_delete(r4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) write(r1, &(0x7f0000004200)='t', 0x1) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000003e40)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000000000000050000a281f8eea1632c37000000000000000000bb00000000000000400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/266], 0x154}}, 0x4000000) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async) sched_setaffinity(r7, 0x0, 0x0) (async) ptrace$ARCH_MAP_VDSO_64(0x1e, r7, 0x8, 0x2003) (async) sendfile(r1, r0, 0x0, 0x3ffff) (async) sendfile(r1, r0, 0x0, 0x7ffff000) 3.851860535s ago: executing program 7 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = geteuid() lchown(&(0x7f00000000c0)='./file0\x00', r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r7, 0x8000, 0x7, 0x8000}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r10, 0x0, 0x2) recvmsg$inet_nvme(r10, &(0x7f00000003c0)={&(0x7f0000000340)=@llc, 0x80, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000680)=""/194, 0xc2}], 0x3, &(0x7f00000022c0)=""/4096, 0x1000}, 0x10000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x34, r9, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.319985036s ago: executing program 6 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv6_getroute={0x34, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_UID={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x0) 3.151915559s ago: executing program 6 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r6, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 2.917504144s ago: executing program 8 (id=706): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e010000092100000001220500090581", @ANYRES32], 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) setitimer(0x0, 0x0, 0x0) 2.897363494s ago: executing program 7 (id=707): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xa2, 0x280442) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="6f6de6a6b69bc19a7b372bc7cce83ccdeec6722bd2278396ae12e955e5e0587e46634f8b5100dd822aa2faf7ecaaba7b8d01196f63613e6877a63f9e18debdc890598c208dfef2a5322aa29fab299fceb8a7bd09fdf78b5ffae27ad593d80357223964b5865a4ce02e9d892979ce336dd476f943b4855d4a63601f68910377f145ca6e6aee7ce1d466a9bb8d9cedf6812fd872d6449632b49d563f389692ea20d3f0b904c7b252404bae963c5114a0b952b68ceb529d655d259d86d7d09cfdef763574ad8d56e5086bf12a25dd6fe224209e68d317de86f33be4010810a6ef49de7b9e33a8", 0xe5}, {&(0x7f0000000140)="ed87c9be79bb9068b5b8265d4e08d9f20e61952e705d7e0a8e5d117f3ad91aa63d77e7404f41b9f67f5b609ab9970a1dc7abea39047423a087bb2c4b9ee8ae8d07bbb0b38ddb302e51fe02f60d3e91d4aa0e895202a6768080d54d1d1062c2b15aacb9462c3ac35bb6583c95a2565fa672c7af08dfe2e89970", 0x79}, {&(0x7f00000001c0)="48ba9b1550c100d807e82a91b37ff6d1d23f7270aef8b41f780ac8dd06126b73617800de5dc54f46c59c5f81507b4f64033fc4583c57c17b21395597efa48701bd3024123973e9f39aa5f9945205b4053e24436f2a1e227a4e642f1578c9bc15354bcb6b0f28d289e01e4076a14b986b0ed5229823dea7b50fd88db5b5ac508442f97eba3157cf5ac303b49796448caa81b8e5a974", 0x95}, {&(0x7f0000000280)="8ea6751d2b090ddf2495d7fce24c2e29afc2af5e62e44923182130afa67df24a86e0648113bdab0e0b2e944e8fa949c515bfa37783b4c70c2110d8375f7551838c43368a4d552415239796bf1a9ffcf60d0a42420bc458fd59cee629843943aa41321f33c89cfef33064f0dadd9e8e7bf11cafd660e39e1bbccc514a273a17e5b85f6770f5030a47d1b0c19d12a9efa1ca338556de1f81ced5a0e178849c6467258365f0dadd9bdc63f6e5f682dff76da5c0080d3eacad84f848901ff4b4487dcb9efc1bceb7bb3b5f8b05710cb4489b4882d1038c720d719b92962fcb2e91648d570f864010b6", 0xe7}, {&(0x7f0000000380)="a98942de6b43a3065abc8d2882941b74ad1c11718f65ecad2388875049545cd4f830570af344fc2f5fc7d4b8f55f7c8af3fd996924fec6adb12694d691d679fe2a9ca0d0a3d0b96805841f7b90c3ed9222cf3291b2596b040882f222e86f08af89c5be2833ca3f1daceb4273b2721efc89a421b0cd6c548b15d1a01c4492d7747424a16b7992ebfa289e8e2837b88a3b81b886c7d793ef14bc36928c2e3c046b595805d8eda4c1e98eb86ff8f9188663846cab9cfbf24840b3052c2c3d913198513c243ee391a1e9de1b4817723d33c29c57be31e7d74f8d5a78808742f53f945ee0e0f58c5066f62faf9bc4888d7a", 0xef}], 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f0000000500)="a5115fd815f7e66eea9c70f3f41a755700ecd960019074b9c6ab47e6e0045a8d7df89d496014293fc54087e78ffb642a0ae642768d3c5687799f44234e798542a92b45d89190ce2aaa48f502256cf2041d072453712c429fac9c964d7a4886b3a8461ebb307000d2bc6c4d542702eb755d1f9b9fc77fcc6928ed58fe7cb110c270b43ad8f55053d708f5f86cf04fda7d2f04ea77b5e93f5db408231ba293b600734f7b3c5b3a3742e71e8a1061d08dec53938b40eb5a99504ddca3b8ce565c7a", &(0x7f00000005c0)=""/115, &(0x7f0000000640)="0d1caf1c229f0ca89309fd8a83bfca8429976018c1d57567e824c3c01ca6b8470aa3a1239d7af64dadd8f3fe64ba5b1ea2ffc190de851bf8db44b0ce6624b2a60c5a3d3c6f0e5c59639ef42b673ef797c5bc0fcb14f49059829ada66ddb43d9d6dd7b0aba2cac5d871ff4e8506dbf60e992288555f7c9bd7792fc80702112e4877b6137e1051d89615cdc47a2ed14a9e0269bd", &(0x7f0000000700)="31b7d17f5b2d8d656328b3298f5525d92ce68c2ab90203abe3b2041b476a885fc5b768d82381a823f010d4293e211eb0096ff60cf1d07c0e90ebafcf61fbf292d5144ea02be02a7f4e47c0b95bdea4c4ec45636f6979d49bb8ebfe24d509eebca2132af8f15c167e62d3caa1ffd7a161e101219b9794e3b64fc0062b1939c1444fda15e895125c23db0f17010bd53c6241effad31eec5fabcfef0094de23db2341cde09decaf35f7478a5ba66b1be9e45e099c9c2d3e87d61dabbe93bdc2a91b", 0x0, r1}, 0x38) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6d}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, [{0x6, 0x1}, {0xc, 0x1}, {0x36}, {0x6}, {0x36, 0x1}, {0x30}, {0x9, 0x1}, {0x9, 0x1}, {0xb}, {0xb, 0x1}, {0x18, 0x1}, {0xc}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x16}, {0x1e}, {0x18, 0x1}, {0x12}, {0x48}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x671}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x15) r4 = syz_open_dev$vcsn(&(0x7f0000000a00), 0xdc, 0x80000) write$evdev(r4, &(0x7f0000000a40)=[{{0x77359400}, 0x5, 0x7ff, 0x6fda}], 0x18) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) syslog(0x9, &(0x7f0000000a80)=""/4096, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001b00)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000001c00)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$9p_fd(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x10, &(0x7f0000001d00)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@aname={'aname', 0x3d, '/})-['}}, {@version_L}, {@cache_fscache}, {@uname={'uname', 0x3d, '/dev/vcs#\x00'}}, {@access_user}, {@access_any}, {@cache_readahead}, {@cache_none}, {@cache_fscache}], [{@uid_gt={'uid>', r5}}, {@obj_user={'obj_user', 0x3d, '%}$[-)\'^'}}, {@uid_gt={'uid>', r6}}]}}) prctl$PR_PAC_RESET_KEYS(0x36, 0x22) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001e40)=0x3, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0xc0, r7, 0x18, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x71}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20024004}, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000002040)={'nat\x00', 0x2, [{}, {}]}, 0x48) connect$inet6(r4, &(0x7f00000020c0)={0xa, 0x4e24, 0x5, @private0, 0x5}, 0x1c) io_setup(0x80000000, &(0x7f0000002100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x8800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x28040000) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xe8, 0x1, 0xa, 0x903, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb1, 0x6, "cedd6c936e476ff710661728de8daff0087aa6bd9bd218057d3e864fe5dd77386624fe4646d602ccb2b6eeeb51b8407c6a06523248c32342b1f3b17d155810dc153fff0f6a325d1ee2b103fc2b32114f3dafdacef6055b5f2d9c403a078bbf37a7f099ad98f9ab9ae8fda87adc6ba31038db1d5c514ee2ef240a3791b93a0ccce8173f99dc1f273c9a60ff7c1efc7e6b2ff7940d07cb3d0db61f8f9578a30d07137f66dfe4d617396220ca7e96"}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc000}, 0x200008c0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002500)={'macvlan0\x00'}) connect$pppl2tp(r4, &(0x7f0000002540)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}}}, 0x32) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000002b00)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000025c0)={0x4c8, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xe89a, @private2, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2f3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "1772c5ac9d1b4d46b9b6fcc8c83657c8286eb849039286f08dfebd705777"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "720e84b3a9454991c79e90da3c0523ebc5386c509585309b5eb2eb6b"}}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4b, 0x3, "741de030eda660ce4cf9bd81c4d3a6dc7b913152fd931dcc2e8aea13af244d7f92bf89b9d54a67bad1fb57be088187d90d1b37d3d79281edf1a6516b1a6e7996edf74829292df9"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d51c19a37419f4e3340fa878695fb9483045aa79843176"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ID={0xe8, 0x3, "09fec71140c68339c647869d90fc6b1b91f8b2351ad52664109d0338b315b2e1843860c9ecb2e891c2e436cd43b72ede4bfe50a074cd195425052ec915a14b42c72ade605ceb08eeba4dc53f680ba20725776ae5fc57cc9f3234d494de4279329972dab9369962e9f8ba5901db3cf7d8414f46d72ee1a88547ab83076dc55362a2e566026411f25ac701026c0d7c7b54fde2a486751448c3c3f39bfefa7cd98ed882c39a4aa0fcb7c1c347b7df3b6ddfd8d5d9f71ea33031f18617427d318bcb5d14fd1970f45268b21c09b55cb0533a454c3a64d1d65a5b6551e3a3f1293b4f6f9e6754"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "de863f24ac8f6ced6a648b978d74b91a48abe2903d70097027eb5d4d66a7021fb9cc550c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8d}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x80, 0x0, 0xb30, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) 2.699143348s ago: executing program 7 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000000)=""/24) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) 2.697914518s ago: executing program 1 (id=709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x0) 2.666806498s ago: executing program 0 (id=710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="f2"}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setpriority(0x0, 0x0, 0x43) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() syz_open_dev$hiddev(0x0, 0x9fe9, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.509463032s ago: executing program 0 (id=711): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[], 0x0) creat(0x0, 0x190) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001540)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00'}, 0x10) syz_emit_ethernet(0xd41, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r8, @ANYRES16=r1, @ANYRES16=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10, 0x0, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0xfffffffffffffebe) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200d05000000050600"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.499265152s ago: executing program 1 (id=712): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5227}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdba9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe1fc}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48010}, 0x20000010) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18) (async) readlink(0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x9) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x0, r6, 0x0, 0x8, 0x0) (async) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r9 = dup(r8) (async) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r10, 0x200004) (async) sendfile(r9, r10, 0x0, 0x80001d00c0d1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.407807004s ago: executing program 1 (id=713): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @echo_reply}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x21c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1ec, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x30, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x5, 0x7, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x0, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GI={0x88, 0x1, {0x9, 0x9, 0x7, 0xfffff000, 0x3a2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x3, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x3, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x9, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0xffffffffffffffad, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x40ae, 0x3, 0x3, 0x6}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x21c}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x81, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r10, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRES64=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x1, 0x4, 0x4, {{0xb, 0x4, 0x0, 0x15, 0x2c, 0x66, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0x7, "53a60426e0"}, @timestamp={0x44, 0x8, 0xaa, 0x0, 0xb, [0x800]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0xe0, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0xc884) 2.354588034s ago: executing program 6 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getdents64(r0, &(0x7f00000002c0)=""/173, 0xad) 2.354199664s ago: executing program 1 (id=715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100006322000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r0}, 0x18) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f00000000c0)=0x8b, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xfffffffffffffff9, &(0x7f0000000740)={&(0x7f00000001c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x8}}}, 0x2c}, 0x1, 0x0, 0x0, 0x400c881}, 0x880) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x5206, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x258, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x71, 0xc5, "57ebeca6ca53455e8ffc44d0bf1f82d94269159ddeedf296e6575bef3b4b15ddd4510fc5cb51f90794b78ff8f91b7e416a3a918d95242fa90e018b6fa77c60c273524b25b3c435f0ffbbd83a809784c3a633cd47de9e990b69a60fd05ae7a73d5f84f3d29e262eec5de1034255"}, @NL80211_ATTR_VENDOR_DATA={0x97, 0xc5, "6f13958eba55d29f56d66f40a8be203315ad59e5e8bac5d8d26f1d942ab76b43f0a044e86fcdc15fafb750ad9127be509773da29eb3a281328a914f709cab13d1f82d9f16b0dfa198c77af804aaf84fcd234a386e8718020466a99198b5be259a689d7392d19e70945db649d972ec0acfacac70c356f833d2cc76b5bdde341d185da766d67e3887514827d7108557543a2575c"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4d}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x96, 0xc5, "34631f84a6340bbb83ac85c0ba035392d0816a51f2ed6ec0ee9cd3efefed587b630f07ea9a02e4a67b970a7adab5e3812899c36f46405d3c080cd7a275bd573613f633f53232aad61349e244f006ca7f33cd1f55e3b60e6781740f89d2bdd8b933c75991d15789e63353cb9c711a3230c1013dbd6d3d6a770d336d2c9d929314feac31e94845fb9618556c16bd14d1f82ff0"}, @NL80211_ATTR_VENDOR_DATA={0x88, 0xc5, "0b23d81aae84c3ec48e4300690afc1b03599439f0bd63e29964a0a0cbdea0830beb32ea5529a8313678d046bff3c80d7c8f5a9119c3f225d3bcbe53942a298f307f539299a9cccd22f364afcb9192cd990dfbc945a5c5b2ee3224b652a36144f97966b72bdf92661a6e16862b29adca98547f7e16f5bbb24876b3a0d91607ef0668e6a18"}]}, 0x258}}, 0x0) setfsgid(0x0) 2.327188775s ago: executing program 6 (id=716): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 1.953477202s ago: executing program 1 (id=717): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffe06) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000680), 0x3e, 0x51b, &(0x7f0000000700)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000400)='./file2\x00', 0x22000c8c, &(0x7f0000000000)=ANY=[], 0x1, 0x1529, &(0x7f0000002500)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000002000400000000a408080000000031000000014000200fc02000000000000000000000000000114000100200100000000000000000000000000000000000000006bcd5cbf2ac8e1128e37c74709f4ad85d739fa48e00ee7099a83453b1fa31935cda8af907ed943"], 0x44}}, 0x40000) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 930.044942ms ago: executing program 6 (id=718): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x9}]}, @fwd={0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x1}}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000080)=""/254, 0x57, 0xfe, 0x0, 0x7}, 0x28) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xd7ed) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x181080, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000280)=""/120, &(0x7f0000000300)=""/162, &(0x7f00000003c0)=""/99, 0xeeee8000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xac, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x62b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000640)=0x1000, 0x4) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000680)={@loopback, @multicast2, 0x0, "70cd7b6ea44c565b081113c584b48b935ba23b2f75a566416179cf889e9e8011", 0x80, 0x5, 0x4, 0x3}, 0x3c) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000006c0)) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000700)={0x0, 0xb1, ""/177}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000007c0)) recvmmsg(r2, &(0x7f0000001f00)=[{{&(0x7f0000000800)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000880)=""/159, 0x9f}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/86, 0x56}, {&(0x7f0000000a40)=""/175, 0xaf}, {&(0x7f0000000b00)=""/23, 0x17}, {&(0x7f0000000b40)=""/46, 0x2e}, {&(0x7f0000000b80)=""/126, 0x7e}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x8, &(0x7f0000001c80)=""/117, 0x75}, 0x80}, {{&(0x7f0000001d00)=@l2, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/140, 0x8c}, {&(0x7f0000001e40)=""/54, 0x36}], 0x2, &(0x7f0000001ec0)=""/29, 0x1d}}], 0x2, 0x12000, &(0x7f0000001f80)={0x0, 0x989680}) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2, 0x0) fstat(r4, &(0x7f0000002000)) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000002080)={0x0, 0x0, "989867da6f2f0846617bb114c51850dc"}) recvmmsg(r1, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000020c0)=""/145, 0x91}, {&(0x7f0000002180)=""/38, 0x26}, {&(0x7f00000021c0)=""/45, 0x2d}, {&(0x7f0000002200)=""/99, 0x63}], 0x4, &(0x7f00000022c0)=""/172, 0xac}, 0x6}, {{&(0x7f0000002380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002400)=""/177, 0xb1}, {&(0x7f00000024c0)=""/148, 0x94}], 0x2, &(0x7f00000025c0)=""/188, 0xbc}, 0x8000}, {{&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002700)=""/202, 0xca}, {&(0x7f0000002800)=""/187, 0xbb}, {&(0x7f00000028c0)=""/132, 0x84}, {&(0x7f0000002980)=""/14, 0xe}, {&(0x7f00000029c0)=""/249, 0xf9}, {&(0x7f0000002ac0)=""/206, 0xce}, {&(0x7f0000002bc0)=""/176, 0xb0}, {&(0x7f0000002c80)=""/154, 0x9a}, {&(0x7f0000002d40)}], 0x9, &(0x7f0000002e40)=""/144, 0x90}, 0x17}, {{&(0x7f0000002f00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002f80), 0x0, &(0x7f0000002fc0)=""/125, 0x7d}, 0x7fff}, {{&(0x7f0000003040)=@vsock, 0x80, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/93, 0x5d}, {&(0x7f0000003140)=""/11, 0xb}], 0x2, &(0x7f00000031c0)=""/169, 0xa9}, 0x8}, {{&(0x7f0000003280)=@nfc_llcp, 0x80, &(0x7f0000004600)=[{&(0x7f0000003300)=""/70, 0x46}, {&(0x7f0000003380)=""/96, 0x60}, {&(0x7f0000003400)=""/15, 0xf}, {&(0x7f0000003440)=""/97, 0x61}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/198, 0xc6}, {&(0x7f00000045c0)=""/30, 0x1e}], 0x7}, 0xc}, {{&(0x7f0000004680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004700)=""/43, 0x2b}], 0x1, &(0x7f0000004780)=""/179, 0xb3}, 0xb}, {{&(0x7f0000004840)=@hci, 0x80, &(0x7f0000004900)=[{&(0x7f00000048c0)=""/11, 0xb}], 0x1}, 0x81}], 0x8, 0x8001, &(0x7f0000004b40)={0x77359400}) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000004cc0)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004bc0)={0x88, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "6541332ff9a47451fc055446ad2b77ec40dde8c6c32cd6fd60bad52d04c79138e94364c171c9feed9a92653b65f2156aadc434ad2312ad22039ec917a463fc09c8d588a1feeddd31a2b0a9b7ac5dc214797cd03853c703885d6b4ed8baee29382619a987271417c3"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000004e00)={&(0x7f0000004d00), 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x14, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000004e40)="26cc43f30c6007b237577882b644eeec", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004ec0)={&(0x7f0000004e80)='xen_mc_callback\x00', r1, 0x0, 0x5}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f40), r5) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x40, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xee}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x4040100) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSBRK(r9, 0x5427) sendmsg$sock(r6, &(0x7f0000006380)={&(0x7f0000005040)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000062c0)=[{&(0x7f00000050c0)="780b762eff2560ee1ef2a0b635f341ba7dc41da830963e36394c47e5bee8266f8e74da3fc7076de5039caa439f1a01745ec3f30ff06cc8e306905373031f994b2d676f1e73ac70f0119f367771b7b0770423d51b2d8a8d7895bee9a9ff7cc1a71dd3b921b92964", 0x67}, {&(0x7f0000005140)="065ad4269136e349f1194e744a4d370fecc9956481e0b911e5a89f6b2b840d0978586a440aa40e25682b97c71a6d23e47b34470f0d6ac1e661c6d1120c95bdb3f0e6fab2b7e65af0cff87a3141c0a28567", 0x51}, {&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="1ac22890d5ac142a976b9f636ed933aba0acb5a35349354be1d0725a66862eb1d6ad7eaf450aabd97e171fa4d99306072f8848861e79eddce6c5b912806f5c2d1d0fdcb2062ba91c46b30ec92fceae45b191aa6645a0e8ad194592f6a6746dea2651b7b5723eaa0a2873760da0ef91eeff3b88093b05aa305a3bd14e82dacad20309d8793c55266ac67f0216abea389a711bcd8c9f8e9c48360a6c1886d71992b0679fcf9d392d7606ff053fd97e057e1cdac981967b32625c2c0e19d8744913bd4cc0bb40f8b9e6c063fee29393cbcbffa7814236595de20c", 0xd9}], 0x4, &(0x7f0000006300)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x78}, 0x4000800) 851.906583ms ago: executing program 7 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/20, @ANYRES64=r0, @ANYRES32=r0], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000800)={0x3, "d1ac9599de1e86bab37e49fe8b7273ea31c710a82314c65a744907cd5c0bd3d18c2553fb41b7e7afa1125c8a33c0a1df7dcf8943892b1351bb6a0b2718b91870"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") r3 = open(&(0x7f0000000400)='./bus\x00', 0x80, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r3, @ANYRESOCT=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f00000002c0)={[{@nouid32}, {@i_version}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80222a}}, {@delalloc}, {@test_dummy_encryption}]}, 0xfd, 0x461, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLb8EmhF/AGi4q9I/EFpQeXgRaOJB01M9IDHWgpBChi2JkIaW43BoyHxbjya+Bd40otRTyZe9W5IiOkF9LRmdma23W13acuWLd3PJ5nue/Pe9r23b97Om3nTBtC3DmY/koidEfFnRAzl0eYMB/OXm/MzE//Oz0wkUau9+09Sz3djfmaizFq+754iciiNSL9IikKaVS9dPjs+NTV5sYiPTJ/7aKR66fILZ86Nn548PXl+7PjxY0dHX35p7MWVNyZJ2ibtyuq6/9MLB/a9+f7VtydOXP3g1++z3DuL9MXtuB1pI7S9eK3VteZ7uhuFbSC7FoWTgVvnYWOoRETWXYP18T8UlVjovKF44/OeVg5YV9m5aWv75LkasIkl0esaAL1RnOdns+vfcrtTc4+N4Pqr+QXQjWRm4uZ8vuUpA41r+cF1vHY9GBEn5v77Jtuii/chAADa+TGb/zyfzzua539pPLAo3+5ibWg4Iu6NiD0RcV9E7I2I+yPqeR+MiIeWlJB2LL91aWjp/Ce9tubGrUA2/3ulWNtqnv816j1cKWK76u0fTE6dmZo8Unwmh2JwaxYf7VDGT6//8VW7tMXzv2zLyi/ngkU9rg203KA7OT49Xp+UdsH1zyL2DyzX/qSxEpBExL6I2L+6X727DJx59rsD7TLduv0dtFlnWo3atxHP5P0/Fy3tLyWd1ydHtsXU5JGR8qhY6rffr7zTrvzban8XZP2/o/n4b80ynMTswnptdfVlXPnry7bXNGs9/rck79X7ZUux75Px6emLoxFbkrfq8ab9YwvvLeNl/tJy439PkZaV83BEZAfxIxHxaEQ8VtT98Yh4IiKe7ND+X1576sOle2tDK2v/+sr6/+Sy7W8c/8NZqFqbzWMLB8KKA5WzP//Qrvx27Z9r5Mj6/1g9dKjYU//+u4WVVnDtnxwAAADcPdL6M/BJergRTtPDh/Nn+PfGjnTqQnX6uVMXPj5/Mn9WfjgG0/JO19Ci+6GjSXnFnsfHinvFZfrR4r7x15XtyamImOtxu4F8nC83/jN/V3pdO2DdrW4dbdu61QO481rHf+dHNoDNpAvP0QB3KeMf+pfxD/1rufE/2xK3FgCbk/M/9C/jH/qX8Q/9y/iHvrSGP+cXEKheuhzphqhGfwXK/9d5B8rq8RcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl/wfAAD//ztj5Wo=") socket$netlink(0x10, 0x3, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 809.818255ms ago: executing program 1 (id=720): r0 = syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x42, 0x1, 0x2, 0x0, 0x0, 0x1) flistxattr(r0, &(0x7f00000003c0)=""/168, 0xa8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000192000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x2000775) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e"], 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC=r4, @ANYRES32, @ANYRES64=r4, @ANYRESDEC=r6], 0x78) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) 59.657889ms ago: executing program 6 (id=721): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") open(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffed4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f00000001c0)) ioctl$TCSETSF(r5, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 64.416067][ T1487] netlink: 32 bytes leftover after parsing attributes in process `syz.7.292'. [ 64.448383][ T1489] syz.7.298[1489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.448446][ T1489] syz.7.298[1489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.461782][ T1489] syz.7.298[1489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.473499][ T1489] syz.7.298[1489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.500166][ T25] kye 0003:0458:0138.0004: item fetching failed at offset 0/3 [ 64.520923][ T25] kye 0003:0458:0138.0004: parse failed [ 64.527041][ T25] kye: probe of 0003:0458:0138.0004 failed with error -22 [ 64.537903][ T1491] FAT-fs (loop6): bogus logical sector size 155 [ 64.549565][ T1491] FAT-fs (loop6): Can't find a valid FAT filesystem [ 64.701691][ T402] usb 1-1: USB disconnect, device number 8 [ 64.820912][ T1504] netlink: 104 bytes leftover after parsing attributes in process `syz.7.302'. [ 64.924915][ T1504] erofs: (device loop7): mounted with root inode @ nid 36. [ 64.952743][ T1504] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 64.962532][ T362] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.982901][ T1504] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -10 in[58, 4038] out[1851] [ 64.995869][ T1504] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 65.219483][ T362] usb 7-1: Using ep0 maxpacket: 32 [ 65.248909][ T402] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.282357][ T1514] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 65.291121][ T1514] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #16: comm syz.0.305: mark_inode_dirty error [ 65.303283][ T1514] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 65.312139][ T1514] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz.0.305: mark_inode_dirty error [ 65.323767][ T1514] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 65.332276][ T1514] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 65.338903][ T362] usb 7-1: config 1 interface 0 altsetting 77 bulk endpoint 0x3 has invalid maxpacket 1023 [ 65.340294][ T1514] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 65.350543][ T362] usb 7-1: config 1 interface 0 altsetting 77 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 65.372174][ T362] usb 7-1: config 1 interface 0 has no altsetting 0 [ 65.379415][ T1514] EXT4-fs error (device loop0): ext4_truncate:4390: inode #16: comm syz.0.305: mark_inode_dirty error [ 65.392307][ T15] usb 3-1: USB disconnect, device number 8 [ 65.402412][ T1514] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 65.411660][ T1514] EXT4-fs (loop0): 1 truncate cleaned up [ 65.417412][ T1514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 65.426781][ T1514] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.449098][ T1519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=1519 comm=syz.2.306 [ 65.462682][ T362] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.471968][ T362] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 65.480065][ T362] usb 7-1: SerialNumber: syz [ 65.488867][ T402] usb 5-1: Using ep0 maxpacket: 16 [ 65.500283][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 65.500294][ T24] audit: type=1400 audit(1758524345.580:595): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.526215][ T1502] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 65.542658][ T24] audit: type=1400 audit(1758524345.590:596): avc: denied { ioctl } for pid=1511 comm="syz.4.304" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.568092][ T24] audit: type=1400 audit(1758524345.620:597): avc: denied { read write } for pid=276 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.593367][ T24] audit: type=1400 audit(1758524345.620:598): avc: denied { open } for pid=276 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.617950][ T402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.629757][ T402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.631641][ T24] audit: type=1400 audit(1758524345.670:599): avc: denied { ioctl } for pid=275 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.642799][ T402] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice=20.00 [ 65.665857][ T24] audit: type=1400 audit(1758524345.670:600): avc: denied { prog_load } for pid=1523 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.674836][ T402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.698519][ T1521] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 65.718560][ T24] audit: type=1400 audit(1758524345.670:601): avc: denied { bpf } for pid=1523 comm="syz.2.308" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.739868][ T1521] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.746767][ T1502] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 65.754978][ T1521] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 65.755145][ T402] usb 5-1: config 0 descriptor?? [ 65.763361][ T1521] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.767322][ T24] audit: type=1400 audit(1758524345.670:602): avc: denied { perfmon } for pid=1523 comm="syz.2.308" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.778779][ T1521] EXT4-fs (loop0): 1 truncate cleaned up [ 65.799896][ T24] audit: type=1400 audit(1758524345.700:603): avc: denied { prog_run } for pid=1523 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.804549][ T1521] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 65.823646][ T24] audit: type=1400 audit(1758524345.770:604): avc: denied { mounton } for pid=1520 comm="syz.0.307" path="/56/bus" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.874395][ T1527] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 66.007037][ T1530] EXT4-fs (loop0): Online defrag not supported for encrypted files [ 66.190656][ T362] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 66.249891][ T402] kye 0003:0458:0138.0005: item fetching failed at offset 0/3 [ 66.258018][ T402] kye 0003:0458:0138.0005: parse failed [ 66.264025][ T402] kye: probe of 0003:0458:0138.0005 failed with error -22 [ 66.440876][ T275] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /56/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 66.464360][ T275] EXT4-fs (loop0): Remounting filesystem read-only [ 66.491390][ T363] usb 5-1: USB disconnect, device number 6 [ 66.547154][ T1548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.594638][ T1548] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.310: Failed to acquire dquot type 1 [ 66.607595][ T1548] EXT4-fs (loop0): 1 truncate cleaned up [ 66.614743][ T1548] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 67.623685][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.631090][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.674127][ T1586] syz.7.318[1586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.674188][ T1586] syz.7.318[1586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.675868][ T1570] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 67.705053][ T1585] syz.7.318[1585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.705108][ T1585] syz.7.318[1585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.717714][ T1570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 67.742675][ T1570] F2FS-fs (loop4): invalid crc value [ 67.750305][ T1570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.787144][ T1570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 67.794466][ T1570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.800330][ T1593] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 67.865133][ T1593] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.911865][ T883] usb 7-1: USB disconnect, device number 2 [ 67.922324][ T883] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 68.821421][ T1654] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 68.831441][ T1659] netlink: 'syz.4.328': attribute type 12 has an invalid length. [ 68.868925][ T15] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 69.060015][ T1681] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.074831][ T1681] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 69.083010][ T1681] FAT-fs (loop7): Filesystem has been set read-only [ 69.120363][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 69.268963][ T883] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 69.350971][ T1694] netlink: 'syz.7.332': attribute type 4 has an invalid length. [ 69.399019][ T15] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 69.408259][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.416728][ T15] usb 1-1: Product: syz [ 69.421373][ T15] usb 1-1: Manufacturer: syz [ 69.426122][ T15] usb 1-1: SerialNumber: syz [ 69.435403][ T15] usb 1-1: config 0 descriptor?? [ 69.479522][ T15] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 69.487434][ T15] usb 1-1: Detected FT232H [ 69.528925][ T362] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.629070][ T883] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.640559][ T883] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.650798][ T883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.657621][ T883] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 69.667171][ T883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.676196][ T883] usb 5-1: config 0 descriptor?? [ 69.688969][ T15] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 69.822799][ T780] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.908893][ T362] usb 7-1: device descriptor read/64, error -71 [ 70.034904][ T1706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1706 comm=syz.7.339 [ 70.150075][ T1711] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 70.160385][ T883] hid-steam 0003:28DE:1102.0006: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 70.172991][ T15] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 70.184122][ T883] hid-steam 0003:28DE:1102.0007: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 70.259015][ T883] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' connected [ 70.268310][ T883] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0006/input/input7 [ 70.318914][ T362] usb 7-1: device descriptor read/64, error -71 [ 70.378354][ T1716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.340'. [ 70.515112][ T24] kauditd_printk_skb: 108 callbacks suppressed [ 70.515124][ T24] audit: type=1400 audit(1758524351.584:711): avc: denied { append } for pid=1670 comm="syz.4.330" name="hidraw0" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.527039][ T1671] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0006/input/input8 [ 70.580645][ T883] usb 1-1: USB disconnect, device number 9 [ 70.585956][ T24] audit: type=1400 audit(1758524351.634:712): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=677 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.603019][ T883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 70.628912][ T362] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.634239][ T883] ftdi_sio 1-1:0.0: device disconnected [ 70.650553][ T24] audit: type=1400 audit(1758524351.634:713): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=677 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.676507][ T24] audit: type=1400 audit(1758524351.634:714): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=677 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.701416][ T24] audit: type=1400 audit(1758524351.644:715): avc: denied { ioctl } for pid=1622 comm="syz.0.325" path="socket:[20746]" dev="sockfs" ino=20746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.798770][ T363] usb 5-1: USB disconnect, device number 7 [ 70.809316][ T363] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' disconnected [ 70.918879][ T362] usb 7-1: device descriptor read/64, error -71 [ 70.936965][ T24] audit: type=1400 audit(1758524352.004:716): avc: denied { mounton } for pid=1721 comm="syz.7.341" path="/16/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.962532][ T24] audit: type=1400 audit(1758524352.044:717): avc: denied { write } for pid=1721 comm="syz.7.341" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 70.962585][ T24] audit: type=1400 audit(1758524352.044:718): avc: denied { getopt } for pid=1721 comm="syz.7.341" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.018528][ T1727] 9pnet: Insufficient options for proto=fd [ 71.104408][ T24] audit: type=1400 audit(1758524352.174:719): avc: denied { create } for pid=1732 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.128870][ T24] audit: type=1400 audit(1758524352.184:720): avc: denied { connect } for pid=1732 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.338944][ T362] usb 7-1: device descriptor read/64, error -71 [ 71.469004][ T362] usb usb7-port1: attempt power cycle [ 71.708926][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 71.718876][ T363] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 71.859040][ T964] Bluetooth: hci0: command 0x1003 tx timeout [ 71.865578][ T1704] Bluetooth: hci0: sending frame failed (-49) [ 71.902352][ T362] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 72.085153][ T362] usb 7-1: device descriptor read/8, error -71 [ 72.092366][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.105340][ T25] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 72.116213][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.125793][ T25] usb 5-1: config 0 descriptor?? [ 72.158954][ T363] usb 1-1: not running at top speed; connect to a high speed hub [ 72.244728][ T363] usb 1-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.261942][ T363] usb 1-1: config 1 interface 0 has no altsetting 0 [ 72.268933][ T402] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.321719][ T1755] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 72.329122][ T362] usb 7-1: device descriptor read/8, error -71 [ 72.329685][ T1755] EXT4-fs (loop6): Test dummy encryption mode enabled [ 72.346892][ T1755] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c09c, mo2=0002] [ 72.355893][ T1755] System zones: 0-5 [ 72.361120][ T1755] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,debug,minixdf,debug_want_extra_isize=0x000000000000003e,,errors=continue [ 72.419113][ T363] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.428973][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.437101][ T363] usb 1-1: Product: syz [ 72.451762][ T363] usb 1-1: Manufacturer: syz [ 72.456602][ T363] usb 1-1: SerialNumber: syz [ 72.572225][ T1758] F2FS-fs (loop4): fault_injection options not supported [ 72.582831][ T1758] F2FS-fs (loop4): invalid crc value [ 72.593932][ T1758] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.616593][ T1758] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.638952][ T402] usb 8-1: config 0 has an invalid interface number: 99 but max is 0 [ 72.647643][ T402] usb 8-1: config 0 has no interface number 0 [ 72.653995][ T402] usb 8-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 72.664890][ T402] usb 8-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 72.808981][ T363] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 72.818089][ T363] usb 1-1: USB disconnect, device number 10 [ 72.828934][ T362] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 72.848981][ T402] usb 8-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 72.858322][ T402] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.867111][ T402] usb 8-1: Product: syz [ 72.871390][ T402] usb 8-1: Manufacturer: syz [ 72.876270][ T402] usb 8-1: SerialNumber: syz [ 72.882941][ T402] usb 8-1: config 0 descriptor?? [ 72.898979][ T1753] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 72.906357][ T1753] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 72.918961][ T362] usb 7-1: Invalid ep0 maxpacket: 64 [ 72.924753][ T362] usb usb7-port1: unable to enumerate USB device [ 72.931895][ T402] ftdi_sio 8-1:0.99: FTDI USB Serial Device converter detected [ 72.940386][ T402] usb 8-1: Detected FT-X [ 73.126883][ T1753] syz.7.351[1753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.126937][ T1753] syz.7.351[1753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.153873][ T1753] udc-core: couldn't find an available UDC or it's busy [ 73.162011][ T1753] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.178880][ T402] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 73.198950][ T402] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 73.218900][ T402] ftdi_sio 8-1:0.99: GPIO initialisation failed: -71 [ 73.231603][ T402] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 73.249787][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 73.250757][ T402] usb 8-1: USB disconnect, device number 2 [ 73.273136][ T402] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 73.284427][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.291564][ T1777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.293331][ T402] ftdi_sio 8-1:0.99: device disconnected [ 73.299004][ T1777] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.312359][ T1777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.347894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.359586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 73.372024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.381754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 73.390310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.398549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.407566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.415984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.424998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.938904][ T363] Bluetooth: hci0: command 0x1001 tx timeout [ 73.945514][ T1704] Bluetooth: hci0: sending frame failed (-49) [ 74.428929][ T402] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 74.455018][ T281] attempt to access beyond end of device [ 74.455018][ T281] loop4: rw=2049, want=45104, limit=40427 [ 74.559009][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 74.565516][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 74.580656][ T25] usb 5-1: USB disconnect, device number 8 [ 74.661271][ T1798] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 74.808988][ T402] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 74.844479][ T1798] EXT4-fs (loop7): 1 truncate cleaned up [ 74.850257][ T1798] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 74.952828][ T402] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 75.013904][ T402] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 75.067628][ T402] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 75.091510][ T402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 75.102941][ T402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 75.113729][ T402] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 75.430383][ T402] usb 1-1: language id specifier not provided by device, defaulting to English [ 75.543218][ T24] kauditd_printk_skb: 76 callbacks suppressed [ 75.543231][ T24] audit: type=1326 audit(1758524356.614:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1790 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed9bbab82b code=0x7ffc0000 [ 75.581358][ T24] audit: type=1326 audit(1758524356.654:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1790 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed9bbab82b code=0x7ffc0000 [ 75.583998][ T1819] process 'syz.4.369' launched './file1' with NULL argv: empty string added [ 75.609402][ T24] audit: type=1326 audit(1758524356.684:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1790 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed9bbab82b code=0x7ffc0000 [ 75.706187][ T1815] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,max_batch_time=0x000000000000000a,quota,,errors=continue [ 75.818550][ T1815] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.956653][ T24] audit: type=1400 audit(1758524356.694:800): avc: denied { execute } for pid=1817 comm="syz.4.369" name="file1" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.070287][ T964] Bluetooth: hci0: command 0x1009 tx timeout [ 76.070421][ T1815] EXT4-fs error (device loop7): ext4_lookup:1830: inode #12: comm syz.7.368: iget: bad i_size value: 2533274857506816 [ 76.140747][ T24] audit: type=1400 audit(1758524356.694:801): avc: denied { execute_no_trans } for pid=1817 comm="syz.4.369" path="/77/file1" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.196796][ T1828] EXT4-fs error (device loop7): ext4_lookup:1830: inode #12: comm syz.7.368: iget: bad i_size value: 2533274857506816 [ 76.295892][ T24] audit: type=1326 audit(1758524356.714:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1790 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed9bbab82b code=0x7ffc0000 [ 76.320887][ T24] audit: type=1326 audit(1758524356.744:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5495cc29 code=0x7ffc0000 [ 76.384585][ T24] audit: type=1326 audit(1758524356.744:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5495cc29 code=0x7ffc0000 [ 76.412523][ T24] audit: type=1326 audit(1758524356.744:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5495cc29 code=0x7ffc0000 [ 76.438346][ T24] audit: type=1326 audit(1758524356.744:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.6.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5495cc29 code=0x7ffc0000 [ 76.595269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 76.603630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.612639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 76.621917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.630476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.638902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.648340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.656737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.699194][ T402] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 76.708773][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.718288][ T402] usb 1-1: Product: љ [ 76.723554][ T402] usb 1-1: config 0 descriptor?? [ 76.769575][ T402] hub 1-1:0.0: bad descriptor, ignoring hub [ 76.775624][ T402] hub: probe of 1-1:0.0 failed with error -5 [ 76.782733][ T402] input: љ as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 76.815947][ T1842] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 76.827885][ T1842] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.861517][ T1842] EXT4-fs error (device loop7) in ext4_do_update_inode:5336: error 27 [ 76.870457][ T1842] EXT4-fs error (device loop7): ext4_dirty_inode:6143: inode #2: comm syz.7.374: mark_inode_dirty error [ 76.884744][ T1842] EXT4-fs error (device loop7) in ext4_do_update_inode:5336: error 27 [ 76.894389][ T1842] EXT4-fs error (device loop7): __ext4_ext_dirty:182: inode #2: comm syz.7.374: mark_inode_dirty error [ 76.942686][ T1857] capability: warning: `syz.4.377' uses deprecated v2 capabilities in a way that may be insecure [ 76.973954][ T345] usb 1-1: USB disconnect, device number 11 [ 78.079001][ T363] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 78.438938][ T363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.449558][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.459753][ T363] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.628968][ T363] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.638211][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.646866][ T363] usb 1-1: Product: syz [ 78.651485][ T363] usb 1-1: Manufacturer: syz [ 78.656183][ T363] usb 1-1: SerialNumber: syz [ 78.664122][ T363] usb 1-1: config 0 descriptor?? [ 78.882616][ T283] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 79.158634][ T363] usb 1-1: USB disconnect, device number 12 [ 79.289455][ T283] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.370354][ T1918] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.387: Invalid block bitmap block 0 in block_group 0 [ 79.385509][ T1918] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.387: Failed to acquire dquot type 0 [ 79.397885][ T1918] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.387: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.412855][ T1918] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.387: Invalid inode bitmap blk 0 in block_group 0 [ 79.426018][ T1918] EXT4-fs error (device loop7) in ext4_free_inode:360: Corrupt filesystem [ 79.435478][ T1918] EXT4-fs (loop7): 1 orphan inode deleted [ 79.441773][ T1918] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; ,errors=continue [ 79.631880][ T283] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.648746][ T283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.679511][ T283] usb 7-1: config 0 descriptor?? [ 80.280248][ T9] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 80.759391][ T283] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 80.769242][ T283] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0008/input/input11 [ 80.802804][ T1937] FAT-fs (loop0): Directory bread(block 64) failed [ 80.812895][ T1937] FAT-fs (loop0): Directory bread(block 65) failed [ 80.819933][ T1937] FAT-fs (loop0): Directory bread(block 66) failed [ 80.826679][ T1937] FAT-fs (loop0): Directory bread(block 67) failed [ 80.833834][ T1937] FAT-fs (loop0): Directory bread(block 68) failed [ 80.840678][ T1937] FAT-fs (loop0): Directory bread(block 69) failed [ 80.847519][ T1937] FAT-fs (loop0): Directory bread(block 70) failed [ 80.858119][ T283] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 80.858888][ T1937] FAT-fs (loop0): Directory bread(block 71) failed [ 80.878488][ T24] kauditd_printk_skb: 91 callbacks suppressed [ 80.878501][ T24] audit: type=1400 audit(1758524361.954:895): avc: denied { setopt } for pid=1924 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.884834][ T1937] FAT-fs (loop0): Directory bread(block 72) failed [ 80.932676][ T1937] FAT-fs (loop0): Directory bread(block 73) failed [ 80.948859][ T1910] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 81.105254][ T1947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 81.117159][ T24] audit: type=1400 audit(1758524362.194:896): avc: denied { read } for pid=1946 comm="syz.4.393" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.186863][ T1902] udc-core: couldn't find an available UDC or it's busy [ 81.194282][ T1902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.204385][ T24] audit: type=1400 audit(1758524362.274:897): avc: denied { audit_write } for pid=1901 comm="syz.6.385" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.226388][ T24] audit: type=1107 audit(1758524362.274:898): pid=1901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 81.250177][ T1939] usb 7-1: USB disconnect, device number 7 [ 81.349589][ T1952] FAT-fs (loop0): Unrecognized mount option "utf " or missing value [ 81.359049][ T1910] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.478983][ T1910] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.488321][ T1910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.496540][ T1910] usb 8-1: SerialNumber: syz [ 81.708247][ T24] audit: type=1400 audit(1758524362.754:899): avc: denied { create } for pid=1951 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.743045][ T24] audit: type=1400 audit(1758524362.764:900): avc: denied { bind } for pid=1951 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.762900][ T24] audit: type=1400 audit(1758524362.764:901): avc: denied { node_bind } for pid=1951 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 81.798951][ T1910] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 81.808164][ T1961] netlink: 24 bytes leftover after parsing attributes in process `syz.7.396'. [ 81.811454][ T1910] usb 8-1: USB disconnect, device number 3 [ 81.896197][ T24] audit: type=1400 audit(1758524362.964:902): avc: denied { write } for pid=1962 comm="syz.7.397" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.918416][ T24] audit: type=1400 audit(1758524362.984:903): avc: denied { add_name } for pid=1962 comm="syz.7.397" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.940311][ T24] audit: type=1400 audit(1758524362.984:904): avc: denied { create } for pid=1962 comm="syz.7.397" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 82.388919][ T1940] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 82.402489][ T1980] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 82.420726][ T1980] overlayfs: unrecognized mount option "uid<00000000000000000000" or missing value [ 82.768838][ T1940] usb 3-1: Using ep0 maxpacket: 16 [ 82.888907][ T1940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.904486][ T1940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.007995][ T2001] netlink: 24 bytes leftover after parsing attributes in process `syz.7.407'. [ 83.051775][ T2001] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 83.083947][ T2001] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 83.092498][ T1940] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.110608][ T1940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.124379][ T1940] usb 3-1: Product: syz [ 83.133268][ T1940] usb 3-1: Manufacturer: syz [ 83.137987][ T1940] usb 3-1: SerialNumber: syz [ 83.468996][ T1940] usb 3-1: 0:2 : does not exist [ 83.474908][ T1940] usb 3-1: unit 9 not found! [ 83.492716][ T1940] usb 3-1: USB disconnect, device number 9 [ 83.922265][ T2027] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 84.062270][ T2035] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 84.070047][ T2035] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.090702][ T2035] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,dioread_nolock,inode_readahead_blks=0x0000000000040000,,errors=continue [ 84.093720][ T2044] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.130299][ T2044] EXT4-fs (loop6): 1 truncate cleaned up [ 84.143943][ T2044] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue [ 84.188972][ T886] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 84.428850][ T886] usb 3-1: Using ep0 maxpacket: 32 [ 84.486574][ T2056] FAT-fs (loop7): Directory bread(block 64) failed [ 84.494207][ T2056] FAT-fs (loop7): Directory bread(block 65) failed [ 84.501520][ T2056] FAT-fs (loop7): Directory bread(block 66) failed [ 84.508249][ T2056] FAT-fs (loop7): Directory bread(block 67) failed [ 84.514836][ T2056] FAT-fs (loop7): Directory bread(block 68) failed [ 84.521380][ T2056] FAT-fs (loop7): Directory bread(block 69) failed [ 84.528370][ T2056] FAT-fs (loop7): Directory bread(block 70) failed [ 84.535067][ T2056] FAT-fs (loop7): Directory bread(block 71) failed [ 84.541714][ T2056] FAT-fs (loop7): Directory bread(block 72) failed [ 84.548400][ T2056] FAT-fs (loop7): Directory bread(block 73) failed [ 84.577686][ T886] usb 3-1: config 0 has an invalid interface number: 234 but max is 0 [ 84.598041][ T886] usb 3-1: config 0 has no interface number 0 [ 84.679193][ T2066] x_tables: duplicate underflow at hook 2 [ 84.759028][ T886] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=33.76 [ 84.768290][ T886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.779775][ T2065] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 84.799607][ T886] usb 3-1: Product: syz [ 84.804090][ T886] usb 3-1: Manufacturer: syz [ 84.809591][ T886] usb 3-1: SerialNumber: syz [ 84.815161][ T886] usb 3-1: config 0 descriptor?? [ 84.820948][ T2065] EXT4-fs (loop7): orphan cleanup on readonly fs [ 84.828673][ T2065] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:510: comm syz.7.422: Block bitmap for bg 0 marked uninitialized [ 84.842824][ T2065] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 84.853194][ T2065] EXT4-fs (loop7): 1 orphan inode deleted [ 84.859201][ T2065] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 84.880467][ T886] ftdi_sio 3-1:0.234: FTDI USB Serial Device converter detected [ 84.889257][ T886] usb 3-1: Detected FT-X [ 85.151040][ T2030] EXT4-fs (loop2): Ignoring removed oldalloc option [ 85.166228][ T2030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.179243][ T2030] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.415: invalid indirect mapped block 4294967295 (level 0) [ 85.194609][ T2030] EXT4-fs (loop2): Remounting filesystem read-only [ 85.201874][ T2030] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.415: invalid indirect mapped block 4294967295 (level 1) [ 85.216441][ T2030] EXT4-fs (loop2): 1 orphan inode deleted [ 85.222466][ T2030] EXT4-fs (loop2): 1 truncate cleaned up [ 85.228378][ T2030] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,errors=remount-ro,init_itable,block_validity,block_validity,quota, [ 85.249562][ T2030] udc-core: couldn't find an available UDC or it's busy [ 85.259379][ T2030] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.289003][ T886] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 85.309041][ T886] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 85.328924][ T886] ftdi_sio 3-1:0.234: GPIO initialisation failed: -71 [ 85.336484][ T886] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.354411][ T886] usb 3-1: USB disconnect, device number 10 [ 85.359428][ T886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 85.372373][ T886] ftdi_sio 3-1:0.234: device disconnected [ 85.634384][ T2105] FAT-fs (loop7): Directory bread(block 64) failed [ 85.641421][ T2105] FAT-fs (loop7): Directory bread(block 65) failed [ 85.647992][ T2105] FAT-fs (loop7): Directory bread(block 66) failed [ 85.654927][ T2105] FAT-fs (loop7): Directory bread(block 67) failed [ 85.664035][ T2105] FAT-fs (loop7): Directory bread(block 68) failed [ 85.670902][ T2105] FAT-fs (loop7): Directory bread(block 69) failed [ 85.677458][ T2105] FAT-fs (loop7): Directory bread(block 70) failed [ 85.684456][ T2105] FAT-fs (loop7): Directory bread(block 71) failed [ 85.691223][ T2105] FAT-fs (loop7): Directory bread(block 72) failed [ 85.698020][ T2105] FAT-fs (loop7): Directory bread(block 73) failed [ 85.719721][ T2105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 85.730194][ T2105] device bridge_slave_0 left promiscuous mode [ 85.736545][ T2105] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.744917][ T2105] device bridge_slave_1 left promiscuous mode [ 85.751878][ T2105] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.903714][ T2114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.436'. [ 86.650734][ T24] kauditd_printk_skb: 127 callbacks suppressed [ 86.650747][ T24] audit: type=1400 audit(1758524367.724:1032): avc: denied { create } for pid=2136 comm="syz.7.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.676826][ T2137] Unsupported ieee802154 address type: 0 [ 86.678395][ T24] audit: type=1400 audit(1758524367.744:1033): avc: denied { bind } for pid=2136 comm="syz.7.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.815113][ T2145] EXT4-fs error (device loop6) in ext4_do_update_inode:5336: error 27 [ 86.824245][ T2145] EXT4-fs error (device loop6): ext4_dirty_inode:6143: inode #16: comm syz.6.442: mark_inode_dirty error [ 86.905710][ T2142] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.983614][ T2145] EXT4-fs error (device loop6) in ext4_do_update_inode:5336: error 27 [ 86.998096][ T2145] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #16: comm syz.6.442: mark_inode_dirty error [ 87.013007][ T2145] EXT4-fs error (device loop6) in ext4_do_update_inode:5336: error 27 [ 87.038645][ T24] audit: type=1400 audit(1758524368.104:1034): avc: denied { create } for pid=2152 comm="syz.7.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.059052][ T2145] EXT4-fs error (device loop6) in ext4_orphan_del:3292: error 27 [ 87.065595][ T2145] EXT4-fs error (device loop6) in ext4_do_update_inode:5336: error 27 [ 87.075980][ T2145] EXT4-fs error (device loop6): ext4_truncate:4390: inode #16: comm syz.6.442: mark_inode_dirty error [ 87.087888][ T2145] EXT4-fs error (device loop6) in ext4_orphan_cleanup:3108: error 27 [ 87.096070][ T1910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 87.096791][ T2142] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue [ 87.104527][ T2145] EXT4-fs (loop6): 1 truncate cleaned up [ 87.148855][ T2145] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 87.158140][ T2145] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.167238][ T24] audit: type=1326 audit(1758524368.164:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2155 comm="syz.7.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 87.192678][ T24] audit: type=1326 audit(1758524368.164:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2155 comm="syz.7.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 87.198006][ T2142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.443'. [ 87.216644][ T24] audit: type=1326 audit(1758524368.164:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2155 comm="syz.7.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 87.226459][ T2142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 87.249694][ T24] audit: type=1326 audit(1758524368.164:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2155 comm="syz.7.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 87.258973][ T2142] tipc: Started in network mode [ 87.282510][ T24] audit: type=1326 audit(1758524368.214:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2155 comm="syz.7.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 87.288832][ T2142] tipc: Own node identity fffffe01, cluster identity 64 [ 87.313978][ T24] audit: type=1326 audit(1758524368.214:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2155 comm="syz.7.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 87.321600][ T2142] tipc: 32-bit node address hash set to fffffe01 [ 87.346017][ T24] audit: type=1326 audit(1758524368.214:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2155 comm="syz.7.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 87.586193][ T1910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.605197][ T2171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.449'. [ 87.615040][ T1910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.635250][ T1910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.659037][ T1910] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.668293][ T1910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.728909][ T363] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 87.755535][ T1910] usb 3-1: config 0 descriptor?? [ 87.889756][ T2189] syz.4.455[2189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.889848][ T2189] syz.4.455[2189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.241047][ T2144] SELinux: unknown common [ 88.288218][ T2144] SELinux: failed to load policy [ 88.458934][ T363] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 88.476426][ T363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.505766][ T363] usb 7-1: config 0 descriptor?? [ 88.698870][ T1910] usbhid 3-1:0.0: can't add hid device: -71 [ 88.717796][ T1910] usbhid: probe of 3-1:0.0 failed with error -71 [ 88.736934][ T1910] usb 3-1: USB disconnect, device number 11 [ 89.209037][ T363] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 89.240524][ T2237] tap0: tun_chr_ioctl cmd 1074025677 [ 89.247554][ T2237] tap0: linktype set to 823 [ 89.421707][ T2248] fuse: Bad value for 'user_id' [ 89.663992][ T2254] 9pnet: Insufficient options for proto=fd [ 89.698939][ T363] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 89.714173][ T363] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 89.730489][ T363] asix: probe of 7-1:0.0 failed with error -71 [ 89.742478][ T363] usb 7-1: USB disconnect, device number 8 [ 90.001549][ T2267] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.474: casefold flag without casefold feature [ 90.015492][ T2267] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.474: couldn't read orphan inode 15 (err -117) [ 90.034194][ T2265] F2FS-fs (loop6): fault_injection options not supported [ 90.049652][ T2267] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 90.057746][ T2265] F2FS-fs (loop6): invalid crc value [ 90.090103][ T2265] F2FS-fs (loop6): Found nat_bits in checkpoint [ 90.183478][ T2265] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 90.909549][ T363] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 91.299453][ T2285] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 91.308550][ T2285] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 91.317098][ T363] usb 7-1: Using ep0 maxpacket: 32 [ 91.318977][ T2285] F2FS-fs (loop2): Unrecognized mount option "kmem_cache_free" or missing value [ 91.438905][ T363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.450214][ T363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.460329][ T363] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.469511][ T363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.478518][ T363] usb 7-1: config 0 descriptor?? [ 91.519285][ T363] hub 7-1:0.0: USB hub found [ 91.559373][ T2304] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.567292][ T2304] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.576815][ T2304] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 91.583319][ T1910] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 91.592701][ T2304] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.603737][ T2301] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 91.640089][ T2301] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 91.669784][ T2301] F2FS-fs (loop7): Found nat_bits in checkpoint [ 91.700247][ T2304] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.713208][ T2304] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.726992][ T2301] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 91.728955][ T24] kauditd_printk_skb: 174 callbacks suppressed [ 91.729043][ T24] audit: type=1326 audit(1758524372.804:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2284 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe42df9bcb7 code=0x7ffc0000 [ 91.740648][ T2301] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 91.764437][ T363] hub 7-1:0.0: 1 port detected [ 91.772924][ T24] audit: type=1326 audit(1758524372.854:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2284 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe42df9a590 code=0x7ffc0000 [ 91.825139][ T24] audit: type=1400 audit(1758524372.894:1218): avc: denied { link } for pid=2300 comm="syz.7.482" name="file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.847167][ T24] audit: type=1400 audit(1758524372.894:1219): avc: denied { read write } for pid=2300 comm="syz.7.482" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 91.870909][ T24] audit: type=1400 audit(1758524372.894:1220): avc: denied { open } for pid=2300 comm="syz.7.482" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 91.896367][ T24] audit: type=1400 audit(1758524372.894:1221): avc: denied { lock } for pid=2300 comm="syz.7.482" path="/66/file0/file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.949067][ T24] audit: type=1326 audit(1758524372.964:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2284 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe42df9b82b code=0x7ffc0000 [ 91.966869][ T2285] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 91.973938][ T24] audit: type=1326 audit(1758524372.994:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2284 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe42df9a88a code=0x7ffc0000 [ 91.981684][ T2285] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.005991][ T24] audit: type=1326 audit(1758524372.994:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2284 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe42df9a88a code=0x7ffc0000 [ 92.014754][ T2285] F2FS-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 92.038283][ T1910] usb 1-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 92.047935][ T24] audit: type=1400 audit(1758524373.014:1225): avc: denied { listen } for pid=2264 comm="syz.6.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.058610][ T1910] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 250, using maximum allowed: 30 [ 92.129155][ T1910] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 92.227529][ T2299] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 92.237149][ T1910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.250572][ T2299] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.259382][ T2299] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 92.263706][ T1910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.267883][ T2299] System zones: 0-5 [ 92.280921][ T2299] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=./file0/file1,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,dioread_nolock,debug,,errors=continue [ 92.301991][ T1910] usb 1-1: SerialNumber: syz [ 92.470644][ T1911] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 92.502606][ T2329] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.519047][ T363] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 92.568195][ T2332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 92.602668][ T1910] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 92.611303][ T1910] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 92.617987][ T1910] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 92.631757][ T1910] usb 1-1: USB disconnect, device number 13 [ 92.838945][ T363] usb 7-1: USB disconnect, device number 9 [ 92.848981][ T1911] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.018948][ T1911] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.028669][ T1911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.036996][ T1911] usb 8-1: Product: syz [ 93.041221][ T1911] usb 8-1: Manufacturer: syz [ 93.046284][ T1911] usb 8-1: SerialNumber: syz [ 93.172052][ T2335] xt_TCPMSS: Only works on TCP SYN packets [ 93.179278][ T2337] xt_TCPMSS: Only works on TCP SYN packets [ 94.169735][ T1911] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 94.176503][ T1911] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 94.207778][ T1911] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 94.213635][ T2372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 94.404391][ T2393] syz.0.497[2393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.404658][ T2393] syz.0.497[2393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.532766][ T1910] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 94.747326][ T1911] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 94.798514][ T1911] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42 [ 94.842923][ T2391] EXT4-fs (loop2): 1 orphan inode deleted [ 94.848828][ T2391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 94.858207][ T2391] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.003817][ T1911] usb 8-1: USB disconnect, device number 4 [ 95.031609][ T1911] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM [ 95.040341][ T1910] usb 7-1: device descriptor read/64, error -71 [ 95.562834][ T1910] usb 7-1: device descriptor read/64, error -71 [ 95.884640][ T1910] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 96.298308][ T1910] usb 7-1: device descriptor read/64, error -71 [ 96.398780][ T2461] F2FS-fs (loop0): fault_injection options not supported [ 96.408240][ T2461] F2FS-fs (loop0): invalid crc value [ 96.445139][ T2461] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.480287][ T2461] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.583079][ T15] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.750862][ T1910] usb 7-1: device descriptor read/64, error -71 [ 96.900199][ T1910] usb usb7-port1: attempt power cycle [ 97.048204][ T780] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.232439][ T2487] EXT4-fs (loop6): Test dummy encryption mode enabled [ 97.247365][ T2487] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 97.297549][ T2487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.518'. [ 97.336392][ T24] kauditd_printk_skb: 1303 callbacks suppressed [ 97.336409][ T24] audit: type=1400 audit(1758524378.705:2529): avc: denied { append } for pid=2486 comm="syz.6.518" path=2F35392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F667265657A65722E7374617465 dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.381676][ T275] attempt to access beyond end of device [ 97.381676][ T275] loop0: rw=2049, want=45104, limit=40427 [ 97.487474][ T886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 97.544649][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 97.559794][ T2498] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 97.633134][ T24] audit: type=1400 audit(1758524379.027:2530): avc: denied { append } for pid=2515 comm="syz.0.525" name="001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.633632][ T2516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 97.683411][ T15] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 97.693699][ T2519] EXT4-fs (loop6): orphan cleanup on readonly fs [ 97.700530][ T2519] Quota error (device loop6): find_tree_dqentry: Getting block too big (196613 >= 6) [ 97.711740][ T2519] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 97.721867][ T2519] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.523: Failed to acquire dquot type 1 [ 97.733990][ T2519] EXT4-fs (loop6): 1 truncate cleaned up [ 97.739810][ T2519] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 97.758266][ T2519] EXT4-fs error (device loop6): ext4_lookup:1834: inode #2: comm syz.6.523: deleted inode referenced: 12 [ 97.841954][ T886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 97.855044][ T886] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 97.864194][ T15] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 97.873398][ T886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.881602][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.890180][ T15] usb 5-1: Product: syz [ 97.894703][ T886] usb 3-1: config 0 descriptor?? [ 97.899727][ T15] usb 5-1: Manufacturer: syz [ 97.904318][ T15] usb 5-1: SerialNumber: syz [ 97.909902][ T15] usb 5-1: config 0 descriptor?? [ 97.945812][ T15] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 97.953578][ T15] usb 5-1: Detected FT232RL [ 98.355386][ T886] dragonrise 0003:0079:0006.0009: unknown main item tag 0x0 [ 98.363060][ T886] dragonrise 0003:0079:0006.0009: item fetching failed at offset 4/5 [ 98.371727][ T886] dragonrise 0003:0079:0006.0009: parse failed [ 98.378498][ T886] dragonrise: probe of 0003:0079:0006.0009 failed with error -22 [ 98.552661][ T2472] tipc: Failed to remove local publication {66,1,1}/3999428394 [ 98.589114][ T2472] tipc: Failed to remove local publication {66,1,1}/3999428394 [ 98.969216][ T1940] Bluetooth: hci0: command 0x1003 tx timeout [ 98.975457][ T1704] Bluetooth: hci0: sending frame failed (-49) [ 99.270361][ T1940] usb 3-1: USB disconnect, device number 12 [ 99.285679][ T2544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 99.305780][ T24] audit: type=1326 audit(1758524380.829:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 99.329571][ T24] audit: type=1326 audit(1758524380.829:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 99.354056][ T24] audit: type=1326 audit(1758524380.829:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 99.359884][ T2546] bridge: RTM_NEWNEIGH with invalid ether address [ 99.384454][ T24] audit: type=1326 audit(1758524380.829:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 99.408145][ T24] audit: type=1326 audit(1758524380.829:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 99.431956][ T24] audit: type=1326 audit(1758524380.829:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 99.752659][ T15] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 99.771442][ T15] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 99.827022][ T2556] syz.0.535[2556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.827087][ T2556] syz.0.535[2556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.948217][ T2556] FAT-fs (loop0): Unrecognized mount option "9 Pͩ=Q6rVH[jRϫ)WXt"W)} /JLOld\^$HQ" or missing value [ 100.137373][ T2556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 100.216778][ T2552] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.344587][ T2572] syz.4.539 (2572): attempted to duplicate a private mapping with mremap. This is not supported. [ 100.371749][ T2552] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.439779][ T15] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.448785][ T15] usb 5-1: USB disconnect, device number 9 [ 100.456278][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.468275][ T15] ftdi_sio 5-1:0.0: device disconnected [ 100.477433][ T2552] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 100.487962][ T2572] EXT4-fs (loop4): Ignoring removed orlov option [ 100.499578][ T2572] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 100.521699][ T2566] syz.6.537[2566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.521768][ T2566] syz.6.537[2566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.522351][ T2572] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 100.583862][ T2566] fuse: Bad value for 'fd' [ 100.814289][ T2591] netlink: 96 bytes leftover after parsing attributes in process `syz.2.544'. [ 100.909546][ T886] Bluetooth: hci0: command 0x1001 tx timeout [ 100.916114][ T1704] Bluetooth: hci0: sending frame failed (-49) [ 100.966333][ T1940] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 101.317937][ T1940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.329399][ T1940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.340191][ T1940] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 101.349781][ T1940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.358876][ T1940] usb 1-1: config 0 descriptor?? [ 101.890574][ T2632] syz.6.552[2632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.890868][ T2632] syz.6.552[2632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.854761][ T297] Bluetooth: hci0: command 0x1009 tx timeout [ 103.486359][ T297] usb 1-1: USB disconnect, device number 14 [ 103.617144][ T2654] EXT4-fs (loop4): 1 orphan inode deleted [ 103.623053][ T2654] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 103.632044][ T2654] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.909577][ T297] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 103.939098][ T24] kauditd_printk_skb: 91 callbacks suppressed [ 103.939110][ T24] audit: type=1326 audit(1758524385.797:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 104.044399][ T2669] EXT4-fs: failed to create workqueue [ 104.050128][ T2669] EXT4-fs (loop2): mount failed [ 104.055143][ T24] audit: type=1326 audit(1758524385.829:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 104.080447][ T24] audit: type=1326 audit(1758524385.829:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 104.104903][ T24] audit: type=1326 audit(1758524385.829:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2668 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42df9bc29 code=0x7ffc0000 [ 104.132774][ T297] usb 1-1: Using ep0 maxpacket: 32 [ 104.258535][ T2683] overlayfs: unrecognized mount option "dont_hash" or missing value [ 104.267006][ T297] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 104.280039][ T297] usb 1-1: config 0 has no interface number 0 [ 104.449882][ T297] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 104.459819][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.468672][ T297] usb 1-1: Product: syz [ 104.473083][ T297] usb 1-1: Manufacturer: syz [ 104.481795][ T297] usb 1-1: SerialNumber: syz [ 104.488673][ T297] usb 1-1: config 0 descriptor?? [ 104.525371][ T297] smsc95xx v2.0.0 [ 104.544308][ T2698] exfat: Unknown parameter 'trusted.overlay.upper' [ 104.703528][ T2701] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 104.925026][ T1940] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 104.952998][ T297] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 104.963891][ T297] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.151080][ T24] audit: type=1326 audit(1758524387.095:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afb784c29 code=0x7ffc0000 [ 105.174897][ T24] audit: type=1326 audit(1758524387.095:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afb784c29 code=0x7ffc0000 [ 105.199092][ T24] audit: type=1326 audit(1758524387.095:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5afb784c29 code=0x7ffc0000 [ 105.223509][ T24] audit: type=1326 audit(1758524387.149:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afb784c29 code=0x7ffc0000 [ 105.247191][ T24] audit: type=1326 audit(1758524387.149:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afb784c29 code=0x7ffc0000 [ 105.271451][ T24] audit: type=1326 audit(1758524387.149:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5afb73b937 code=0x7ffc0000 [ 105.312206][ T2707] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 105.321243][ T2707] EXT4-fs (loop4): Remounting filesystem read-only [ 105.333137][ T2707] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #16: comm syz.4.570: mark_inode_dirty error [ 105.345319][ T2707] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 105.354389][ T2707] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #16: comm syz.4.570: mark_inode_dirty error [ 105.366889][ T2707] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 105.376654][ T2707] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27 [ 105.384988][ T2707] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 105.393545][ T2707] EXT4-fs error (device loop4): ext4_truncate:4390: inode #16: comm syz.4.570: mark_inode_dirty error [ 105.405344][ T2707] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3108: error 27 [ 105.413980][ T2707] EXT4-fs (loop4): 1 truncate cleaned up [ 105.420040][ T2707] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data_err=ignore, [ 105.431013][ T2707] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.510512][ T1940] usb 7-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 105.519662][ T1940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.527814][ T1940] usb 7-1: SerialNumber: syz [ 105.542207][ T1940] usb 7-1: config 0 descriptor?? [ 105.810388][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 105.853799][ T2656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 105.866352][ T297] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 105.877887][ T297] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 105.886149][ T297] usb 1-1: USB disconnect, device number 15 [ 106.034073][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 106.146029][ T25] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 106.154423][ T25] usb 5-1: config 0 has no interface number 0 [ 106.160611][ T25] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 106.170982][ T25] usb 5-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.341794][ T25] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 106.351496][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.359799][ T25] usb 5-1: Product: syz [ 106.364194][ T25] usb 5-1: Manufacturer: syz [ 106.369100][ T25] usb 5-1: SerialNumber: syz [ 106.377098][ T25] usb 5-1: config 0 descriptor?? [ 106.397830][ T2708] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 106.417116][ T25] usb 5-1: invalid MIDI in EP 0 [ 106.422490][ T25] snd-usb-audio: probe of 5-1:0.16 failed with error -22 [ 106.465056][ T2722] F2FS-fs (loop2): invalid crc value [ 106.515843][ T2722] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.554054][ T2722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.633484][ T2736] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.576: casefold flag without casefold feature [ 106.646844][ T2736] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.576: couldn't read orphan inode 15 (err -117) [ 106.660189][ T2736] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 107.087264][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 107.114049][ T276] attempt to access beyond end of device [ 107.114049][ T276] loop2: rw=524288, want=45072, limit=40427 [ 107.126181][ T276] attempt to access beyond end of device [ 107.126181][ T276] loop2: rw=0, want=45072, limit=40427 [ 107.189231][ T1940] usb 7-1: USB disconnect, device number 13 [ 107.296322][ T2744] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.415094][ T2744] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.423075][ T2744] device bridge_slave_0 entered promiscuous mode [ 107.434925][ T2744] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.442462][ T2744] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.450101][ T2744] device bridge_slave_1 entered promiscuous mode [ 107.488121][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 107.492273][ T2744] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.501084][ T2744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.508725][ T2744] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.516029][ T2744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.525255][ T2749] F2FS-fs (loop6): Found nat_bits in checkpoint [ 107.554571][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.562891][ T2749] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 107.571179][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.584029][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.597413][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.606397][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.613592][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.622805][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.631348][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.638655][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.646118][ T25] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 107.655552][ T25] usb 8-1: config 0 has no interface number 0 [ 107.667827][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.679116][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.694759][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.707162][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.716065][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.724215][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.732695][ T2744] device veth0_vlan entered promiscuous mode [ 107.745895][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.755470][ T2744] device veth1_macvtap entered promiscuous mode [ 107.766331][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.777960][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.814367][ T25] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.823713][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.831931][ T25] usb 8-1: Product: syz [ 107.834533][ T2757] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 107.845294][ T25] usb 8-1: Manufacturer: syz [ 107.845304][ T25] usb 8-1: SerialNumber: syz [ 107.849095][ T25] usb 8-1: config 0 descriptor?? [ 107.898878][ T2763] binder: 2762:2763 ioctl 4018620d 0 returned -22 [ 107.906811][ T2763] bridge: RTM_NEWNEIGH with invalid ether address [ 107.917815][ T25] smsc95xx v2.0.0 [ 107.928205][ T7] device bridge_slave_1 left promiscuous mode [ 107.935009][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.949835][ T419] usb 5-1: USB disconnect, device number 10 [ 107.959559][ T7] device bridge_slave_0 left promiscuous mode [ 107.966259][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.979707][ T7] device veth1_macvtap left promiscuous mode [ 107.987133][ T7] device veth0_vlan left promiscuous mode [ 108.008826][ T1053] attempt to access beyond end of device [ 108.008826][ T1053] loop6: rw=2049, want=45120, limit=40427 [ 108.345702][ T25] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 108.379191][ T25] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.413467][ T25] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 108.425195][ T25] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 108.496760][ T25] usb 8-1: USB disconnect, device number 5 [ 108.611674][ T2792] 9pnet: Insufficient options for proto=fd [ 108.639017][ T2794] EXT4-fs (loop6): Ignoring removed orlov option [ 108.647365][ T2794] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 108.669710][ T2794] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,user_xattr,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,noquota,,errors=continue [ 108.698161][ T24] kauditd_printk_skb: 1136 callbacks suppressed [ 108.698174][ T24] audit: type=1400 audit(1758524390.898:3774): avc: denied { read } for pid=2793 comm="syz.6.589" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.742533][ T24] audit: type=1400 audit(1758524390.898:3775): avc: denied { open } for pid=2793 comm="syz.6.589" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.771426][ T24] audit: type=1400 audit(1758524390.898:3776): avc: denied { ioctl } for pid=2793 comm="syz.6.589" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.886214][ T2818] fuse: Unknown parameter 'default_permissions ' [ 108.886310][ T2817] fuse: Unknown parameter 'default_permissions ' [ 108.996556][ T2829] netlink: 28 bytes leftover after parsing attributes in process `syz.8.597'. [ 109.005781][ T2829] netem: change failed [ 111.233328][ T2850] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 111.329296][ T2850] EXT4-fs (loop6): orphan cleanup on readonly fs [ 111.336469][ T2850] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.601: bg 0: block 248: padding at end of block bitmap is not set [ 111.352063][ T2850] Quota error (device loop6): write_blk: dquota write failed [ 111.359901][ T2850] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 111.369886][ T2850] EXT4-fs error (device loop6): ext4_acquire_dquot:6226: comm syz.6.601: Failed to acquire dquot type 1 [ 111.382249][ T2850] EXT4-fs (loop6): 1 truncate cleaned up [ 111.391629][ T2850] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue [ 111.763050][ T2869] netlink: 27 bytes leftover after parsing attributes in process `syz.0.606'. [ 111.788840][ T2869] tipc: Started in network mode [ 111.794003][ T2869] tipc: Own node identity 4, cluster identity 4711 [ 111.800965][ T2869] tipc: 32-bit node address hash set to 4 [ 111.808345][ T24] audit: type=1400 audit(1758524394.235:3777): avc: denied { watch watch_reads } for pid=2821 comm="syz.7.595" path="/74/file0" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.832025][ T24] audit: type=1400 audit(1758524394.235:3778): avc: denied { audit_read } for pid=2821 comm="syz.7.595" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.919989][ T2860] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 111.927874][ T2860] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 111.942540][ T2875] EXT4-fs (loop8): Unrecognized mount option "smackfsroot={" or missing value [ 112.184841][ T2860] F2FS-fs (loop4): invalid crc value [ 112.254978][ T2860] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.275988][ T2860] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.283141][ T2860] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.318914][ T1912] kernel write not supported for file /469/net/psched (pid: 1912 comm: kworker/1:13) [ 112.390878][ T886] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 112.567703][ T2895] input: syz1 as /devices/virtual/input/input12 [ 112.633154][ T1912] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.718722][ T886] usb 7-1: Using ep0 maxpacket: 16 [ 112.838082][ T886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.996577][ T886] usb 7-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 113.005960][ T886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.014341][ T886] usb 7-1: Product: syz [ 113.019817][ T886] usb 7-1: Manufacturer: syz [ 113.025035][ T886] usb 7-1: SerialNumber: syz [ 113.032147][ T886] usb 7-1: config 0 descriptor?? [ 113.033771][ T1912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.048476][ T1912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.058534][ T1912] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 113.067997][ T1912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.087232][ T1912] usb 8-1: config 0 descriptor?? [ 113.291225][ T1940] usb 7-1: USB disconnect, device number 14 [ 113.315617][ T2890] incfs: Error accessing: ./file0. [ 113.320852][ T2890] incfs: mount failed -20 [ 113.364464][ T24] audit: type=1400 audit(2000000000.396:3779): avc: denied { setopt } for pid=2912 comm="syz.8.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.385465][ T24] audit: type=1400 audit(2000000000.396:3780): avc: denied { ioctl } for pid=2912 comm="syz.8.616" path="socket:[25994]" dev="sockfs" ino=25994 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.537947][ T1912] hid-steam 0003:28DE:1142.000A: item fetching failed at offset 3/5 [ 113.546718][ T1912] hid-steam 0003:28DE:1142.000A: steam_probe:parse of hid interface failed [ 113.556012][ T1912] hid-steam: probe of 0003:28DE:1142.000A failed with error -22 [ 113.661582][ T2915] F2FS-fs (loop8): Fix alignment : done, start(4096) end(16896) block(12288) [ 113.671606][ T2915] F2FS-fs (loop8): invalid crc value [ 113.677396][ T2915] F2FS-fs (loop8): invalid crc value [ 113.683090][ T2915] F2FS-fs (loop8): Failed to get valid F2FS checkpoint [ 113.726240][ T297] usb 8-1: USB disconnect, device number 6 [ 113.817048][ T2918] erofs: (device loop8): erofs_read_inode: unsupported i_format 32 of nid 36 [ 113.976495][ T24] audit: type=1400 audit(2000000001.062:3781): avc: denied { create } for pid=2922 comm="syz.8.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 114.130605][ T2926] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 114.138184][ T2926] EXT4-fs (loop6): Ignoring removed bh option [ 114.144668][ T2926] EXT4-fs (loop6): Test dummy encryption mode enabled [ 114.151808][ T2926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 114.163582][ T2926] EXT4-fs (loop6): 1 truncate cleaned up [ 114.169494][ T2926] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 114.223607][ T2934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.624'. [ 114.255603][ T24] audit: type=1326 audit(2000000001.362:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.7.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 114.280107][ T24] audit: type=1326 audit(2000000001.362:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.7.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 114.304986][ T24] audit: type=1326 audit(2000000001.362:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.7.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 114.329349][ T24] audit: type=1326 audit(2000000001.362:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.7.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 114.360333][ T24] audit: type=1326 audit(2000000001.362:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.7.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 114.384792][ T886] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 114.393844][ T24] audit: type=1326 audit(2000000001.362:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.7.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 114.408606][ T2942] incfs: Options parsing error. -22 [ 114.419341][ T24] audit: type=1326 audit(2000000001.362:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2935 comm="syz.7.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97df84cc29 code=0x7ffc0000 [ 114.424786][ T2942] incfs: mount failed -22 [ 114.659111][ T886] usb 9-1: device descriptor read/64, error -71 [ 114.717589][ T2951] SELinux: Context 򊘊bXD1*ދaYgj/l5$=)a;( j*-ONElӛp!(}ywpkґvi۽xJ0O=U;g [ 114.717589][ T2951] OAL'p0)fO"6 s\%yCb%fKCr:6@!>!thi>zu,g39S/U]~] is not valid (left unmapped). [ 114.757571][ T2951] SELinux: Context =1ffdf-YFEӣ@`21&ֱ۫{%Wļ~&ԟl6uc/4Vۅe'exiKp& ".ŷc^V14 v0x"K6Ū,8w;a.6t_&̨(nݮH_waCd is not valid (left unmapped). [ 114.792169][ T2955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.632'. [ 115.093539][ T886] usb 9-1: device descriptor read/64, error -71 [ 115.105885][ T2978] syz.6.638[2978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.105948][ T2978] syz.6.638[2978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.118979][ T2978] syz.6.638[2978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.130472][ T2978] syz.6.638[2978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.545181][ T886] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 116.702474][ T886] usb 9-1: device descriptor read/64, error -71 [ 116.832662][ T3020] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.649: casefold flag without casefold feature [ 116.845832][ T3020] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.649: couldn't read orphan inode 15 (err -117) [ 116.858740][ T3020] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 116.926499][ T15] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 116.938172][ T15] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.599386][ T3060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 117.608830][ T3055] fuse: Bad value for 'group_id' [ 117.612258][ T3060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 117.619832][ T3055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.623038][ T3061] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.643029][ T3060] xt_socket: unknown flags 0x50 [ 117.656812][ T3055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 117.688829][ T3061] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.001548][ T1910] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 118.381009][ T1910] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 118.849858][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 118.849870][ T24] audit: type=1326 audit(2000000004.055:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d4653c29 code=0x7ffc0000 [ 118.933368][ T24] audit: type=1326 audit(2000000004.055:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f88d4653c29 code=0x7ffc0000 [ 118.971554][ T3090] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 118.985911][ T3090] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.989254][ T24] audit: type=1326 audit(2000000004.055:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d4653c29 code=0x7ffc0000 [ 119.019716][ T24] audit: type=1326 audit(2000000004.055:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f88d4653c29 code=0x7ffc0000 [ 119.043181][ T24] audit: type=1326 audit(2000000004.055:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d4653c29 code=0x7ffc0000 [ 119.044473][ T3090] syz.4.669 (pid 3090) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 119.066862][ T24] audit: type=1326 audit(2000000004.055:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f88d4653c29 code=0x7ffc0000 [ 119.106671][ T24] audit: type=1326 audit(2000000004.109:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88d464abe7 code=0x7ffc0000 [ 119.192651][ T24] audit: type=1326 audit(2000000004.109:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88d45efe09 code=0x7ffc0000 [ 119.277139][ T24] audit: type=1326 audit(2000000004.109:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88d464abe7 code=0x7ffc0000 [ 119.308378][ T24] audit: type=1326 audit(2000000004.109:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.8.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88d45efe09 code=0x7ffc0000 [ 119.325026][ T1910] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 119.350245][ T1910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.353451][ T3096] EXT4-fs (loop7): Unrecognized mount option "subj_user=usrquota" or missing value [ 119.450940][ T1910] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 119.460469][ T1910] uvcvideo: No valid video chain found. [ 119.741271][ T1910] usb 7-1: USB disconnect, device number 15 [ 119.961463][ T7] tipc: Left network mode [ 120.127149][ T3111] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.139158][ T3111] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.152347][ T3111] device bridge_slave_0 entered promiscuous mode [ 120.166733][ T3111] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.178889][ T3111] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.190930][ T3111] device bridge_slave_1 entered promiscuous mode [ 120.253191][ T3117] kvm [3116]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 120.272590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.280334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.289150][ T3117] kvm [3116]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 120.304746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.316932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.328652][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.335855][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.347246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.350379][ T297] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 120.356463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.372687][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.379797][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.407722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.425957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.444084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.461245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.476375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.500860][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.512582][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.540306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.552613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.568742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.583442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.601912][ T3111] device veth0_vlan entered promiscuous mode [ 120.611395][ T297] usb 8-1: Using ep0 maxpacket: 32 [ 120.637784][ T3132] binder: 3131:3132 ioctl c0306201 200000000040 returned -22 [ 120.649985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.661665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.672720][ T3111] device veth1_macvtap entered promiscuous mode [ 120.687328][ T7] device bridge_slave_1 left promiscuous mode [ 120.693721][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.704619][ T7] device bridge_slave_0 left promiscuous mode [ 120.711022][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.729014][ T7] device veth1_macvtap left promiscuous mode [ 120.735296][ T297] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.748280][ T7] device veth0_vlan left promiscuous mode [ 120.754433][ T297] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 120.767817][ T297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.779476][ T297] usb 8-1: config 0 descriptor?? [ 120.888123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.899693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.921368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.935832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.082820][ T3140] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 121.102224][ T3140] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.133036][ T3140] EXT4-fs (loop9): shut down requested (1) [ 121.153019][ T3151] netlink: 200 bytes leftover after parsing attributes in process `syz.8.687'. [ 121.232012][ T297] steelseries_srws1 0003:1038:1410.000C: missing HID_OUTPUT_REPORT 0 [ 121.245922][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.255310][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.264519][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.273752][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.283314][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.323089][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.344113][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.354672][ T3111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 121.673639][ T363] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 121.682111][ T3112] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.678: Invalid block bitmap block 0 in block_group 0 [ 121.699656][ T3112] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.678: Failed to acquire dquot type 0 [ 121.711479][ T3112] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz.7.678: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.905904][ T3112] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.678: Invalid inode bitmap blk 0 in block_group 0 [ 121.919227][ T403] EXT4-fs error (device loop7): ext4_release_dquot:6262: comm kworker/u4:4: Failed to release dquot type 0 [ 121.930914][ T3112] EXT4-fs error (device loop7) in ext4_free_inode:360: Corrupt filesystem [ 121.940369][ T3112] EXT4-fs (loop7): 1 orphan inode deleted [ 121.946311][ T3112] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; ,errors=continue [ 121.959042][ T3168] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.996150][ T3168] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.004222][ T3168] device bridge_slave_0 entered promiscuous mode [ 122.015690][ T3168] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.023942][ T3168] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.041309][ T3168] device bridge_slave_1 entered promiscuous mode [ 122.114431][ T3168] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.121541][ T3168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.128970][ T3168] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.136163][ T3168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.146900][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.157712][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.295738][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.303298][ T1910] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 122.312216][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.330552][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.339154][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.348050][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.355226][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.356104][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.371953][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.380644][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.387750][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.405131][ T3192] netlink: 200 bytes leftover after parsing attributes in process `syz.6.699'. [ 122.418696][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.427370][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.435821][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.444161][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.455959][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.464495][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.485165][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.493597][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.502330][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.510030][ T363] usb 9-1: not running at top speed; connect to a high speed hub [ 122.510442][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.527393][ T3168] device veth0_vlan entered promiscuous mode [ 122.538112][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.547391][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.563861][ T3168] device veth1_macvtap entered promiscuous mode [ 122.587531][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.602313][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.613009][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.678878][ T9] device bridge_slave_1 left promiscuous mode [ 122.687214][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.697819][ T9] device bridge_slave_0 left promiscuous mode [ 122.705667][ T1910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.717855][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.725185][ T1910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.736780][ T9] device veth1_macvtap left promiscuous mode [ 122.742963][ T9] device veth0_vlan left promiscuous mode [ 122.743202][ T1910] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 122.758182][ T1910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.770056][ T1910] usb 1-1: config 0 descriptor?? [ 122.773298][ T363] usb 9-1: config 14 has an invalid interface number: 29 but max is 0 [ 122.783346][ T363] usb 9-1: config 14 has no interface number 0 [ 122.789600][ T363] usb 9-1: config 14 interface 29 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 122.800715][ T363] usb 9-1: config 14 interface 29 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 122.811853][ T363] usb 9-1: config 14 interface 29 has no altsetting 0 [ 122.841865][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 122.850274][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.858790][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 122.867260][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.876016][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.884291][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.893141][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.901532][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.910662][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.919276][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.949567][ T299] blk_update_request: I/O error, dev loop1, sector 7944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.966352][ T401] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.978263][ T363] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c1.97 [ 122.980478][ T1912] usb 8-1: USB disconnect, device number 7 [ 122.991816][ T363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.003742][ T3185] udc-core: couldn't find an available UDC or it's busy [ 123.011268][ T363] usb 9-1: Product: ᠁ [ 123.015957][ T3185] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.018392][ T401] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.033640][ T299] blk_update_request: I/O error, dev loop1, sector 7944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.036391][ T401] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 123.046742][ T363] usb 9-1: Manufacturer: 《 [ 123.059847][ T299] Buffer I/O error on dev loop1p4, logical block 992, async page read [ 123.068368][ T363] usb 9-1: SerialNumber: syz [ 123.114601][ T3198] netlink: 'syz.1.694': attribute type 12 has an invalid length. [ 123.122717][ T3198] netlink: 'syz.1.694': attribute type 29 has an invalid length. [ 123.133141][ T3198] netlink: 148 bytes leftover after parsing attributes in process `syz.1.694'. [ 123.244495][ T397] blk_update_request: I/O error, dev loop1, sector 7944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 123.244524][ T299] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.259521][ T1910] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 123.513019][ T3185] udc-core: couldn't find an available UDC or it's busy [ 123.522385][ T3185] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.532684][ T299] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 123.542063][ T397] blk_update_request: I/O error, dev loop1, sector 7944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.551787][ T3185] udc-core: couldn't find an available UDC or it's busy [ 123.554911][ T397] Buffer I/O error on dev loop1p4, logical block 992, async page read [ 123.563064][ T3185] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.579149][ T24] kauditd_printk_skb: 7111 callbacks suppressed [ 123.579160][ T24] audit: type=1400 audit(2000000009.152:10955): avc: denied { setcheckreqprot } for pid=3206 comm="syz.7.702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.627958][ T24] audit: type=1326 audit(2000000009.184:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e447abc29 code=0x7ffc0000 [ 123.630706][ T363] asix 9-1:14.29 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 123.652868][ T1910] cp2112 0003:10C4:EA90.000D: error requesting version [ 123.680358][ T1910] cp2112: probe of 0003:10C4:EA90.000D failed with error -71 [ 123.691302][ T24] audit: type=1326 audit(2000000009.195:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e447abc29 code=0x7ffc0000 [ 123.709516][ T1910] usb 1-1: USB disconnect, device number 16 [ 123.725326][ T363] asix: probe of 9-1:14.29 failed with error -71 [ 123.729395][ T24] audit: type=1326 audit(2000000009.195:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f3e447abc29 code=0x7ffc0000 [ 123.756027][ T24] audit: type=1326 audit(2000000009.195:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e447abc29 code=0x7ffc0000 [ 123.765168][ T363] usb 9-1: USB disconnect, device number 4 [ 123.811914][ T3216] fido_id[3216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 123.919287][ T24] audit: type=1326 audit(2000000009.195:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e447abc29 code=0x7ffc0000 [ 124.185889][ T24] audit: type=1326 audit(2000000009.796:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.8.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d4653c29 code=0x7ffc0000 [ 124.274184][ T24] audit: type=1326 audit(2000000009.839:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.8.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88d4652590 code=0x7ffc0000 [ 124.299085][ T24] audit: type=1326 audit(2000000009.849:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.8.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88d465382b code=0x7ffc0000 [ 124.324625][ T24] audit: type=1326 audit(2000000009.849:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3222 comm="syz.8.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88d465382b code=0x7ffc0000 [ 124.356976][ T396] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 124.374348][ T401] blk_update_request: I/O error, dev loop1, sector 7944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 124.387215][ T401] blk_update_request: I/O error, dev loop1, sector 7944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.408540][ T396] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 124.448281][ T3228] netlink: 200 bytes leftover after parsing attributes in process `syz.1.709'. [ 124.451353][ T401] Buffer I/O error on dev loop1p4, logical block 992, async page read [ 124.532204][ T396] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 124.543744][ T401] Buffer I/O error on dev loop1p4, logical block 992, async page read [ 124.581400][ T363] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 124.591091][ T396] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 124.591293][ T401] Buffer I/O error on dev loop1p4, logical block 992, async page read [ 124.617652][ T3240] netlink: 92 bytes leftover after parsing attributes in process `syz.1.713'. [ 124.629125][ T3240] netem: unknown loss type 0 [ 124.635987][ T3240] netem: change failed [ 124.684439][ T3244] overlayfs: missing 'workdir' [ 124.814232][ T1910] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 124.861004][ T363] usb 9-1: Using ep0 maxpacket: 16 [ 124.973320][ T363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 124.996283][ T3247] F2FS-fs (loop6): fault_injection options not supported [ 125.003709][ T363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 125.028812][ T3247] F2FS-fs (loop6): invalid crc value [ 125.051307][ T363] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 125.061745][ T3247] F2FS-fs (loop6): Found nat_bits in checkpoint [ 125.080658][ T363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.093854][ T1910] usb 1-1: device descriptor read/64, error -71 [ 125.127304][ T363] usb 9-1: config 0 descriptor?? [ 125.145422][ T3247] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 125.159298][ T3224] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.178337][ T363] uvcvideo: Found UVC 0.00 device (10c4:ea90) [ 125.195153][ T363] uvcvideo: No valid video chain found. [ 125.225838][ T3253] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 125.229842][ T3247] F2FS-fs (loop6): access invalid blkaddr:2816 [ 125.241281][ T3247] CPU: 1 PID: 3247 Comm: syz.6.716 Not tainted syzkaller #0 [ 125.248768][ T3247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 125.250664][ T3253] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #16: comm syz.1.717: mark_inode_dirty error [ 125.259136][ T3247] Call Trace: [ 125.259158][ T3247] __dump_stack+0x21/0x24 [ 125.259167][ T3247] dump_stack_lvl+0x169/0x1d8 [ 125.259181][ T3247] ? f2fs_get_next_page_offset+0x760/0x760 [ 125.259190][ T3247] ? show_regs_print_info+0x18/0x18 [ 125.259203][ T3247] dump_stack+0x15/0x1c [ 125.259223][ T3247] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 125.293838][ T3253] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 125.294677][ T3247] f2fs_map_blocks+0xc76/0x35c0 [ 125.308212][ T3253] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.717: mark_inode_dirty error [ 125.312817][ T3247] ? stack_trace_save+0xe0/0xe0 [ 125.312840][ T3247] ? f2fs_do_map_lock+0x290/0x290 [ 125.331591][ T3253] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 125.333989][ T3247] ? page_cache_sync_ra+0x250/0x2a0 [ 125.345645][ T3253] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 125.347149][ T3247] ? f2fs_readdir+0x42a/0x940 [ 125.364265][ T3253] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 125.365390][ T3247] ? xa_load+0x479/0x490 [ 125.377807][ T3247] f2fs_mpage_readpages+0xbf2/0x1e60 [ 125.383297][ T3247] ? has_enough_free_blks+0x2e0/0x2e0 [ 125.387713][ T3253] EXT4-fs error (device loop1): ext4_truncate:4390: inode #16: comm syz.1.717: mark_inode_dirty error [ 125.388867][ T3247] ? __mod_memcg_state+0xbc/0x230 [ 125.405848][ T3247] ? xas_nomem+0x6b/0x1d0 [ 125.410354][ T3247] f2fs_readahead+0xfc/0x240 [ 125.415126][ T3247] ? f2fs_set_data_page_dirty+0x6f0/0x6f0 [ 125.419804][ T3253] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 125.421308][ T3247] read_pages+0x16e/0xb50 [ 125.421321][ T3247] ? workingset_activation+0x250/0x250 [ 125.421333][ T3247] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 125.421350][ T3247] ? page_cache_ra_unbounded+0x7d0/0x7d0 [ 125.444945][ T3253] EXT4-fs (loop1): 1 truncate cleaned up [ 125.445762][ T3247] ? add_to_page_cache_lru+0x186/0x210 [ 125.457520][ T3253] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 125.462605][ T3247] page_cache_ra_unbounded+0x67f/0x7d0 [ 125.462624][ T3247] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 125.483534][ T3247] ? try_to_wake_up+0x638/0xd70 [ 125.488395][ T3247] ? plist_del+0x3df/0x3f0 [ 125.492539][ T3253] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.492929][ T3247] ? __kasan_check_write+0x14/0x20 [ 125.508532][ T3247] ondemand_readahead+0x7b5/0xc00 [ 125.513659][ T3247] page_cache_sync_ra+0x250/0x2a0 [ 125.518683][ T3247] f2fs_readdir+0x42a/0x940 [ 125.523205][ T3247] ? f2fs_fill_dentries+0xca0/0xca0 [ 125.528584][ T3247] ? fsnotify_perm+0x31b/0x4b0 [ 125.533489][ T3247] ? __kasan_check_write+0x14/0x20 [ 125.538887][ T3247] iterate_dir+0x260/0x570 [ 125.543337][ T3247] ? f2fs_fill_dentries+0xca0/0xca0 [ 125.548641][ T3247] __se_sys_getdents+0xe5/0x240 [ 125.553533][ T3247] ? __x64_sys_getdents+0x90/0x90 [ 125.558871][ T3247] ? switch_fpu_return+0x197/0x340 [ 125.564416][ T3247] ? fillonedir+0x430/0x430 [ 125.569104][ T3247] ? fpu__clear_all+0x20/0x20 [ 125.574089][ T3247] ? ____fput+0x15/0x20 [ 125.578534][ T3247] ? __kasan_check_read+0x11/0x20 [ 125.583582][ T3247] __x64_sys_getdents+0x7b/0x90 [ 125.588540][ T3247] do_syscall_64+0x31/0x40 [ 125.593194][ T3247] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 125.599096][ T3247] RIP: 0033:0x7efd5495cc29 [ 125.603512][ T3247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.623641][ T3247] RSP: 002b:00007efd533c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 125.632361][ T3247] RAX: ffffffffffffffda RBX: 00007efd54ba3fa0 RCX: 00007efd5495cc29 [ 125.640438][ T3247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 125.648517][ T3247] RBP: 00007efd549dfe41 R08: 0000000000000000 R09: 0000000000000000 [ 125.656517][ T3247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.664722][ T3247] R13: 00007efd54ba4038 R14: 00007efd54ba3fa0 R15: 00007ffe078c6318 [ 125.686831][ T3247] F2FS-fs (loop6): access invalid blkaddr:2816 [ 125.711388][ T3247] CPU: 1 PID: 3247 Comm: syz.6.716 Not tainted syzkaller #0 [ 125.718823][ T3247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 125.728963][ T3247] Call Trace: [ 125.732265][ T3247] __dump_stack+0x21/0x24 [ 125.736605][ T3247] dump_stack_lvl+0x169/0x1d8 [ 125.741284][ T3247] ? f2fs_get_next_page_offset+0x760/0x760 [ 125.747179][ T3247] ? show_regs_print_info+0x18/0x18 [ 125.752383][ T3247] dump_stack+0x15/0x1c [ 125.756632][ T3247] f2fs_is_valid_blkaddr+0xc8c/0x1360 [ 125.762088][ T3247] f2fs_map_blocks+0xc76/0x35c0 [ 125.767063][ T3247] ? stack_trace_save+0xe0/0xe0 [ 125.771927][ T3247] ? f2fs_do_map_lock+0x290/0x290 [ 125.777132][ T3247] ? page_cache_sync_ra+0x250/0x2a0 [ 125.782333][ T3247] ? f2fs_readdir+0x42a/0x940 [ 125.787133][ T3247] ? xa_load+0x479/0x490 [ 125.791381][ T3247] f2fs_mpage_readpages+0xbf2/0x1e60 [ 125.796678][ T3247] ? has_enough_free_blks+0x2e0/0x2e0 [ 125.802072][ T3247] ? __mod_memcg_state+0xbc/0x230 [ 125.807102][ T3247] ? xas_nomem+0x6b/0x1d0 [ 125.811529][ T3247] f2fs_readahead+0xfc/0x240 [ 125.816236][ T3247] ? f2fs_set_data_page_dirty+0x6f0/0x6f0 [ 125.822039][ T3247] read_pages+0x16e/0xb50 [ 125.826534][ T3247] ? workingset_activation+0x250/0x250 [ 125.832072][ T3247] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 125.837608][ T3247] ? page_cache_ra_unbounded+0x7d0/0x7d0 [ 125.843315][ T3247] ? add_to_page_cache_lru+0x186/0x210 [ 125.848959][ T3247] page_cache_ra_unbounded+0x67f/0x7d0 [ 125.854581][ T3247] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 125.861342][ T3247] ? try_to_wake_up+0x638/0xd70 [ 125.866182][ T3247] ? plist_del+0x3df/0x3f0 [ 125.870587][ T3247] ? __kasan_check_write+0x14/0x20 [ 125.875688][ T3247] ondemand_readahead+0x7b5/0xc00 [ 125.880707][ T3247] page_cache_sync_ra+0x250/0x2a0 [ 125.885812][ T3247] f2fs_readdir+0x42a/0x940 [ 125.890578][ T3247] ? f2fs_fill_dentries+0xca0/0xca0 [ 125.895770][ T3247] ? fsnotify_perm+0x31b/0x4b0 [ 125.900520][ T3247] ? __kasan_check_write+0x14/0x20 [ 125.905824][ T3247] iterate_dir+0x260/0x570 [ 125.910231][ T3247] ? f2fs_fill_dentries+0xca0/0xca0 [ 125.915505][ T3247] __se_sys_getdents+0xe5/0x240 [ 125.920432][ T3247] ? __x64_sys_getdents+0x90/0x90 [ 125.925479][ T3247] ? switch_fpu_return+0x197/0x340 [ 125.930597][ T3247] ? fillonedir+0x430/0x430 [ 125.935180][ T3247] ? fpu__clear_all+0x20/0x20 [ 125.939933][ T3247] ? ____fput+0x15/0x20 [ 125.944166][ T3247] ? __kasan_check_read+0x11/0x20 [ 125.949176][ T3247] __x64_sys_getdents+0x7b/0x90 [ 125.954016][ T3247] do_syscall_64+0x31/0x40 [ 125.958426][ T3247] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 125.964394][ T3247] RIP: 0033:0x7efd5495cc29 [ 125.968802][ T3247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.988396][ T3247] RSP: 002b:00007efd533c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 125.996889][ T3247] RAX: ffffffffffffffda RBX: 00007efd54ba3fa0 RCX: 00007efd5495cc29 [ 126.005121][ T3247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 126.013442][ T3247] RBP: 00007efd549dfe41 R08: 0000000000000000 R09: 0000000000000000 [ 126.021760][ T3247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.029731][ T3247] R13: 00007efd54ba4038 R14: 00007efd54ba3fa0 R15: 00007ffe078c6318 [ 126.045953][ T3247] attempt to access beyond end of device [ 126.045953][ T3247] loop6: rw=0, want=45072, limit=40427 [ 126.062633][ T1053] attempt to access beyond end of device [ 126.062633][ T1053] loop6: rw=2049, want=45104, limit=40427 [ 126.155443][ T3263] EXT4-fs warning (device loop7): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 126.170898][ T3263] EXT4-fs (loop7): mount failed [ 126.184316][ T3268] Unknown ioctl -2144833520 [ 126.189841][ T3268] Unknown ioctl 1076408081 [ 126.195779][ T3268] Unknown ioctl -2146390152 [ 126.200881][ T3268] Unknown ioctl -2146914445 [ 126.205720][ T3268] Unknown ioctl 35123 [ 126.222244][ T1910] usb 1-1: device descriptor read/64, error -71 [ 126.414759][ T3274] fuse: Unknown parameter '' [ 126.501307][ T1910] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 126.588641][ T3274] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 126.596254][ T3274] EXT4-fs (loop7): Test dummy encryption mode enabled [ 126.603191][ T3271] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.617199][ T3274] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz.7.719: invalid indirect mapped block 234881024 (level 0) [ 126.622542][ T3271] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 126.631582][ T3274] EXT4-fs (loop7): 1 truncate cleaned up [ 126.646607][ T3274] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000080222a,delalloc,test_dummy_encryption,,errors=continue [ 126.677172][ T3271] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 126.752936][ T1910] usb 1-1: device descriptor read/64, error -71 [ 126.979042][ T297] usb 9-1: USB disconnect, device number 5 [ 127.042518][ T1911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.050870][ T3280] ================================================================== [ 127.059135][ T3280] BUG: KASAN: use-after-free in mutex_lock+0x7f/0xe0 [ 127.065909][ T3280] Write of size 8 at addr ffff88810b74ac40 by task syz.6.721/3280 [ 127.073740][ T3280] [ 127.076076][ T3280] CPU: 1 PID: 3280 Comm: syz.6.721 Not tainted syzkaller #0 [ 127.083419][ T3280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 127.093551][ T3280] Call Trace: [ 127.096843][ T3280] __dump_stack+0x21/0x24 [ 127.101163][ T3280] dump_stack_lvl+0x169/0x1d8 [ 127.105920][ T3280] ? show_regs_print_info+0x18/0x18 [ 127.111321][ T3280] ? thaw_kernel_threads+0x220/0x220 [ 127.116606][ T3280] ? __kasan_kmalloc+0xec/0x110 [ 127.121636][ T3280] ? __kasan_kmalloc+0xda/0x110 [ 127.126607][ T3280] print_address_description+0x7f/0x2c0 [ 127.132662][ T3280] ? mutex_lock+0x7f/0xe0 [ 127.136980][ T3280] kasan_report+0xe2/0x130 [ 127.141386][ T3280] ? mutex_lock+0x7f/0xe0 [ 127.145712][ T3280] kasan_check_range+0x280/0x290 [ 127.150666][ T3280] __kasan_check_write+0x14/0x20 [ 127.155592][ T3280] mutex_lock+0x7f/0xe0 [ 127.159909][ T3280] ? mutex_trylock+0xa0/0xa0 [ 127.164496][ T3280] steam_input_open+0x91/0x160 [ 127.169460][ T3280] ? steam_input_register+0xa70/0xa70 [ 127.175044][ T3280] ? __kasan_check_write+0x14/0x20 [ 127.180573][ T3280] ? mutex_lock_interruptible+0x8c/0xe0 [ 127.186403][ T3280] input_open_device+0x14c/0x2a0 [ 127.191442][ T3280] evdev_open+0x4d2/0x5e0 [ 127.195775][ T3280] chrdev_open+0x597/0x670 [ 127.200265][ T3280] ? cd_forget+0x170/0x170 [ 127.204921][ T3280] ? cd_forget+0x170/0x170 [ 127.209340][ T3280] do_dentry_open+0x793/0x1090 [ 127.214220][ T3280] vfs_open+0x73/0x80 [ 127.218288][ T3280] path_openat+0x27ad/0x3160 [ 127.222877][ T3280] ? __kasan_slab_alloc+0xcf/0xf0 [ 127.227984][ T3280] ? kmem_cache_alloc+0x165/0x2e0 [ 127.233004][ T3280] ? getname+0x19/0x20 [ 127.237153][ T3280] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 127.243231][ T3280] ? do_filp_open+0x3e0/0x3e0 [ 127.247990][ T3280] ? expand_files+0xde/0x8e0 [ 127.252656][ T3280] do_filp_open+0x1b3/0x3e0 [ 127.257239][ T3280] ? vfs_tmpfile+0x2c0/0x2c0 [ 127.261908][ T3280] ? get_unused_fd_flags+0x92/0xa0 [ 127.267100][ T3280] do_sys_openat2+0x14c/0x6d0 [ 127.271765][ T3280] ? do_sys_open+0xe0/0xe0 [ 127.276270][ T3280] ? __kasan_check_write+0x14/0x20 [ 127.281551][ T3280] ? switch_fpu_return+0x197/0x340 [ 127.287061][ T3280] ? fpu__clear_all+0x20/0x20 [ 127.292264][ T3280] ? ____fput+0x15/0x20 [ 127.296421][ T3280] __x64_sys_openat+0x136/0x160 [ 127.301273][ T3280] do_syscall_64+0x31/0x40 [ 127.305778][ T3280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 127.311682][ T3280] RIP: 0033:0x7efd5495b590 [ 127.316317][ T3280] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 127.336275][ T3280] RSP: 002b:00007efd533c4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 127.344777][ T3280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efd5495b590 [ 127.353105][ T3280] RDX: 0000000000000000 RSI: 00007efd533c4c10 RDI: 00000000ffffff9c [ 127.361102][ T3280] RBP: 00007efd533c4c10 R08: 0000000000000000 R09: 0000000000000000 [ 127.369159][ T3280] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 127.377125][ T3280] R13: 00007efd54ba4038 R14: 00007efd54ba3fa0 R15: 00007ffe078c6318 [ 127.385505][ T3280] [ 127.387917][ T3280] Allocated by task 0: [ 127.391974][ T3280] (stack is not available) [ 127.396490][ T3280] [ 127.398844][ T3280] Freed by task 3168: [ 127.403199][ T3280] kasan_set_track+0x4a/0x70 [ 127.408331][ T3280] kasan_set_free_info+0x23/0x40 [ 127.413399][ T3280] ____kasan_slab_free+0x125/0x160 [ 127.418519][ T3280] __kasan_slab_free+0x11/0x20 [ 127.423303][ T3280] slab_free_freelist_hook+0xc5/0x190 [ 127.428699][ T3280] kfree+0xc0/0x270 [ 127.432809][ T3280] skb_release_data+0x532/0x670 [ 127.437926][ T3280] consume_skb+0xab/0x1f0 [ 127.442828][ T3280] netlink_unicast+0x87e/0xa40 [ 127.448403][ T3280] netlink_sendmsg+0x88d/0xb30 [ 127.453378][ T3280] __sys_sendto+0x41d/0x580 [ 127.458053][ T3280] __x64_sys_sendto+0xe5/0x100 [ 127.462898][ T3280] do_syscall_64+0x31/0x40 [ 127.467336][ T3280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 127.473506][ T3280] [ 127.475909][ T3280] The buggy address belongs to the object at ffff88810b74ac00 [ 127.475909][ T3280] which belongs to the cache kmalloc-512 of size 512 [ 127.490978][ T3280] The buggy address is located 64 bytes inside of [ 127.490978][ T3280] 512-byte region [ffff88810b74ac00, ffff88810b74ae00) [ 127.504917][ T3280] The buggy address belongs to the page: [ 127.510764][ T3280] page:ffffea00042dd200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b748 [ 127.522521][ T3280] head:ffffea00042dd200 order:2 compound_mapcount:0 compound_pincount:0 [ 127.531899][ T3280] flags: 0x4000000000010200(slab|head) [ 127.538165][ T3280] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 127.547207][ T3280] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 127.556309][ T3280] page dumped because: kasan: bad access detected [ 127.562912][ T3280] page_owner tracks the page as allocated [ 127.568786][ T3280] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 281, ts 24324526764, free_ts 24322768289 [ 127.589969][ T3280] prep_new_page+0x179/0x180 [ 127.595108][ T3280] get_page_from_freelist+0x2235/0x23d0 [ 127.600843][ T3280] __alloc_pages_nodemask+0x268/0x5f0 [ 127.606818][ T3280] new_slab+0x84/0x3f0 [ 127.611907][ T3280] ___slab_alloc+0x2a6/0x450 [ 127.617705][ T3280] __slab_alloc+0x63/0xa0 [ 127.622047][ T3280] __kmalloc_track_caller+0x1ef/0x320 [ 127.628413][ T3280] __alloc_skb+0xdc/0x520 [ 127.632930][ T3280] netlink_ack+0x3a6/0xb80 [ 127.637800][ T3280] netlink_rcv_skb+0x265/0x430 [ 127.642694][ T3280] rtnetlink_rcv+0x1c/0x20 [ 127.647656][ T3280] netlink_unicast+0x876/0xa40 [ 127.652423][ T3280] netlink_sendmsg+0x88d/0xb30 [ 127.657287][ T3280] __sys_sendto+0x41d/0x580 [ 127.661881][ T3280] __x64_sys_sendto+0xe5/0x100 [ 127.666810][ T3280] do_syscall_64+0x31/0x40 [ 127.671226][ T3280] page last free stack trace: [ 127.675916][ T3280] __free_pages_ok+0x7fc/0x820 [ 127.680766][ T3280] __free_pages+0xdd/0x380 [ 127.685396][ T3280] __free_slab+0xcf/0x190 [ 127.689851][ T3280] unfreeze_partials+0x15f/0x190 [ 127.694878][ T3280] put_cpu_partial+0xc1/0x180 [ 127.699638][ T3280] __slab_free+0x2c9/0x3a0 [ 127.704141][ T3280] ___cache_free+0x111/0x130 [ 127.709275][ T3280] qlink_free+0x50/0x90 [ 127.713442][ T3280] qlist_free_all+0x5f/0xb0 [ 127.718077][ T3280] kasan_quarantine_reduce+0x14a/0x160 [ 127.723815][ T3280] __kasan_slab_alloc+0x2f/0xf0 [ 127.728773][ T3280] slab_post_alloc_hook+0x5d/0x2f0 [ 127.733873][ T3280] kmem_cache_alloc+0x165/0x2e0 [ 127.738759][ T3280] sock_alloc_inode+0x1b/0xb0 [ 127.743574][ T3280] new_inode_pseudo+0x62/0x210 [ 127.748447][ T3280] __sock_create+0x12c/0x770 [ 127.753032][ T3280] [ 127.755392][ T3280] Memory state around the buggy address: [ 127.761240][ T3280] ffff88810b74ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.769682][ T3280] ffff88810b74ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.777841][ T3280] >ffff88810b74ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.786127][ T3280] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.792414][ T3280] ffff88810b74ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.801397][ T3280] ffff88810b74ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.809758][ T3280] ================================================================== [ 127.818335][ T3280] Disabling lock debugging due to kernel taint [ 127.826947][ T3280] general protection fault, probably for non-canonical address 0xdffffc0000000213: 0000 [#1] PREEMPT SMP KASAN [ 127.838916][ T3280] KASAN: probably user-memory-access in range [0x0000000000001098-0x000000000000109f] [ 127.848727][ T3280] CPU: 0 PID: 3280 Comm: syz.6.721 Tainted: G B syzkaller #0 [ 127.856695][ T3284] netlink: 200 bytes leftover after parsing attributes in process `syz.8.722'. [ 127.858531][ T3280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 127.878170][ T3280] RIP: 0010:steam_send_report+0x66/0x310 [ 127.883987][ T3280] Code: 80 3c 18 00 74 12 4c 89 f7 e8 c6 34 3f fe 48 ba 00 00 00 00 00 fc ff df 4d 8b 26 49 8d 9c 24 98 10 00 00 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 9c 34 3f fe 48 ba 00 00 00 00 00 fc [ 127.903765][ T3280] RSP: 0018:ffffc90000b87668 EFLAGS: 00010202 [ 127.910005][ T3280] RAX: 0000000000000213 RBX: 0000000000001098 RCX: 0000000000000282 [ 127.918472][ T3280] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff88810b74ac30 [ 127.926925][ T3280] RBP: ffffc90000b876b0 R08: dffffc0000000000 R09: fffff52000170ec9 [ 127.935266][ T3280] R10: fffff52000170ec9 R11: 1ffff92000170ec8 R12: 0000000000000000 [ 127.943529][ T3280] R13: 1ffff92000170ed8 R14: ffff88810b74ac30 R15: ffffc90000b876e0 [ 127.951815][ T3280] FS: 00007efd533c56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 127.960849][ T3280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.967509][ T3280] CR2: 000000110c2f1829 CR3: 000000011d52d000 CR4: 00000000003506b0 [ 127.975479][ T3280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.983990][ T3280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.992280][ T3280] Call Trace: [ 127.995565][ T3280] steam_input_open+0xde/0x160 [ 128.000399][ T3280] ? steam_input_register+0xa70/0xa70 [ 128.007424][ T3280] ? __kasan_check_write+0x14/0x20 [ 128.013262][ T3280] ? mutex_lock_interruptible+0x8c/0xe0 [ 128.018964][ T3280] input_open_device+0x14c/0x2a0 [ 128.025040][ T3280] evdev_open+0x4d2/0x5e0 [ 128.029648][ T3280] chrdev_open+0x597/0x670 [ 128.034151][ T3280] ? cd_forget+0x170/0x170 [ 128.038559][ T3280] ? cd_forget+0x170/0x170 [ 128.042967][ T3280] do_dentry_open+0x793/0x1090 [ 128.047893][ T3280] vfs_open+0x73/0x80 [ 128.051868][ T3280] path_openat+0x27ad/0x3160 [ 128.056901][ T3280] ? __kasan_slab_alloc+0xcf/0xf0 [ 128.061913][ T3280] ? kmem_cache_alloc+0x165/0x2e0 [ 128.066924][ T3280] ? getname+0x19/0x20 [ 128.070994][ T3280] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 128.077114][ T3280] ? do_filp_open+0x3e0/0x3e0 [ 128.081871][ T3280] ? expand_files+0xde/0x8e0 [ 128.086556][ T3280] do_filp_open+0x1b3/0x3e0 [ 128.091136][ T3280] ? vfs_tmpfile+0x2c0/0x2c0 [ 128.095815][ T3280] ? get_unused_fd_flags+0x92/0xa0 [ 128.101113][ T3280] do_sys_openat2+0x14c/0x6d0 [ 128.105973][ T3280] ? do_sys_open+0xe0/0xe0 [ 128.110474][ T3280] ? __kasan_check_write+0x14/0x20 [ 128.115837][ T3280] ? switch_fpu_return+0x197/0x340 [ 128.120947][ T3280] ? fpu__clear_all+0x20/0x20 [ 128.125702][ T3280] ? ____fput+0x15/0x20 [ 128.129942][ T3280] __x64_sys_openat+0x136/0x160 [ 128.134807][ T3280] do_syscall_64+0x31/0x40 [ 128.139302][ T3280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 128.145301][ T3280] RIP: 0033:0x7efd5495b590 [ 128.149731][ T3280] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 128.170124][ T3280] RSP: 002b:00007efd533c4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 128.178628][ T3280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efd5495b590 [ 128.186894][ T3280] RDX: 0000000000000000 RSI: 00007efd533c4c10 RDI: 00000000ffffff9c [ 128.195046][ T3280] RBP: 00007efd533c4c10 R08: 0000000000000000 R09: 0000000000000000 [ 128.203017][ T3280] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 128.211452][ T3280] R13: 00007efd54ba4038 R14: 00007efd54ba3fa0 R15: 00007ffe078c6318 [ 128.219779][ T3280] Modules linked in: [ 128.224849][ T1910] usb 1-1: device descriptor read/64, error -71 [ 128.235453][ T3280] ---[ end trace 6a76737d34250c69 ]--- [ 128.240967][ T3280] RIP: 0010:steam_send_report+0x66/0x310 [ 128.246739][ T3280] Code: 80 3c 18 00 74 12 4c 89 f7 e8 c6 34 3f fe 48 ba 00 00 00 00 00 fc ff df 4d 8b 26 49 8d 9c 24 98 10 00 00 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 9c 34 3f fe 48 ba 00 00 00 00 00 fc [ 128.347523][ T1910] usb usb1-port1: attempt power cycle [ 128.374148][ T3280] RSP: 0018:ffffc90000b87668 EFLAGS: 00010202 [ 128.380931][ T3280] RAX: 0000000000000213 RBX: 0000000000001098 RCX: 0000000000000282 [ 128.389134][ T3280] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff88810b74ac30 [ 128.397398][ T3280] RBP: ffffc90000b876b0 R08: dffffc0000000000 R09: fffff52000170ec9 [ 128.405814][ T3280] R10: fffff52000170ec9 R11: 1ffff92000170ec8 R12: 0000000000000000 [ 128.414495][ T3280] R13: 1ffff92000170ed8 R14: ffff88810b74ac30 R15: ffffc90000b876e0 [ 128.426002][ T3280] FS: 00007efd533c56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 128.435246][ T3280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.442560][ T3280] CR2: ffffffffd88f0000 CR3: 000000011d52d000 CR4: 00000000003506b0 [ 128.451614][ T3280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.460412][ T3280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.468607][ T3280] Kernel panic - not syncing: Fatal exception [ 128.474742][ T3280] Kernel Offset: disabled [ 128.479166][ T3280] Rebooting in 86400 seconds..