last executing test programs: 3m56.333417895s ago: executing program 0 (id=13): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x58ca02a0, 0x0) 3m55.314836901s ago: executing program 0 (id=18): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x58ca02a0, 0x0) 3m54.453566054s ago: executing program 0 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000008b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="00042abd7000fbdbdf251000000005002e0000000000050030000000000008000300", @ANYRES32, @ANYBLOB="05002e008100000008000600", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x20000040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f1998", 0x3}, {&(0x7f00000001c0)='d', 0x3000}], 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', r6, 0xee01) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010001000000000002000100", @ANYRES32=0x0, @ANYBLOB="040003000000000008000300", @ANYRES32=r7, @ANYBLOB="00060000000000000300000000000000"], 0x34, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1) fadvise64(r8, 0x8, 0x1, 0x0) 3m52.717024032s ago: executing program 0 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000020101020000000000000000000100000800154000000001080008"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000001300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000020}, 0x2000c804) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=r5, @ANYBLOB="00010000000000000009000000000000fa75e5f300000001000381000000000000"], 0x44}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000015c0)='./file1\x00', 0x2201000, 0x0, 0x0, 0x0, &(0x7f00000015c0)) r6 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffffffffffd9, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[], 0x1c}}, 0x20000014) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) tkill(r8, 0x2e) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000024c0), 0x0) pselect6(0x40, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x300, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000100)={0x8, 0xfffffffffffffff8, 0x0, 0x4}, 0x0, 0x0) ptrace$peeksig(0x4209, r8, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0) r9 = getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001540)={0x0}, &(0x7f0000001580)=0xc) r11 = getpgid(0x0) r12 = syz_clone(0x2000100, &(0x7f0000001880)="43aa9eb594cbc0deb1e683f133477eb44f36db7d9e8cd0bd16d1cc487d46562643f32ecf4c9b72cc508b67b7d09e349163377d53724fe142189610295d4998e5067390aaa35422eb46e38f55c908bb8446aefdab2912106024da713ba5a6d8349d95a002349e938c6e8755427d4f9d62fd60f8766455213395d92360de60f6de0f66dadba444b4", 0x87, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)="c20e074dd9ab7ae648a0cb65dc70dd39aaef885e41f01687f973dc4c1cb9c0962d54765d1f8366df55e5bd51f661c5a73653cc284d7d74ecc85acdee7e8470cb66df0f1a8abce36d9240bc8d8e222c186bcc2f797a0c0842fa5e94e66832f1d498475eb57097a9ca74c089a19a649be8ce83d2c85e485d3c6db713d5c73366a4181bb8c4c55b6e879a6180b083cfe7c796e55ead93a3f3590088cbad2e063459a44b") r13 = getpgid(0xffffffffffffffff) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x31a8eb60}}) syz_clone3(&(0x7f0000001780)={0x2000a2400, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400), {0x34}, &(0x7f0000001440)=""/74, 0x4a, &(0x7f00000014c0)=""/85, &(0x7f0000001740)=[r8, r9, 0x0, r10, 0x0, r11, r12, r13], 0x8, {r6}}, 0x58) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 3m50.365186078s ago: executing program 0 (id=34): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) ptrace$peeksig(0x4209, r2, &(0x7f00000005c0)={0x4, 0x1, 0x2}, &(0x7f0000004380)=[{}, {}]) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x3}}}}}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000000)=0xb7) ioctl$USBDEVFS_RESET(r3, 0x5514) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @private2}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 3m49.925354746s ago: executing program 0 (id=35): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3e9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000001100)=0x4, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) write$UHID_INPUT(r1, &(0x7f0000002800)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fchdir(r8) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x38}}, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x26, r6}, 0x10) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) 3m49.890322226s ago: executing program 32 (id=35): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3e9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000001100)=0x4, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) write$UHID_INPUT(r1, &(0x7f0000002800)={0x8, {"806124688836d06c9f8a3cf3bdcea34af3e96a9d68ced6d08a362f10d6374a97afbb1209f004b097b6fb585d410cd72c06aba8c532527a841137efc9c5b59f3b72e051fdd97114ac34607780847a605a529a6d65816ebd38ff245413539442e6200918ed88eb8f2ecce46ebc95274873306d792b5c0028d912c4b52b45748b26a605677b823f292318cae1214983fad9dd5519af7ad851cb40275d2ac351e154d6569d1696c0ef3e7264ef1f18aff3d9c0a63576e816b2cce5bc4a872d3ff1f9153ad93b380dbde78ba0afdbdd5d2b1de43cbbf15395a1a3eb11b6ead0662939fc504a76cf0bfb74e14697f056bf3d3ea5e79f7398e6b82297c33ed33881aaaa1d7ceba5ee77c27d871f442292fffb7dd4a3a55e609d8a13509ea384738040825321bc01aa05e9e5ec2b41cf0699502b77429db146f002e393231ceb19c8061077517f874273da051f95678ba8cd4b381b9749534a30e0bb04d9e851577b047bdd0bbb4b4663f75df630e1ba68ae6c52e272c5cfb0e3baebe910bd54d5931f5cd9f77dff66e9e96e5542b0ac656d5e99508548f1dd1c1377c4e718801d498b4fdf86f72eb9b5d573c37a0ce641ff943de9f11bcefc248246efd71fd64847bc8f40466a1909ec57707de9776e3c7499ea97b8a0221e4a7ef29cae1dc3b98cf3d3c9c6b3a3589ccad3156a1f12c93bce2ca98c5520d131d0186198de8dfeffefadec42b52cf06900d1665325d56729777b32a37ace8c5ff220609bf7b9ba615fe3be6e27505203cb108a664a4fc63699e90fa45f6265cf7c0032f2b31fe4cde75f53399f2c2fe99aed9c3af1960d27aa00ab861e6d0ec57227b297aeb2da7707cc9a4000d28a1a9c804641cca61ffbc6f76547a9241a1d3481932540b7f1b2451b0df57bb6d4617b70e6416dff60acc0260782bcb051e16efba5440b766104a9d179a1832263f1c847d73c679dfb7da3ddea4ceb799c76eed597178e5f7a83e6b54701dea3b98c534e2b5d93b4fd90bbedfdb971c61a31c56a353315bde3c79a3ff0fe342362486d96bc7ecf6646b466d129e2752e7ca9680bfa7395e364ab8fa58247a3ebe1c170437d51b7f63df2d9b05322b89e42a235e68eb1db531458238cb50bdfb2db4a477ec01077d417e67e441f7a5f7ae5f4a7b62141511ab6ef6f963a5a1b2f6e60435e46c9e30ade220c8c47f3ad3712e80c32b1db0d2917b8d2c87c962c0ce4d143f947f7b941b2d6f5dc703f9e606f152eed1ee9c53f26607e191821495429030220add5f5465142ddbd5eaaa7c2a6d6440e94022d87c767bc37778709fe232ce78e900dd0b444ad3dc469c2f5ce5243adcd20c08dbf19fff881e9a69832dd93d4e40578d1f60de7d5c8270dd18f8773773c5fe9b168481cec94e57ab8d8b003a01bade6e07a2b4260eac538f0123f75bf327ed5ffecafd104455720112fe4521d2b850659d6e2f8e978969d159f1063085f1a9c27ff3dfa8219f6bd3bc28a9a13b3cf061f17c7ae43ba45562efefd593de32cded331610bba480bd31db817b0c7bc2141541a55851c18238f7aec613f79a5f62457e109cecff9cffc1f9da113ba7386d7b174538f33046bf764b96cd7f1a3953eb174a212b9b44a978ff0633b25b95468388b75c04a8dbe7884ae23a503341260f4d91439a231f6fdd6d6ab41c4e14885983aaf726768be95f518c4955499253fbfaa2c4b7ad705699580e8efc4f30eed66adbbdff75dc992cab24f1115680a4630c3a95303e2bda3c3a5f102e45e7ecde812140842f416a12a0ab91efe455fb85c427fd413d98c495a530308bd976fe572fa6953afee924399ada5d227b4431466d35ac8ae307a7541ce2b63b233bdae512490f8e780d2678455f4500548e6e4c303df61ee33b9797990466af0fa62fb4419e6c7dde32a81019a6280bbc12fb724b8c6e42a9f60c67b5baed182f6f6ad1b94d4e27e221b879a6240d7f94824612ac6cd771be9104baa4003b355b2b30c13c95a2157d92faa1275e50bf246faa583ee7be55784e7d9a8f20f67034afef56bd3fb21c5e924a335e8bfb87376bd55afb0f2813ae4feeba2d9e9078e9c90de8172802227ea16a3c9059517dce3dcd42c8d0d39f90f7f12e6f3b65231c33dff8c82058610618d64656a7c36117860ab54b079d140ba7b20a04d36a0ac8f522f6da0efbd997c9c8217ad96b1d5de57fda48cfa62d598942b7677417ab72c2d150a73ba3090d53e4b05c942a3a0111d6f1699407d8dcdfb8b403559946bb22ec65fef45404cb46ca98bb806059d6ecf62e7f4eaea0d34043cb0e5ec80ab41c8898d06b0af5dc13d75668cbfb6319c921ead598e57fc74e0574a25fc538ac84f4478f2741032613f3e49a79a40978190873e74d5156962ac4d632a26acc813884ec0d87498fe7a1462c60931890cf96f55d774a1cb1a95e64441d7fc792bf94d6eca023f2586a6db63a40fb1dbab23da415323843ad67281a6942d40bbd0304b155fa24e57c7b78803c10a98ba87442431d9a1bba7b8075f633b11ab40185afdf9e50422e03afe50703965e38b39d2cf12da9aec69949ee53202009c5ba4e4cbbeaa606bf1c09e2b5fdec68857e2c2725ed8b3c6bd134e7802f0f7cc27011ede06822ba18371a46e2595f95357d9ca6b8b08dfc3581ad8fec7fc8fc1c49c0c54425c51489ad9a0789ee956b81334ee552e5ce8cf5fe0d8367e4491ef71eaef4ae3423d5176d7cedc65ac3e75019b70ad124758536344ecdbb8cf8f128b3afa7dd5a0243cb2f894e4aee7c6aae26ef7caac0786bd9e375e4090be74dbb47f03a78aeaac5720ee361c80a681aef5c1505a7834977a5b0f96f186a4a7c3068e5f30ee0aae44db13051d941c79383201cbd6cf04db87a5dcaf9130f6d1719c04863a8f05d4c28190ddab954cfac91fb6d5b0acaad8855dc439e9f24a226c7127cab150855abc1354ab42af379718793e81b8f84bb79965013fb112529419ba1a1fc2ffe0dd3ad71fa0b3de6c6c2dde9f62c932b6fbfde13decc40f73cc9900e72cfad82bf89c5dd5b75b1574934196a2f309f9ce57b41d336ecbee152bd07040620360a2171860351e233c4887359082075f617d83badf43d3591c9a05d2e1b4ca370d028d98a017b0956671d694b0fa095c65c98b0f4ae7fdd09594d3465524368158b3b8351b5f74d3a61c7d2a0d50122154e379045494ce8d67a6a3d538be1094d36aa9a7acbc4ed53a2d3ee85b881ee66f63dfc3ad3ec05281be422500468a1996a77873851ff111573a285a7d9573dc1204a69fdd167721ec6c4973f51904437aafeafe0c03a09c8e02fbfe1895020b047309959386d652d6dd7852e8a98a96179a990f611d8943721ceb4ea0fe3e519ba19b85f3de7e04eeef18ad45389d5caf37d9dc37e08d5dfd745657d3d3b63fd473186130fcbbe95d1611eee67a6eb2b4593a4874bb5ecda9b59d83b232b3c0dc1469d52baeae20143314ae36ae600de18d1f062b83b2f9ef16ee5dacac1f553fecc5e5b279157892f6329a31bc4e4cb9b61225e8ea5f9bbaec4ce67b447a65dd40821715f396f317380cef15fc9bf5639135f0dc2271343aa61ca470a96c23dc2bbe0cec999707a5ca40c9225506f387939f92bc41236e3a47692594f81136201d6517abe45f81d0cb16dcda813cfec6be5bc78d1433f7c76e1a3e3545747c78112a460da3f4264136c5028c77c6f016b2b8e5a899a36a6e5015aa54b380599bf3223eec10aeba39448e87532639cd5670641c16d0891350e9b838641ae94a0687bc36a170ca80a720e1c87e9d8406c42f2f2cb6dc3e6a20f52f8a2d673266fd6cf39f49b36d711f3ece589dd2f4b3a0ba4f41f4cb618c8d8160f24e987893c4dd8b00441848c26dbbafef44d9a6f881388823bb69d42bec2638c93d24c6481a106a2f5857b54eb0e6bdbd27dd48da07f559e34c3417d23c9e6d9c711c5cfd73e74c1534af7c8ecf3f79fd593be1792569c35e249c2ffe787b5ff0c32cb16bbd12a3e979b912b9020d8ebf49ca7969ead853807620b7069e4ef6232deca291e240c3af5c5ca29a9e6b4353fd46da47e622b9d7035b792f547f1e208bab5e3553f675662368ec2529b17616f1dfcd17001367a85ddd2206f5629e0c1dc7024bd2fd0f42328df1767f995cad51685e64f9f186c93a410d5982a31ff95e80a9897acec4c2b28c2e154799481734b7fe4a00977b54bdd3f7df8d0b8c6e56dc238f543c3f421f72cf507ba62ea62bebf528ca9db9c2e1d1764636c31283c3fa197b6b999ab91f76523242fe151e43abd67aa15458dfebb7245e034e696fefda9e25ef71ca8491fa552b05504da44ad22a3e8a92ee7898e7a86ca4be9c25a978902065eb4f76d73914c2f5aa1590ad12786a22cf388cd3d954cca54ff40903c33057aa6df069730d13cf3eaa3d0c20c9e2062318309fd2cd91dc40ba0fb4fd6969b673a42fa5709b621efa95494076919ee5c9f38832a847d7266c92d60a0f0215ee34652a128cbd5ef2d10b3e798d5ac5c90a2dc49d566585b9e49ad892f3c5e4d7762437936c2f684e8f48a6ab712471bf3b33b36d5b56f69c655d439dcbb410993d22d667646b8e31241b92df958faa7affb9585612a985203933de92c11435fcb087d45a33ac511e66188c91204701ddaa9ac550955ee07327718942857611d4e694f4a2935828449cd1a60742e38d3fdf3eb2be50f386e3ac66439b3dc366ee1b15933291e0a9152753aee1ff50701158ed0f0adfab6501e82d7352b5735a937b8cff91e3892705b2620c1be64c9e384c03503c9d8bdf4f6eac46af287cc655ed6f2d644e4f5b611bb9b768efdee28f20370253429f9adb9959860d6d27fc5cf86cdc01ebba00da33fa511fd4896c00c788e6a13244c3fc41c82f6b652feba809cddd20faf800232427eed6d8cd0dcaf92ffb3befe55fbdcead693157d05ac5b5b199d7d5477b1f4ddb74347c99cc11ada4ca344487718393c328afa698db7c770ffb8be4032005ba96e130fa1f792fed36510e9c4105d4c28611ea12c9d07cac6e5d78dcc373280c7089bdf984c1126b62e9b1768a38b6502940fde36673e27b1f80d23120440289db0c6e8632eb318cd5d874040726e0d93ad771dc18cbdcabf2a62f8132dda7fffe4cb7fd8beefce8d46cea4808e82b541bd2fcf684718da91688e237f3b6e5a0bb51918253bb51e7dbe7c54bf7bb001fb8df61e17fff487a6fadda8d57619085aee93320e6921e2b30f9b0da3f86a52a280455e305e1166db7f15aae461402a77ed4503547350ec0396cb0ee8bd440de34dbec3f4284816e28d56bd65104595318eedfc2f5b523b83ee3411ead6ee8b224e5833792870077d8b757f1a37a438fd13cb50a6c61e5aa3bad52f069bd04a09328d5f6def7ef5325c9be3e0590941d6832830f83890caf5fdbb9ced260d985500d54720a1dfe3542ca4e1d04bb5cd2e209d58d8ee0739cd476927cb7417d36686dcd83bc2e9bb9602f0c2056268df866cbf7b9ddf6767770433c8d61a605198841d12d0f60d591dc76ff43714d85fcfa2214e084c451cb5cd5d8d5bdd6634be3568e55e841d6677a0e78a6f40ce354ce9adeb2519158358a7a8d85f2594abdf9019ea77b790eab2bc1dc39024539083644eaa2813d2d1abef48fe58e9682afee2efdcdfb9c227dee9eba004aecf0fa969dcaca22d1a4b8717c180a712c9db2d9255c07bf52ad909540cffb1f87a2e30343ba0da3924f895d7ae99bb5a0bb0cbe3da1e4f5146bb2885ca74bf08d", 0x1000}}, 0x1006) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fchdir(r8) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x38}}, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x26, r6}, 0x10) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) 3m11.671671607s ago: executing program 5 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x202, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="180000005a00010000000000000000000000ed75c464a798"], 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb08001e006907000008000700ac1e010108000b00ffffffff0800", @ANYRES8=r1], 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0xa, 0xb06}, {0x10, 0x2}, {0x1, 0x1}, {0x10, 0x1}]}]}, {0x0, [0x0, 0x5f, 0x30, 0x1e]}}, &(0x7f0000000440)=""/223, 0x4a, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)='0', 0x1}], 0x1, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x12) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r5}, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d72617720686173683d726d643235360000000000000000000000000000000000006fdb00"/77], 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r7 = dup2(r6, r6) dup(r7) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0xf9ef, 0x0, @private1, @remote, 0x7800, 0x8000, 0x9, 0x7}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x5, '\x00', r9, r7, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ftruncate(r8, 0x200004) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340)={r5, 0xd6, 0xef}, &(0x7f00000003c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d0100706f6c79313330352d6e656f6e00000000000000000000eb00"/79], &(0x7f0000000580)="cf3eed141fba838666f0512da9557c18a93ea2a3346c2943a70b04270667738eb1bfee4fc8bb908771debf2a4e55244267b78a3201d0e561fab9096935b2337d4b1bb62b11367c351a3dcac154ce000342d59715fa8192e046e9eff8467ccade81c37ad503413f37c32b250b1bfc86fe57c17216e8b2f7fdedadd898a5985fe64d60fc1edf4f713fbfafdba0a4b7e2cd727a4103e6806d7c64f504a701e43c7b2f5088c0475855119f53a9bd14388577383a779f3c5f07dbeabfd703d6e32a226c1aa7c6500e552f440285d4526fed276365a2dee673", &(0x7f0000000680)=""/239) 3m11.536558599s ago: executing program 5 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000002000000000000000000000000000000000000000000001000000000000000000000000000000008900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000031e9cdf9000033f70bfe6193ea79caf8fab703825ec412ff80934f8127ac60cce10b8813afb412fbda055ce43b1586d94f4757f5d7ac6e551c2d1b3113579b59d2cfe813bbda4a0b7d45ed9c8cd5f449d56f38392477bda9751a1f00a46df152"], 0xfc}}, 0x4004014) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x0, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0)=0x3, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) getsockopt$sock_int(r3, 0x1, 0x13, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) syz_clone(0x0, 0x0, 0x21a9964e16e9c816, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3m10.471283736s ago: executing program 5 (id=172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_connect(0x5, 0x2d, &(0x7f0000002bc0)={{0x12, 0x1, 0x200, 0x7c, 0xca, 0x85, 0x10, 0x46d, 0x8b2, 0xd105, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x4, 0x0, 0x80, 0xa, [{{0x9, 0x4, 0x2e, 0x3e, 0x0, 0xab, 0x2f, 0x4d}}, {{0x9, 0x4, 0x24, 0x3, 0x0, 0x14, 0xfe, 0x9e, 0x9}}]}}]}}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x10000000}, 0x18) dup2(r0, r2) 3m8.510264476s ago: executing program 5 (id=185): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x2081413, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001800)=""/88, 0x58}, {&(0x7f0000001880)=""/165, 0xa5}, {&(0x7f0000001940)=""/59, 0x3b}, {&(0x7f0000002c80)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/210, 0xd2}], 0x7}, 0x1cea1f78}], 0x2, 0x40000002, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8001}], 0x5, 0x2000, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x40, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0xc8, 0x1, 0x8, 0x4, {{0x8, 0x4, 0x2, 0x5, 0x20, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@rr={0x7, 0xb, 0x90, [@multicast1, @loopback]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0x3, [@volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @func={0xd, 0x0, 0x0, 0xc, 0x2}, @struct={0xa, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x10, 0x0, 0xfffffff7}]}, @datasec={0xa, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x80, 0x380000}, {0x3, 0x3, 0x6}], "b167"}, @volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000500)=""/81, 0x7f, 0x51, 0x1, 0x2, 0x0, @void, @value}, 0x28) r4 = syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000800000000000000000000009500000000000000a807040027000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000852000000500000085950800f0ffffff1801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d00000085000000060000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x10000, 0x4d, &(0x7f0000000780)=""/77, 0x41100, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0xfffffff7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r1, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = open_tree(r0, &(0x7f00000009c0)='./bus\x00', 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0x9, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x1, 0xd, 0x9, 0x6, 0x10, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x8, 0x5, 0x4, 0x100, 0xfffffffffffffffc}, @tail_call], &(0x7f0000000000)='GPL\x00', 0x9, 0x3e, &(0x7f0000000140)=""/62, 0x40f00, 0x10, '\x00', r2, @sk_reuseport, r3, 0x8, &(0x7f00000005c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x4, 0x1, 0x6}, 0x10, r4, r5, 0x3, &(0x7f0000000a00)=[r6, r7], &(0x7f0000000a40)=[{0x1, 0x3, 0x1, 0x7}, {0x4, 0x3, 0xd, 0x8}, {0x1, 0x5, 0x10, 0x8}], 0x10, 0x7ff, @void, @value}, 0x94) 3m8.080942573s ago: executing program 5 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001}) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x1000, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x700001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 3m7.899095566s ago: executing program 5 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001}) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x1000, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x700001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 3m7.878402816s ago: executing program 33 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001}) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x1000, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x700001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 3m7.852836717s ago: executing program 3 (id=194): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x1200081, &(0x7f00000003c0)=ANY=[], 0xff, 0x19c, &(0x7f0000000200)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000004800010027bd7000ffdbdf250a008000", @ANYRES32, @ANYBLOB="0000000014000100fe88000000f6ffffffffffffff000001080002"], 0x40}}, 0x0) getdents64(r0, &(0x7f0000000480)=""/170, 0xaa) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ftruncate(0xffffffffffffffff, 0x0) 3m7.341517635s ago: executing program 3 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2014050, 0x0) r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1}) write$P9_RREADLINK(r2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742bbd7000fbdbdf2515000000400001"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000200509040000010300000009210500ff0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000d1000000010c40f02904b73059200000008000000e1b21c7c7145db00cbd94082dc256befff6264d1336b8f24cb4a5adb556cc839993dcd5b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m5.034072141s ago: executing program 3 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) tkill(r2, 0x2a) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m5.033338731s ago: executing program 3 (id=205): r0 = socket$inet6(0xa, 0xa, 0xd) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xd0c5}, 0x200000c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff010}, {0x6}]}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40}]) r7 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r7, &(0x7f0000000080), 0x208e24b) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) io_submit(r6, 0x5, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000200)="83cf3db2cc40acb28d4c630a916c528ba730f975dcae3972297b58f234fb6e0e75e6d93a7748db8776b9a7b627a0362509bce26873d687b1c3f825fbe35e9f5bd2641702fada8c9f5aaa1751a2cf32295394e9952dbf9532d0a6fc4494b575767e9a63bae89762c42f3ef85680d9b68b85746e91c592eabe1a05", 0x7a, 0x9, 0x0, 0x1, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000280)="a82f50f9fdd528ed75a65c580b746f28661563919c33021a8f3a83b0fd88f075fca33ecbbc4213b4740121d5ccb70d8981dfebaeae4025ac097a595172a97a7594cf0e8dd4c4b1372e2b51f44c46869ea2dccfe2945b7c436609c05c62dd9ffe1b889a482a562b7b4dfd90a6840f8d1f8fc7225d35a2d71f1a5ee910fca2108ab540543f51acc18af063f2336d6f6453d72c8ce3fffb6119833831ebf3c08678b0585d229d6ede60a526a6757b7b80e19d21cbe9a28ae61830c2d6f3071770da9177e83dfc58b737f263b34f76e58780456c1cf863eadad7d06c3a5292426bca70cdae018165ea3636f588d97b226fe14322", 0xf2, 0x1000, 0x0, 0x1, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000380)="2f8f071889253340c7822ef70a468c162b8f5299f833fbb20c0cbf14624e0bf954f90209f4122ac156426d633b58a6fca91a1c92d6d5a172489cd05f2a3a18e00d07725408d3ea7f9b80135c72ac31579d90806f7e5f14d14bd74ff3755348d9", 0x60, 0x76e, 0x0, 0x0, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x2, r4, &(0x7f0000000440)="bf1eaf7335c478124a75e157d7edce674e7f0e3fb575b4bfd89f93f2ba85e63fa536b55e8f53852ac8cb6baef39dd03fb9e5321d997cf2e215e591937eef9390d3592ebfd603d0ab9f6d07b125c081b0de69618db07af17b90062ece27bc8777af4353efbf1c01d4d1197d369febe1fa9061f349f9fc15facacde38e95223e34557201d9d474ee241da7bb9ecd8e9da398c1a235", 0x94, 0x9, 0x0, 0x1, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0xfff, r8, &(0x7f0000000b00)="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", 0x1000, 0x2, 0x0, 0x1, r1}]) sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x600, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x26}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xa69a, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@mcast2, @local, [], [], 'pimreg0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 3m4.861329924s ago: executing program 3 (id=206): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) read$FUSE(r0, 0x0, 0x49) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4010) r1 = syz_open_dev$rtc(0x0, 0x0, 0x408000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6(0x10, 0x3, 0x0) read(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000080)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x84, 0x0, 0xffffffffffffff7d) setresuid(0x0, 0x0, 0xee01) syz_io_uring_setup(0x5c6c, &(0x7f00000002c0)={0x0, 0xabd3, 0x1, 0x2, 0x2d9}, &(0x7f0000000340), &(0x7f0000000380)) setreuid(0xee01, 0xee01) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'macvlan0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x4f, "7219de20f38437196ba62dec27ec428f8abbb969cf363c606239ea920ed7f72812537324e1939757f23bc78ac267fb9a4f8bc10cae46f05ddac71e0a68f606806071dec698e8e388ea98cbe1f48469"}}) recvfrom$inet6(r8, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x200000000622c, 0x0) 3m3.85678442s ago: executing program 3 (id=212): io_setup(0x7, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r4, r7, 0x0, 0x7ffff004) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 2m48.809432036s ago: executing program 34 (id=212): io_setup(0x7, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r4, r7, 0x0, 0x7ffff004) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 31.77157135s ago: executing program 6 (id=1062): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 30.55817886s ago: executing program 6 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001900"], 0x4c}}, 0x0) 30.51901562s ago: executing program 6 (id=1070): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 30.50346381s ago: executing program 6 (id=1071): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2008410, &(0x7f0000000880)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45aca9836c319f437199ff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c7000000c5316abd22df0191acf5912afdcc1c061835177068c40f757dd123d2680b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b21009313f60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7245c84268030000000000000008886b313bd01a22d576e414011a4f0a897514329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515e34ac8c454a30dd54a580abcf2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f540b936570450e91c8d55afad76a7b7a000016181a40ff1ec9da9ccc1191c2116322020c66d987e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d68dc32816b0872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5863380a01da382e73ea142b01b4a742fa11c0927ba811dd60903d575e2449d7750ff830000617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4ab22052b9467d0da116ccc1652d861a420f09aaf67d3e915c95f5fcd57ea37fa054bf6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cfe0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639032d482", @ANYRES8], 0x1, 0x5549, &(0x7f0000003d80)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x7, &(0x7f0000000800)={0x6, 0x9}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) fcntl$setlease(r1, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 29.92184801s ago: executing program 6 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7b}, 0xa) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(r0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000000)=0x3) 29.317549459s ago: executing program 6 (id=1078): socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000580)='./file1\x00', 0x205880, &(0x7f0000000340)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@acl}, {@grpquota}, {@nolazytime}, {@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@noblock_validity}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@fowner_lt}, {@permit_directio}]}, 0xfc, 0x583, &(0x7f00000016c0)="$eJzs3V9vU+UfAPDv6f4wNvgxEvKLerWECyFIxzb/4B1eGiWS6D02W1nIOkrWDtkkES7kxhtDTIzRxPgCvPeS+AZ8FSRKQpQseuHNzOnOGWVrt44VNtbPJ+l4np7TPufb83wfnqenTQPoWWPpn0LEqxHxdRJxrGlbf2Qbx9b2W3l8azq9JbG6+vGfSSTZffn+SfbvSFZ5JSJ+/TLiTGFzu7Wl5blSpVJeyOrj9fnr47Wl5bNX50uz5dnytcmpqfNvTU2++87bXYv19KV/vvvo/vvnvzq58u3PD4/fS+JCHMm2NcexC7ebK2Mxlr0mA3Fhw44TXWhsP0n2+gB4Jn1Zng9EOgYci74s64GD74uIWAV6VCL/oUfl84B8bd+ldfBL49F7awugzfH3r703EkONtdHwSvLUyihd7452of20jV/++OFeeovuvQ8BsK3bdyLiXH//5vEvyca/Z3eug302trHD8W91h4cENLmfzn/eaDX/qWZ7DDX+bpz/jLTI3Wexff4XHnahmbbS+d9Qy/nv+kWr0b6sdrQx5xtIrlytlNOx7X8RcSoGDqX1tes5h1u2cX7lQdtx6sn8b7AxB0zbz+eC2XE87D/09GNmSvXSbuPOPboT8VrL+W+yPv9NWpz/9PW41EkDg1tvbp7/to7/+Vr9KeL17PzffmpN9OSKVrL19cnxRn8Yz3vFZn/f/f9v7dpvH//R5xDtZun5H27Z/9fjH02ar9fWdt7Gj0P/lttt2/78t+7/g8knjXLevW6W6vWFiYjB5MPN908+eWxez/dP4z91snX+b9X/00z/tIPY0zy5e+Ju2133uv+n8c/s6PzvvPDgg8+/b9d+Z+f/zUbpVHZPJ+Nfpwe4m9cOAAAAAAAA9ptCRByJpFBcLxcKxeLa5ztOxHChUq3Vz1ypLl6bicZ3ZUdjoJBf6R5p+jzERPZ52Lw+uaE+FRHHI+KbvsONenG6WpnZ6+ABAAAAAAAAAAAAAAAAAABgnxhp8/3/1O99e310wHPX+U9+t/glf+Cltm3+N34JZfiFHAvw4nx2eif//wMHjfyH3iX/oXfJf+hd8h96l/yH3iX/oXfJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqSxcvprfVlce3ptP6zI2lxbnqjbMz5dpccX5xujhdXbhenK1WZyvl4nR1fssnS/6KSrV6fWIyFm+O18u1+nhtafnyfHXxWv3y1fnSbPlyeeBFBQYAAAAAAAAAAAAAAAAAAAAvkdrS8lypUikvKBzwQpKd8W4/c/9+CVAhLeSJvesn3LsxCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+i8AAP//bfs0uQ==") prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00'}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x3, 0x7fff, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000002100010036bd7000fbdbdf2502bc65ff080006000900000008000200e0000002080001000a01010108000209000000010000000000000000bf0b23ac0d886bcef0ccb4de3efe61abeafb74035e7d4935342f2dc33c5255a400173ba8a1561767afb0a0ced811a83cdb7bc9bb3a7e3ca325299baeba26b918964e774959b86585"], 0x3c}}, 0x24008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='btrfs_convert_extent_bit\x00', r4, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='./file1\x00', 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xfdef) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88adb4098ff379e, 0x0) 29.307416629s ago: executing program 35 (id=1078): socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000580)='./file1\x00', 0x205880, &(0x7f0000000340)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@acl}, {@grpquota}, {@nolazytime}, {@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@noblock_validity}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@fowner_lt}, {@permit_directio}]}, 0xfc, 0x583, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00'}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x3, 0x7fff, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000002100010036bd7000fbdbdf2502bc65ff080006000900000008000200e0000002080001000a01010108000209000000010000000000000000bf0b23ac0d886bcef0ccb4de3efe61abeafb74035e7d4935342f2dc33c5255a400173ba8a1561767afb0a0ced811a83cdb7bc9bb3a7e3ca325299baeba26b918964e774959b86585"], 0x3c}}, 0x24008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='btrfs_convert_extent_bit\x00', r4, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='./file1\x00', 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xfdef) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88adb4098ff379e, 0x0) 11.683770316s ago: executing program 1 (id=1143): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x8000000000000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.670719506s ago: executing program 2 (id=1144): syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f00000082c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000012400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="850000002700000018250000", @ANYRES32=r0, @ANYBLOB="000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800006e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018270000", @ANYRES32=r0, @ANYBLOB="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"/271], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000008b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f1998", 0x3}, {&(0x7f00000001c0)='d', 0x3000}], 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) 11.584624768s ago: executing program 8 (id=1079): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 9.916923074s ago: executing program 1 (id=1145): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) getpgrp(0x0) r1 = socket(0x200000000000011, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_truncate_partial_nodes\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setresuid(0xee00, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000043e2327e8109c94bac130ea5523f26cb8d8b23aa48d4f296855beeb68c0a3d81283969aa0eb97e605aa3a08f34da1dc62e6e89c56bf0523f28f8faa0ad3e2c01b18aec6e28ba016592b623c9a10f2682beded0aa7830d712b6a05d00db13", @ANYRES16=r8, @ANYRES64=0x0], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(r5) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c10"], 0x0, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', 0x0) 9.904850314s ago: executing program 2 (id=1146): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) syz_clone3(&(0x7f00000005c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200), {0x34}, &(0x7f00000004c0)=""/215, 0xd7, &(0x7f0000000240)=""/100, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 9.904191324s ago: executing program 7 (id=1147): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc00d219bd9795087493244f0000000000008000f0fffeffe809005300fff5dd00000010000100090c", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x3) r4 = socket(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000023c0), 0x6, 0x14480) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d000000000000", 0x1b) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 9.369424753s ago: executing program 8 (id=1079): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 7.617417551s ago: executing program 1 (id=1149): r0 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0xfffffffffffffddd, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xfc, 0x0, 0x0, [0x1]}, @end, @noop, @end, @timestamp_addr={0x44, 0x4, 0xa4, 0x1, 0x7}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="c60a00000000000069112e0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x2, 0x8000, 0x4}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x0, 0x20, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x1, 0x24, 0xfffd, 0x0, 0xce, 0x6, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x10, 0x85, 0x0, 0xc, [0x4, 0x3, 0x7]}]}}}}}) syz_clone(0x640c7000, 0x0, 0x20, 0x0, 0x0, 0x0) 7.61653437s ago: executing program 2 (id=1150): socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000580)='./file1\x00', 0x205880, &(0x7f0000000340)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@acl}, {@grpquota}, {@nolazytime}, {@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@noblock_validity}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@fowner_lt}, {@permit_directio}]}, 0xfc, 0x583, &(0x7f00000016c0)="$eJzs3V9vU+UfAPDv6f4wNvgxEvKLerWECyFIxzb/4B1eGiWS6D02W1nIOkrWDtkkES7kxhtDTIzRxPgCvPeS+AZ8FSRKQpQseuHNzOnOGWVrt44VNtbPJ+l4np7TPufb83wfnqenTQPoWWPpn0LEqxHxdRJxrGlbf2Qbx9b2W3l8azq9JbG6+vGfSSTZffn+SfbvSFZ5JSJ+/TLiTGFzu7Wl5blSpVJeyOrj9fnr47Wl5bNX50uz5dnytcmpqfNvTU2++87bXYv19KV/vvvo/vvnvzq58u3PD4/fS+JCHMm2NcexC7ebK2Mxlr0mA3Fhw44TXWhsP0n2+gB4Jn1Zng9EOgYci74s64GD74uIWAV6VCL/oUfl84B8bd+ldfBL49F7awugzfH3r703EkONtdHwSvLUyihd7452of20jV/++OFeeovuvQ8BsK3bdyLiXH//5vEvyca/Z3eug302trHD8W91h4cENLmfzn/eaDX/qWZ7DDX+bpz/jLTI3Wexff4XHnahmbbS+d9Qy/nv+kWr0b6sdrQx5xtIrlytlNOx7X8RcSoGDqX1tes5h1u2cX7lQdtx6sn8b7AxB0zbz+eC2XE87D/09GNmSvXSbuPOPboT8VrL+W+yPv9NWpz/9PW41EkDg1tvbp7/to7/+Vr9KeL17PzffmpN9OSKVrL19cnxRn8Yz3vFZn/f/f9v7dpvH//R5xDtZun5H27Z/9fjH02ar9fWdt7Gj0P/lttt2/78t+7/g8knjXLevW6W6vWFiYjB5MPN908+eWxez/dP4z91snX+b9X/00z/tIPY0zy5e+Ju2133uv+n8c/s6PzvvPDgg8+/b9d+Z+f/zUbpVHZPJ+Nfpwe4m9cOAAAAAAAA9ptCRByJpFBcLxcKxeLa5ztOxHChUq3Vz1ypLl6bicZ3ZUdjoJBf6R5p+jzERPZ52Lw+uaE+FRHHI+KbvsONenG6WpnZ6+ABAAAAAAAAAAAAAAAAAABgnxhp8/3/1O99e310wHPX+U9+t/glf+Cltm3+N34JZfiFHAvw4nx2eif//wMHjfyH3iX/oXfJf+hd8h96l/yH3iX/oXfJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqSxcvprfVlce3ptP6zI2lxbnqjbMz5dpccX5xujhdXbhenK1WZyvl4nR1fssnS/6KSrV6fWIyFm+O18u1+nhtafnyfHXxWv3y1fnSbPlyeeBFBQYAAAAAAAAAAAAAAAAAAAAvkdrS8lypUikvKBzwQpKd8W4/c/9+CVAhLeSJvesn3LsxCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+i8AAP//bfs0uQ==") prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00'}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x3, 0x7fff, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000002100010036bd7000fbdbdf2502bc65ff080006000900000008000200e0000002080001000a01010108000209000000010000000000000000bf0b23ac0d886bcef0ccb4de3efe61abeafb74035e7d4935342f2dc33c5255a400173ba8a1561767afb0a0ced811a83cdb7bc9bb3a7e3ca325299baeba26b918964e774959b86585"], 0x3c}}, 0x24008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='btrfs_convert_extent_bit\x00', r4, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='./file1\x00', 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xfdef) add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88adb4098ff379e, 0x0) 7.61567093s ago: executing program 7 (id=1151): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, 0x0, 0x0, 0x6e45, 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x9) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001340)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="b4967dd3ea9cf59ab81445092a1c95ec0c37941aed7526696f628505fdc15443f6b3d39e018e9d4603") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r6, &(0x7f0000000180)='./file1\x00', r6, &(0x7f00000001c0)='./file3\x00', 0x1400) 7.480905112s ago: executing program 8 (id=1079): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 5.631764861s ago: executing program 1 (id=1153): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000002000000000000000029000000370000006c00000000000000"], 0x40, 0x7ffffff7}}], 0x1, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat(r0, &(0x7f0000004280)='./file0\x00', 0x82400, 0x0) lseek(r2, 0x100, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000100)=0x80001, 0x4) 5.630377531s ago: executing program 2 (id=1154): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x8802) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 12) 5.625852401s ago: executing program 7 (id=1155): syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f00000082c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000012400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="850000002700000018250000", @ANYRES32=r0, @ANYBLOB="000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800006e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018270000", @ANYRES32=r0, @ANYBLOB="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"/271], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000008b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f1998", 0x3}, {&(0x7f00000001c0)='d', 0x3000}], 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) 5.394586115s ago: executing program 1 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x200002, 0x100) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@local, @broadcast, 0xffffffff, 0x0, 'ip6tnl0\x00', 'team0\x00', {}, {0xff}, 0x8, 0x3, 0x10}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @broadcast, 0xff, 0xff, 'veth1_to_hsr\x00', 'vlan0\x00', {}, {}, 0x0, 0x3, 0x28}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@addrtype={{0x30}, {0x6, 0xca, 0x1, 0x1}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0xd}, [0x0, 0xff000000, 0x0, 0xffffff00], @ipv6=@loopback, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1d}, [0xff000000, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x8, 0x10001, 0x8f, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x1, 0x8}, 0x81, 0x602, 0x4e21, 0x4e23, 0x4e21, 0x4e21}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1a}, @empty, 0xffffff00, 0xff000000, 'ipvlan0\x00', 'dummy0\x00', {0xff}, {}, 0xc, 0x1, 0x10}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x98, 0x8], 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x3bc, 0x80000000, 0x5, 0x8, 0x1, 0xfffffffc, 0x40004000]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 5.048953361s ago: executing program 8 (id=1079): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 4.556834448s ago: executing program 7 (id=1158): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c636f6465706167653d3835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c125f8030000000000009dba05feee081e91fc61a0fef5511251"], 0x1, 0x238, &(0x7f0000000500)="$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") truncate(&(0x7f0000000100)='./file0\x00', 0x10001) 2.393506782s ago: executing program 1 (id=1160): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x6, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfff) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x80}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xf, "cf6af75d5cdcf048b19c939556"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000958c834099043f4d2ad201020301090238000100fd20000904270001ff40d300052406000105240009000d240f01"], 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100c000, &(0x7f0000000f00)={[{@nolazytime}, {}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0'}}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x915}}, {@resuid}, {@nodelalloc}, {@acl}, {@noquota}]}, 0xfc, 0x57c, &(0x7f0000000100)="$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") ioctl$int_in(r3, 0x5452, &(0x7f0000000700)=0x8) umount2(&(0x7f0000000000)='./file0\x00', 0xa) writev(r3, &(0x7f0000000280), 0x0) fsopen(&(0x7f0000000040)='ext2\x00', 0x1) 2.392889352s ago: executing program 2 (id=1161): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./bus\x00', 0x2808454, &(0x7f0000001f80)=ANY=[], 0x1, 0x5558, &(0x7f0000002840)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uXUaBgMA/iV9aR//RIW4swIjcHsdgxE4coP3BmCJjlBWYIHOUG6MgBqEbalEtBIiDhHV7yfFiZ3os9328jmVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACm9LXbbT5/fPVpbJxjP06d2QAAAADnHLrdJl2sc/1JaX9Wml6UehMRbUT0fb/KLafcfRHLQcxFidMNnjrpfn34dT4tSx+rcjyOiDfl+P580o8AAAAArtcqYv+wvcvZei7Wc4+Jfykv2rRP31aK10REt/5WKVr7s3hZKVj6fd/E+0rR0gLWbaVgecnt5vy9Za1OhhaDU5nJ7X36ElOtnaZfAABgTsNM4EIWAgAAwBV4N/cAmEeTig/purxnLH/tLy8EHw1qAAAAwH+omXsAAAAAwORS/v8X+//9ZtT+fxHxxf5/AAAAMJm8/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTOnS7zf5he3fp/v0fxjn249SbEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAP9ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt3/eOIooAODv9m4vfwjCGOTCgIJEAQ2xLyEhJRQgi4KPgGQ552C4EEhckMgCuYEKuU6DoEQICWS6fIfUsZQmdClcGAlRgvafs0kMOUVm97B/P2l23m5WO2/2TpGfZwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFS2344XkzLuZoepIq6u3d5ZW8r6rYf6zM2NO7NZy+LO4wb6+q39T36yvVQ/OTlTO/my+WQAAAA4HLpVfR8Rd9PNhaxPpvL6P63uyWr+754u4qqef7ju39pZO1r+02xV///6y73ndweaKsbJHrq8MhrOP5pK7z+a4sR75rF39PI3n//upZt/IMl7689tp/n77Hxz69Y7/Tw80kS2AMCTOFX1ZVD8PPTniYjRcNBmYgAcGr1a4V3V/92pdnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaML2ejxVxZ2ImO3djzNbO2tLe/U3N+7MVu3cjRsb9Wdmj0gjYnllNEwbnMuku3rt+seLo9HwSvPByYhob/Qy+GCMeyL+/Z7y6xntzeKfg85kpNFqkJSfz6Tks59B9d3b/ye39B8SAAAHVlq2rK6/m24uZNc60xF/ff9g/f9qLY4x6/97H567XR+rXv8PGpvh5JtbvfTp3NVr119fubR4cXhx+MkbpwdvDs6cP3v2/Fz2rubnliMZzredJgAAAP9j/bLV6/9k+tH1/+O1OMas/z/7dvBFfazuYa//O709L99f9Gs8IwAAAPKquPDsy3/83tnjjk6/H58vrq5eGRTH3fPTxbHRdJ/QkbLV6//udNtZAQAAAE3YXu88sP5/oRbHmOv/J3544af6M7sRcSzickQMTy1dHl1objoTrYk/VM4H6rc9UwAAANpyrGz19f803/+f7G55SCLitVeKuNrBPk793333qx/rY9X3/59pbooTKZkp3kfez0T0ZtrOCAAAgIPsaNmyYv+3dHPho5+Pv9+3/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaX8HAAD//y3HLzs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x201) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r1, 0x0, 0x0, 0x9000f4) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x156) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0xa000000, 0x3}}]}}, 0xffffffffffffffff, 0x32, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) open(0x0, 0x151a42, 0x0) 2.392654892s ago: executing program 7 (id=1162): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(0x0, 0x10) add_key$keyring(&(0x7f0000000380), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd8fdb, 0x103) 2.390792562s ago: executing program 4 (id=1163): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) (fail_nth: 7) 2.297169664s ago: executing program 4 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffe00}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044850}, 0x24000851) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x7, 0x0, [{0x0, 0x0, 0x4868}, {0x363, 0x0, 0x2}, {0x4c1}, {0x337, 0x0, 0xc00000000}, {0x48b, 0x0, 0x3}, {0x8ef, 0x0, 0x7}, {0xa0f, 0x0, 0x5}]}) r5 = getpid() timer_create(0x4, &(0x7f0000000280)={0x0, 0x16, 0x4, @tid=r5}, &(0x7f00000002c0)=0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xfffff001}}]}, 0x28}}, 0x8091) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0xfffffffffffffffd, 0xc4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) timer_delete(r6) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x13, 0x4, @thr={&(0x7f0000000440)="35145bca06fca26b2376bae971482aa773eb5e9b71ffd16fd33dbd85d571cd21f0e3e855217386de72c51ac12af49a0ce8edc3453526c4490d8a98fdaeaf2ca72616d67986c393d2b85f1b0d389dcde016f54ebcce2579742181f0714ca2ed4e039b7d7a90736bd6e9e1773dd6fd4e683d6d4bc120998455e78cbf083946c273de0d969e9e14a94199eadb56f0f017627e9b4b25d27c1c0b5deedf065a004fb4f150a172dda7", &(0x7f0000000500)="9d4534b8339011a5ddb70c3b701b6b427625f7d2e377ecd7897b0e293559cc99adf4f4e177895da171a37d504371b98854f799155c71140676cce2ddd6c17daad6986c280c11692291605de8937bfbf00ae8aa396db2ea6cfa20f9e68a73a1c99c2eab14e532fb72ab12fbd83db3bc820fec8123019e087fd3b519f502eee85725296920a3e244972dcd7bf819edd557ccc5501fbc285f9ad95f502da44da71d37a6ce9d298d5a30d9a63eecc2"}}, &(0x7f0000000600)=0x0) timer_getoverrun(r8) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000085}, 0x8000) r9 = getpgid(r5) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa631c6fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r11 = syz_open_dev$vcsa(&(0x7f0000002f00), 0x5, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f40)='syscall\x00') sendmsg$netlink(r0, &(0x7f0000002fc0)={&(0x7f0000000740)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0xc, &(0x7f0000002e40)=[{&(0x7f0000000780)={0x2c, 0x26, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r9}]}, 0x2c}, {&(0x7f00000007c0)={0x2474, 0x23, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xbd, 0x26, 0x0, 0x1, [@nested={0x4, 0x126}, @typed={0x8, 0x10c, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x14b, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@local}, @generic="7b57389f7ef1380842e6f29f5648ed1c08841bc5bddf49999af0fe7453f84c0db8ba14604c6617159c4d5f51f24497ff83c882713b22cddbda8c6a1e5e98e4159ede72057a8ac20aafe4c0b1acd018137912436c7678238b9e11407786089a908bc3decc5e942c090972b7b882af8d8be096972e23a71c73096e8f750382a8529cee846a86013dbf4553c4daa4"]}, @generic="3b25391e5f756dadf78c40dfdf54adab0b70dc37fb50dc96c545ce4d669b8f0d21e26f3059875e322dd38fca9bcd1449b1a34a96321b642f9898c2f6a81c66519c0c66079cf703a04f8da718b26812a49ab2c918f44c0c85b86fecdfa2400caff7a5e8d9a1e90985ab64ae87e4d7613e8e4cfcd993101148bd62196d850873712575d6bdfd5961a31afef1224d6c3529686cda16f06738198cce84d1f34ca57c73f13e92b1b0b0536b0cc452372de89dc608a556ede1874189e6082be62ccbd684cbbdb2e6d25aa0fcb6db1558f8180bd8a8857a16db6239919e7eeadb1e287c722c13156c30bd971c398ce3993f2d5845da7d91369185dfda567da30c342e", @nested={0x10a9, 0x28, 0x0, 0x1, [@typed={0xc, 0x11a, 0x0, 0x0, @u64=0x3}, @generic="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", @generic="6d447d79d32d8b39e0de0ac49c7dc040fb9ef9c5f1531259e2811aa40396b815fbb27d7ca16f7ea8cf4083a5ef09fa2bb81d2bc2e1c493f13de079671c2a3830228ffaab144ca2ad0ed51a71be2e77b7c5586f55d48282ee27a11b08d9ba36cdde9120", @nested={0x4, 0x13e}, @generic="4fb0f59f7d029502050792c09404935e25cab127ed2371fda9", @generic="0e9ce5a383e420236d6a3f4aa147e4b18a6bc63272d0d1efb1"]}, @generic="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", @nested={0x1f6, 0xce, 0x0, 0x1, [@typed={0x102, 0x2a, 0x0, 0x0, @binary="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"}, @generic="86b7f82fddd809533e5ccb3f217294553955d7c8f92646e8403c7f83670dbbb7a06b101e0363f5021a763f7e49282d933ebb60f5d8948b8686181728558ca1135301ac8eb8318a042aba3e1359d461ead1b47edd33e66762d45e404cf9e3dd697d17215abbb3a3aeb6e44d71ece2873f355976602ddbc1a8a6ee6cfa41ce142f1c70bc03f23fc2c7ba55ef7cc0be3898a4473e2cd327cf8dd9a8f2fd0780323826166d0c3c5a2e8702b6ed8a2d99d83f2cd3aca66629270ea695c68f242fd6f91e9cc37cb9e93ce1fd9ff6c58e6560692a3222df102718eb6bdd5d6bdd", @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x672e}, @generic="b3b35f20df"]}]}, 0x2474}, {&(0x7f0000002c40)={0x1e4, 0x11, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@nested={0xd5, 0x6, 0x0, 0x1, [@nested={0x4, 0x6f}, @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @generic="958e881e5668270c11c1db3a602eb3b55f5d96b85698762f7072d79224ebbc20df08ecb58375a214fe8a7d4e8730079044bdb7bc0c0f961d13cc45ec9738bf80824153e9f5c7d356f8b624e16a854ede8bea8622fe6a06332462ed40b9e13c80d5523a1a1d5072de1d5f067b30b68f8136e75918b27f0e0e860764a73315d00dd15f84e4538536ff233afddfdec660d61812fd2a62e2e5d41ef65694ee232f8ead797d054053337591d714e1962943e8ba8f51d5e0e7e310e1"]}, @generic="4d099209e5ddcdfb91770f87e8b858b4eeeda8e1c7e5bc93e2fd123c76f71726bbc67c628aa35b6c70b0842b2c69f1a3fa6c5e484c372b0db1878e9f7e8328aaa148a4c8b059a26cc9ae628a5c3cabe2251c7e174634ce780593c8ba0a18383707f4bc29d5d9c92dcc69c6499f8b4b31a4601b87701d90305ab4699b9b51eb2509abbafc3606343c2a5bce2d3ac42cc345069a597b3f8168e7a9f963b3999b1052084529997bd3cbf004d8e0cb73a0499e5534928713002edb5c35816037", @generic="381a35cb0594074e43df7ec4d40fd778b3bfcb7e262299661b93f601d11e8828906e017aeb201a7e786635826816f3bd68566b7a0cc1866c9ca744201df1"]}, 0x1e4}], 0x3, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [r10, r0, r11, r4, r0, r12]}}], 0x28, 0x4000000}, 0x30000080) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000003000)) sendmsg$key(r12, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000003040)={0x2, 0x9, 0x9, 0x3, 0xc, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_ident={0x2, 0xb, 0xc97, 0x0, 0xffffffffffffffff}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xce7}, @in6={0xa, 0x4e22, 0x3, @local, 0x8000}}]}, 0x60}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000003180)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000003280)=0xe8) getgroups(0x2, &(0x7f00000032c0)=[0xee01, 0xee01]) lchown(&(0x7f0000003140)='./file0\x00', r13, r14) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5c044}, 0x20000800) r16 = getuid() keyctl$chown(0x4, 0x0, r16, r15) 2.296846873s ago: executing program 4 (id=1165): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) fallocate(r0, 0x2000000, 0x0, 0x1001f0) r1 = open(0x0, 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 2.276577425s ago: executing program 4 (id=1166): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0xa000000, 0x3}}]}}, 0xffffffffffffffff, 0x32, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) open(0x0, 0x151a42, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xfe, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") socket$can_raw(0x1d, 0x3, 0x1) 2.257308214s ago: executing program 8 (id=1079): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 212.843617ms ago: executing program 2 (id=1167): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./bus\x00', 0x2808454, &(0x7f0000001f80)=ANY=[], 0x1, 0x5558, &(0x7f0000002840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x201) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r1, 0x0, 0x0, 0x9000f4) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x156) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0xa000000, 0x3}}]}}, 0xffffffffffffffff, 0x32, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) open(0x0, 0x151a42, 0x0) 211.973727ms ago: executing program 7 (id=1168): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0xa, 0x0, [{0x8000000, 0x7c, &(0x7f0000000200)=""/124}, {0xeeee8000, 0xd6, &(0x7f0000000280)=""/214}, {0x0, 0xcf, &(0x7f0000000380)=""/207}, {0x1, 0x9b, &(0x7f0000000480)=""/155}, {0x3800, 0x74, &(0x7f0000000540)=""/116}, {0x6000, 0x3e, &(0x7f00000005c0)=""/62}, {0x80a0000, 0x1000, &(0x7f00000015c0)=""/4096}, {0xeeef0000, 0x53, &(0x7f0000000600)=""/83}, {0xd000, 0x5d, &(0x7f0000000680)=""/93}, {0xeeef0000, 0x5d, &(0x7f0000000700)=""/93}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x10010, r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) fcntl$setstatus(r3, 0x4, 0x46800) read$FUSE(r2, &(0x7f00000062c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000000580)=[{}]) 210.874177ms ago: executing program 4 (id=1169): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002080)={0x10, 0x0, r1}, 0x10) chmod(&(0x7f00000020c0)='./file0\x00', 0x1) process_vm_writev(r4, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/129, 0x81}], 0x1, &(0x7f0000002200), 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x500, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0, 0x0}, &(0x7f00000022c0)=0xc) getdents(0xffffffffffffffff, &(0x7f0000002300)=""/177, 0xb1) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000024c0)={0x3, 0x3, 0xcb, &(0x7f00000023c0)=""/203}) write$FUSE_IOCTL(r0, &(0x7f0000002500)={0x20, 0x0, 0x0, {0x5, 0x4, 0x9, 0x9}}, 0x20) r9 = gettid() symlink(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='./file0\x00') r10 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r10, &(0x7f0000002840)={&(0x7f00000025c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002600)="595e446b8c24768de065db9722aa85166722345e29be568f13c15035b1aa61f744649ffd9b3a247129e51f34122af4bfe27064ddb1d20989b71cfa6e38ece83dc12d791b49e888a6ed0612be29be40d2e34e79f606343b9b152f6eedb08c33365d3909cc65c266547ab73c5f62f573d977608e76f9747bba549f6ff9aee6b2d6cdbe0cdd7649ba3f03d813f17cb122f8470eeade57adf5618fc5d4afa6431efa9644a682452cd5841bfb76074718e43fc53dabacdf46caa14fb0", 0xba}, {&(0x7f00000026c0)="4afa999ee1d225966aaf116983df9a0067f2bd364ada36646f7836446177d94a4560195f31670250b9c7bef68b99eb1383cd80e85fee2a53efef61000d43c8cc97ffe470197975ba417f9fee6a77ccd481f5349accb09925c22352deec873f122213574ea3b885589b4717ea089eae5ea30b5d1277822e9f8a615775b117ef23418a6d92e149aaeebdb22d03c3e7375cd147b14da89e2087174f5fedfe4809e6ef12a3604a56e94081307e9fbbf03f10e21ba16b6d90c835ef3041d222add9515cd61b8dddfbe6bfbc04bf9c3b8a05746f48b35817a2c47a40adaa4268ea36bd77a969bdce8082a357c6abdddc1bedda93", 0xf1}], 0x2, &(0x7f0000002800)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x44, 0x11, "4b9c433f799555a55a893e1f56cf0a"}]}}}], 0x28}, 0x804) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000002880)=""/95) r11 = creat(&(0x7f0000002900)='./file0\x00', 0x100) getdents(r11, &(0x7f0000002940)=""/22, 0x16) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002c00)={'syztnl1\x00', &(0x7f0000002b80)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x6, 0x11c, 0x9, @rand_addr=' \x01\x00', @private2, 0x80, 0x7800, 0x100, 0x8}}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d80)={0x11, 0x31, &(0x7f0000002980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @alu={0x4, 0x0, 0x8, 0x7, 0x1, 0x4, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @alu={0x4, 0x0, 0xc, 0x0, 0xa, 0x10, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002b40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', r12, 0x0, r11, 0x8, &(0x7f0000002c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000002c80)={0x1, 0xa, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002cc0)=[r11, r11, r11, 0xffffffffffffffff], &(0x7f0000002d00)=[{0x4, 0x3, 0xe, 0x9}, {0x2, 0x2, 0xb, 0x8}, {0x1, 0x1, 0x3, 0xb}, {0x4, 0x4, 0x5, 0x8}, {0x1, 0x1, 0x10, 0x1}, {0x1, 0x4, 0xa, 0x5}, {0x0, 0x2, 0xf, 0xc}], 0x10, 0x50, @void, @value}, 0x94) recvmsg$can_bcm(r11, &(0x7f0000003340)={&(0x7f0000002e40)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/49, 0x31}, {&(0x7f0000002f00)=""/179, 0xb3}, {&(0x7f0000002fc0)=""/80, 0x50}, {&(0x7f0000003040)=""/247, 0xf7}, {&(0x7f0000003140)=""/246, 0xf6}], 0x5, &(0x7f00000032c0)=""/97, 0x61}, 0x101) stat(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000003640)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000003740)=0xe8) fstat(r11, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r18 = syz_clone3(&(0x7f0000005200)={0x100000000, &(0x7f0000005080), &(0x7f00000050c0), &(0x7f0000005100), {0x1b}, &(0x7f0000005140)=""/64, 0x40, &(0x7f0000005180)=""/7, &(0x7f00000051c0)=[r9, r6, r4, r6, r9, 0x0], 0x6, {r13}}, 0x58) r19 = open(&(0x7f0000006980)='./file0\x00', 0x100, 0x66) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = geteuid() r22 = accept4(r10, &(0x7f00000069c0)=@qipcrtr, &(0x7f0000006a40)=0x80, 0x800) sendmmsg$unix(r11, &(0x7f0000007000)=[{{&(0x7f0000003380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003400)="0e903850c9959eae8bee02b23da5bfd39ff669177dde81193f18ee99012c0d8f42caaec98d04111602dc2a83923cc38773387848adbe9a533dbf2f37bb0dce1a4cf4e4441fda1f8cc6a938b9a82c279c2f64137a08816841808fc89d192d9e82896d754b89f6b43f9cd287864f22bd0accd5535ad4cfb79c5082c455a08fa12c594337d6d4f260ef0b81487694d8b1917122c541c7d8a4a4251503423fe0707a3bae4d915e3db891abefd7d8829806434968805d0231f54b6b41113e2d95d6e4", 0xc0}, {&(0x7f00000034c0)="580fd8b5a7ca9116fd23e1f8ef3bfd3efd69", 0x12}, {&(0x7f0000003500)="f264d59dc33616a836f7ca951a6c2bb1f69bd2cb", 0x14}], 0x3, &(0x7f0000003780)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r14}}}, @rights={{0x18, 0x1, 0x1, [r5, r13]}}, @cred={{0x1c, 0x1, 0x2, {r9, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r6, r15, r3}}}], 0x78, 0x24040801}}, {{&(0x7f0000003800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004880)=[{&(0x7f0000003880)="7f25cce372afb3c52b1eeb9fd1783b05155de340936e5f15d8de9f6e9b0d1b925e219789acc6cb56f79be502c24557281a4afad82cb049433d3f54fe602b07c17e7a8aead6e52b6056b0d933f1a8f87cb98b4437f0211cef79d81868e101ce0a81accff814da3f5e1dad11792fb75e8abdfa7061772f34e1b6b53b5139bd664457ca2b540948d93e217f2ca324623a5bce62cafee82d730bc131c33ac362191e4ca42b2bfaf1f7307b34a79dba2d744a114872ef18ce281361b3cf415ebc28adef3c6f8556f3d3cfbab2d347c9ffe86a0ef06fb9c176deff4b1cace459a4bc48cda2406f2c8cd118a32a1a29fbada234659084a0a8d5a74c6832a83d19045b59e0a4f64b055b6a871b802d710004a10f03f92e4e4bb330438ec837193e5302a87a60e6d9f5d30a329d5f2dc22ca5daf1e6b9f6674148164d1b4c3c74a4ef9e9b5ff01fec381bbcca8bb4d32caff29c2a87bf42628e7a0a416398efb9a36ce3a6c94ae981ef82cd0cc6525bb06f254a368bdeaf00ed604680705cdaa74f1359819c160a48161ff9c6f7b3d81d4a29f863825534b0f11e3a3e13be4262bacd983225637c372999240ede8c453efd8d96df732a9167c817d5702015bec190d15e24a2afefd0ff73dcb54ede99d7b0059839e6b5fa86eefc60e0590d15a68a6efd5451388f3bde67588f6ad50b8ada5db407815a66fde16ff65239ae878a4b14af4afd728b4fa8a2424336ab96a35637bb48ffd05c3b93e5136a1dbc8b5aba74a97a01de398bed3210b3ee46144c94bb73db5be57b5ca8314cb1ba8a9753f0289222c7c7c778d1cd81103a4a98278408ebfe72d1d5ee9117fd834fcf8d3b9e5be21b4f54a2b412423f365f4f38c132df71f903ad8b7df04f98a5ea66c1f6be8ab8a95823675bc7b9b73d1c555f9deca63c74cc97ee36f9606237064bb1394851ea76de0d3f0a951d7e91efecf2340bb34951be6a9a6d5846899ee7f6f52740cb98188c4222a6410876f31d328eed79ef5b1b1e121167ff3455936b892fd2941649f004120a03cfc83a816085b13a08c5cacbb61b367768517219c12d0fcfecf37c01abac8660efd99f7187e14b41b8c05fc1936f62a31dd1b5a4f606ecf55f7ee4ab856f56b22e67b5cd1df0035459a3dfb86b7098fa02cc325ccf9b2b6ef15004417d9b54a7e9794af0dbd5b39200925cf7b34c686f4d7919e942e287b22cdf62cba3691cdb49fc9e18047d408d40406ae5157ea2ed684385cdfe966876153488ec5aea878050fb8136051829ed9c997c9e624e8aa8a4dd07d28a59ca038c8a419b64eb842652b52beeebda78612be57c72362070ce859f5ee12adfa696a0ef5a139ca8eb8aef265250f043a7644d8b0123f63b4310068888e64ff7d9dd01d370f832295b2786f8fb4c4643a67afc8d7acc4538c2fb220a074e40a3e86c07a1f8f02e335260108c5f50a6076c0d5d83d3ef2b3d134e77c449bf8745a2dc1217e40170823f6217fa8704828fdd9dfaf7b8cb607ff645af8f480eda33978ec356f830f1faac76615a5c9c31db2505cba658859be3993616dfcc849e6360ffa7b0dd596a3f9b101290bc5094d986dee9e828629cffa5b0c15c66bcd58fd7fb02eaba6cc34f09902079f7731413e3fc32880fe3d2d5462fb29dac3cc09c6b1a152ebb446629c65c7625ee411c22804e0b7889b46c3ada153d50397abe781516bc0d01ccc6d8d48311c5d6be3163a1d87512e85ec02725dbda88cc3db7b13965ef053459465e970ac9bdc5a53bae94c5843d473d9020605488e9300298f87cefcce70458d985435819a09bf63a32d8f41f51f2b65ac9a0aba79a2b47479c2eadd8f59b5f314ee35456edb766f115331ccb6e32031482e93f976c8df28db26272b343e8bdde6b83c60dea11a8948c6da0538d22af4c287114c7d4741dca41aa11f847a704312144880fb6515365e9a418c0077170c9cce2b9e1c735b35781cee55dce93add1f2b1d417762a84acd9e4319fe1a226dd5c490b5d52d5c70f3f82d44d36ca8d7f267d2fa9fd8d8811742f6cad71266f90ce9814d5900e3124a4d4ad2d6e432c1e89152312dc693df8ff06555727f3174a69c63dc69692d55599d9b60dfdfe424848a776d65bbed155e09fd5fe6ca397a8d1073be7d08f4fff05b12150c5d9ab281447b20ab3d71bdc115aa8d548593a784954c9f87881c5d5e0c878e379648e5e455490d2faea1b8aee017b38d919929a745fe9dcdfd3065ecbf235ef3c67652c6fa9703793b9d435342c5f002d0f2df6a167a5d01438514c7df875414c7d51e29f8982a127251b24374e0794cb37d3414470bc4d5976d89908c6b72fa408e2f3092ef9b469ccb843351ec8dd1699f42dc8386063608405b74368a7889712932089d2ab66b9ef06a234444d7aa5bc6571195d940f75812bec7174d71c8acb90ae2cdeaaa591e1a30aaa83bd9556d0e02bc33ad68079983fcdd0fa09401194b76653f9e6b6be0aa7e838960c3f1de1d0188e77591383977f6dc0fab504bab009c06e2d7d60d612ac728053bd99d97a45e6022a8403432e9594f22817b6d71420134dcd658ece36b32876b93e8bcbd725b583212e199e37a1cdc353f0816d335ff0327e29a7a2850fb5f39177723679f7858cc43259689551cdb224f8460486e9b339f980466b0b7284247117c63402d71a834b301ccd6f6cb753e426fd2f2b68222599c6a904c068edcd24912562a71d64dc48c666415b596aa5a8d20cc5d3775fb18e454a7508199125e4bc35aa465fbc929e9a7fdbd7b9474d453d9522aaed87b5a26d4a60c9e615908a34de8efa955c90e6c072da443824d990e08b2803a1d2dd98524cabfd4518b10199ebe2387113af5f56398b8519e66a0ce44309ab61f795be2056a10ca9f49d2da7272a2941d85983020e6f073750462d812bdd0598cffc263c616c8126949b477f3ea9ee5e89d98a93fc21a38b4d022dc73c890e206d5dfaf88ad7708c826d99525c2404db30f76d66fa36f284156615e13c4ce2a20ccc3fcee530847163285af940a03efe330703f1f8c831e1534d9d55912bc3601d6f141d2a07e8f95ab8cf1d0016c2c6dd820f76a67d0b1e33e00314cd8dc7d48c0e4d80591f16918e9705a8001cf3c918c6575e5a83c75496899a2508b2fb29fe451440c2a4f6fbf19654da09ccf5eb32f872efc6c03862efdb48bad8e770ed9e8b8a9a293e92876e43a26ef6251c306a0a3dfcb2d1b0b48980598a31fd7658fbe65bc5102892274e2bb8878aff6f1c7a5429cd96d7cdf81b68744932f3bad76db6042893ef1312e2d303c2d7fbbd315c0ad2a7b5f9ab4ef78ea48891d26054b282c0415106c88cc4e30f6ce41d5a26afe5b60e7c2257dd4d7c239e0c0d2ec54a5e75ce3c0de264046924aebbb792c8a43651421213c518638b3f11d055c0524b006d91bf2f7b59580c8c2820695079e43e9d2dbc61a8b6bdaea9508a3476b2f85cabb6192b8dc011c457764a47844d615040a6e8ee71e443b28f4bac8606a60212469dca66f54b7808a1615a0a8a16ac4975310d3111ae4fd5bc520a34351811cbbe1cf486282630136d6e1d8004d5cae652f0dc8498fd2d1616af34c99d7be2f8508871bbeb41d96d3d8e34775c32ea9981daa0e7e2d97493694ea934edf7d21cc1742e5fbee389a59c52d82c88176854777702d72837ec72b48feadb9d900ef45c1f52b23fc4fff9288f6bc944740411d9faccd720aff7d1c853768f7e52bb6d060daf88cb4b7a7b244ac9364e061ecd60843d444433aa31ea508cc14f61c4cb72b2ae933a5ab3ab0b7ebabfb3492bd69469b362bbc85c85d3c8b22e89bed6df3727052cee2a24570006758f10a6aa65c2a6ed0bafa22727a694c22de99019a11f25d66c60d40c9eabd0ebeb8439ae06033f65fb474899155d328d1d6ba785c1679f38f62b6b671ef3bd68ccfa129a2042659affa45c0633283bfbe55591e41766ab10f216269432bf16cb2793b6423957ab0b380f82ca7493454130a05b77ffd9437f97e3d370c96e721b9f201fef440b873466c1adbfd1607539491a26a3f3eea1b6955e977b8ee1abb4070c089b4cf10ff10367c8455883598de1223f5a60d6e9235efe6edaaf585252e5acf9a6e53b9ce57d81e6b3eec4563e830ebbbd23f6f37450572607aef3c24b4af2ac6b977327ac5ae131e858339c511b1466ccec17e66f7bee7fab6bf2b8e60d5438a38dedb3495c093ca747f50d13a4545a051f34ffb3cf70b30c4cd6614b54f58ec66ae331399c84c4604baf7c26ac3ed03a1b97c36ee055a055253e7e9cdd974fe622ee2301e1ace81a116f7df1de7ef36e46d75b9027c0b6205ea973827f32b6e224be4f9981d659d8247d6c9cd2ce96c889d622110184888a6cd6ee4fcb474da5ed30e775904532a92c1c78a750b731eaae60000e5d8df2c12c3f7df63e1ee50df5e4ca264e928cae913e15755182ee01ecd462cadc44413682e6b7d1ea140cd9dc3a77d10538730243fe028740dc7e15685969fba3600b8b50419d83c69b760f359af8cb9d884398bb3ede9ee9db01a0c8b7c5daeb1ee02a11e89e6595901877a5e6e3bd902ae55174be6847655f10a6aa9a9d3c14a884b7cb92be4361aa722865a37144f7031be5f69c62239bb6ba5a391d92c573f6386f6bc96a3bdaf56aa6ce844a252aa8b12528eef0ad269c6e2e1d4af44ff00cd13f1a17e40c0185295931ecc4673fcae8ddc7f36ba06c104c57014a95bbfa56e3f884f56958210b7d9ccbc83c1d59491d9ee89e630cba73cc0e0c8c68dda0fcac519ce98444a26352522c13faffb3b99425e9673b624ccf02fd74a0f4bd3c7526be6da7093d0807c4275897e09bd95e0fb6c9c728e872468c0bb21fba0eb5d9a83c70b61aa1a85fcbc321f08ed0bd511fdcecc67ae69eed3f6afed6518d2a3404d27a67f3e5aaf1764d92d7a8c941b36339ad6b768087d5eb794e8f0a42bcfe0595a9c7114df35e05f6e1467f1abdfb5b737c22d042511d68961e5918c29b1d0acad9b9e8ad16472252cd61c9eca6a4df91a3071a864f40c156bdb4f4c614a9541d18e0d4fd025f3ffb1cd19350592cb31835282b88605b8a498d319f93d7f3d634b3293ec096fbd7b73b33833140beb62ea8011b1596f14599338f371c73f99e43dc663b41a30a5aeffd2f8e498a8916bdc01adb63c395d1982988a322c069d9f2cf5ceabb9502b127bbc33a7594964e4a3bd944dc0c9ed04dfe7ba9e11f62e97b8cb717f32fbfeb7a3b9a954b53e882d559e95d6a58d94a792321feeb5daf124b1c69bdb90483fb344ec9fca020b6e296108fdc446898f26322f4a1850d83e9e620653c619594aec7b4c6610f7a2f014994ab4e512a72736e504b42237bc887acb419a697dec82d9d301725b54bdeb6c608b757d28817e8ea0a933bb40b87cef179426db01668b8673da17185f0fafbc9db8128395c1205ea96b90da8f8dee47fabf46b8d33d384f0ecff759797f2d8cdd0164cda76505611d4cdf8f628792e21f8133df50b0097131e7eb561c5241fc731cd1461de11397839f17e7e565bc931d5a526dce9ecee0285eeefe3eca847a1e53bfc57cbe25ab371507f35cb778ed340a53165e7893a9c163a99022b3c00d11af0c3d267fccef707a477364800391fbfdd2d00ceaa2c778c1e21b1a5f1d5fcb357cc098807806fd54387391546744f3e1acde44c2dc04bfa028f7be31d39b3ad484daea722a061e66ed416e9236c71ffae4cf6b0f535955fde1bff749aa573732f0044841d33", 0x1000}], 0x1, &(0x7f0000004940)=[@cred={{0x1c, 0x1, 0x2, {r4, r2, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, r16, r8}}}, @rights={{0x28, 0x1, 0x1, [r13, r17, r13, r11, r13, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r2, r8}}}], 0x88, 0x8000}}, {{&(0x7f0000004a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004a80)="0cfbca7fdd38553267ddc2ebcc2795ee01bf5fbefa399a41f1959f4356ff3041e21b7fe4a5589e13610c3a2e3b3310b91bcf6491b02982f6d9831c7bbec7a3e4aeddcc98c66ac53c7d6e929cdcfb7cba28fe6bf8c55a", 0x56}, {&(0x7f0000004b00)="d0fa6f58b65dca78af86e6c2dc30e804c7805281f57122c506cce6c0c00a40069ab661866f64386a005155e1e19851598a34c895cd58575e5d843f2550de3ef98d0bd1593272394f932b01067b48121485d8399aba6eba0def6c67c569df8b4b790a83adb7ae52c6266af9841496c3b0f5ee3494f53a9835c406e31db8d03f2829c608a31056763bb68f891ff2c58e615bbc65227aa9bc19b9af90ae1216fe71e3a9b46e64", 0xa5}], 0x2}}, {{&(0x7f0000004c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005000)=[{&(0x7f0000004c80)="311a92b1ab4cb71078163a25bda513445d899094a060762bde84a2c8", 0x1c}, {&(0x7f0000004cc0)="2d8a6320c9e055f5de4466ed9f8cb24585935d", 0x13}, {&(0x7f0000004d00)="5ae8dd63bdb992f860a610ebde9eb2b72e97a3793c89a38172b20229388ab8a3885ee750fc71fc77d80f6f6a85839a1aa939710b48ef27c57caa370c7a1c24da8def8d335b025c89fedf1c873a04032a2f47f87b2a95", 0x56}, {&(0x7f0000004d80)="6e4081caf63fd39dd5efefc3a030384e72adea399e74367b8c9732b804ae1c60bea35d9f9d95c006e14e4ade854560142cba35e7e65574d88c49b1d7f52bdbd9681c2b55ab730a87ecd68b32ad38b9e4221a9008f12c9b298239fdc55fae273cba72ba76611767d579200a87cc270c1e7e87b243f3cdb2e39e87931e43095331aabb3673513ab67662782e856c84f3007ebf4ed188eb95cee8aea01400d6edc6b5", 0xa1}, {&(0x7f0000004e40)="5eeaeedbe84882ddfdd4950e7238073a940c2d11223f0a852ce4e04f6ca1db6bbcd608e99574666408b0396f747261e832c352e57af4879353712cb8ba2bef4e2adb382d0b45ab3a8422387e987a9c9e2b45a7d06772aaaf19c9006eadbde920006fc866acb58a18", 0x68}, {&(0x7f0000004ec0)="beca6dab7a8f519ded43a5ea5e1b578e03c62234d1fc7ba51f805417843afa1f3e25c47044605e9f010c7c05", 0x2c}, {&(0x7f0000004f00)="a9997e2d0b8ac9c8edc631167e7a6dc2833237c6a16b7afc5149807ae15c8be0abf234b645910e6c74ae3e081136601a1de24aa9de223bcaf6f221f32b8d3584d55ee4a5f1abc8076376939476c8b23944eb666fc219910a0af59f8b3f36287cdb693b344fd8f17ab0232f436b05377b80a9df6f9981167001ed4cccf1364c61b381b8ab5aabd8de1e7ed7ea2e4cc618c4906b9ebb6d1c6723c0fa0e8ba08ac6564db4d1fcf27cd324c91158782a5b976040e6458e0f180a312e0c4fac98d910d57d032cd7d37081a08faeca3063411229a67f999b87d3b79e600a25f114bc8803dfc0f4a5363233d9fbd493a25c5b932f9d7231", 0xf4}], 0x7, &(0x7f0000005280)=[@cred={{0x1c, 0x1, 0x2, {r18, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x38}}, {{&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000005340)="e5fa997d467a0d5654be5d588032086aee4e788bc1bd066b08715519496f4ba2110da8d3de86392993f8247dc7d50c03a384dd11a10c78b16d7900485e152ad7adedf907e51a778e2da96d6e1e47b60b666ce09d92c2ceb9505c47216296485a04585edba134d5708afac5f5f8785121dcd8fa841853ef5b26f6cd874ce9c86280d293a34530243cc5212ae47e0f4412d06ad20f0c530038eff1", 0x9a}, {&(0x7f0000005400)="a1479e2668805759a4ea49c548a456302f5f1f3220e8483bdccc22ce59d91bc7f540d5f0ec5fab6567565df5fb1004bca0a0f6eca9da57fede54461737a57d2f162e24a556a0ee0311073ec0d92d77c14a72a8fe3f6adee51271ae874acd", 0x5e}, {&(0x7f0000005480)="b3c95d4bad793ae33b6e636ae5d24102e3fabd21c58f70676d39e4894233b765d8fa16b756dc0154517c33bbab9905b0de0ebba218b3c97d12785fbc7500e703095bdc94fe8d35d050e3b7a5f580f23e85c358c35efbf432e768c5790b21f0d6f211b63f4afe1c6aacfd0516750cb1ce3404c821bf819c9b42611114c11c42ac494d1358ab1e4e29ac6886828e2dc7322f577198ddc5", 0x96}], 0x3, &(0x7f0000005580)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {r4, r2, r8}}}], 0x38, 0x24008044}}, {{&(0x7f00000055c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006900)=[{&(0x7f0000005640)="269806e41c963533499723c2be4851ea4a926a34020240a98d03051d81ae31140efc3876b5a3ac6391947a8054fc8448e760aec7ab2c76741d9768b1d33fe9b71fda35d07f65d217f436ccc19abde82749bd460d43a27c483ea9aa96a7d065cf9fd7fd6ace469ce120a3c191fc59ae6b04adbb0ed96abef141a47501893b2723d28b53f841e15f2eca0bbb23d6b56e5b30bf7cfd70461271f59d08d5c4d65a359289f14fafedd1f06a4c2ac6db1ae186caec43f10adc446b9fc2e049e0ac7a420e5046198da288c6de7e356d746e8de4526691f8383f3b84d4c1538ed454d62477c9208712ffdd50ea6c16346b97654cb139f3829ca6ba21ff48b3ae32b9148f8779971345a34b5563f119e6c50e1d1f2a84394d8342feb68ba33b0d0c8491f6417ac1ca53352228f2c8e0d2404f070a30d5f1794ba58f0b0ff6fcd1dd4af7944da3014fbe97d650cb1b75bcf8eb768e344ef164f524bc7205f847d3ff5a96169f0a07b8b641e2e62623bc1b442e1a33e9746db0342c92495a5b86fc0060c3943d46b09e08968b8481b10ce33a6dc5695789f02cf35898b50acb600d9f097019f5366f5a0b2be92a24be1a1a4e2493d035798cfbab8c81d07e9f1c7aa992bfd607bc2bc8b562a0a26693f5c7b2a6268563fe27392b43e1d2c5fae9e26a798502f10434c5fd0161fa06715d96efe5699841ba756ad52557886e3896c29cf119f379786b22d90d3f97e6d19a337e0759468feafbd32f2be437c802ab3717613f2219da627331a83c1dd5430705e96a07629f776be4cfa99a76eb37d85141bf79f414e9101861d900938f99ecf0c442ecf11c1cd6d52f41ebbb16b1a895e8460c9d273b330efa2b58060928bb061c5145e1a80a3e0abbf6eb6fea2c413dca7543292f22ea2253e09023ded5dbdaf984a8abf5ec0e5bcb7e0ba91be962df222424e4448c5a7092c56f8debd68cfaca8731bad73b43b3fd877328d4ce55c2eab3f332a733e45b42476da274403119d458fdc484c2cb04337454e147dc957e03d9c9f811b7f7691a8a72abdd801dbf98d9d5b5c26d01a50c0f7256980e46226c491bfc21330a2557a716c1d599fe71dd7e78e4e0bd6a76fe1d78df5ac71b7be0f9496796d6038875b8f2c2b6fe701fa6a4469288aad39bb36c2d11df28d1dc5ac08f7e2bc0fe7de3acf984e2016b44e8a60c2a2d076bacbf1bfa00dc43481eaad9d2736ab3301b797a974fac30976ea3066536226089b651f8e1e3a94536c78bad47865c69d49240de1fde38cbfe828dd18073ff219b36c8e3ec9f19dba6b924f019f64ef73bcdf3a1cfd6c591a65acb99b3593336f04f944e37748633aa8b55619dd1c4dff4f9f5df6d9a4c90ea99f105e7dda714e31887d491c7fdfb3d317a98ed3b0b3561d39bbff8d69353bfd0ecc943208201e3eac1b3407c773d8ebdc909f3cbec32c70dd0f63a9615b329944700195175ae2eb5b1d9789561f214a8039d5580a00b8620d89ec0df724f8ecd21067eac66bd0f2fcb568ab7bd9fe1db992ba73796bd70d19c146633823cbfc0c1c459d039a12ad4a33b3568bd78c40736019986a2992945b9feb3e0d27777c7260320615e668660475db260525868aed0e3287f1185d4ba5f8d16b626b14b1f319210e6fdc74ea33bdb540a15111c3f4206c6955d0f39fc0fc8777c3905cb6bfc11e2351325cc6a0ede5de6886e268fa1d736da956745ea7aec55419d413ac6dc9a4246db03eab0efe04e58c68dceb40f352f1700913737f917f76f9dd9d636b62343e32719902c52a66913c0f633e2f511ae88acdc7276b030412c5303385845fbc3cb062fe5c595441e0e656a7513483a32c1845a0971fd1f7bedd5920ce8010161d9436b10b9942d8007bb08ce92a7eafe8f645e262ab93e026738da5f79b56fe169a498627de00f6aff42c95f2b0addc07b0344c7827cbafd0a01bbeaa186afe579430d0f286332dd0da7edf257c06f6bb63761eefb183a1f685fc3780e521676b12ae52087268d9ef5dff88da5e0c0113ca6fc44324f3460370b805605e54e30f39cc9bbf81809c953c081247544cf854de8444145e5a62e0a161fdcca96060e593a1e1d96e25cd0ff87d408c57324209fb0b0952a8e0fbf8723c4105b8690a82e389bc8ff1be6b7114b4393fa26cf1992da62e683ce217d2ea56651fe7ba86ae1be9d2c06c5e7a5c85ffd8f8dbae3cc87aafb29daa403df6a9e500467193018d9d6687290458fe679e813c48680ee3c6d0ea43fab798c04145b7ad9ba5bea0b80914748e8defaba79a5c6982883a83acd9b6ca633731aa580b26b5ea62b242e362932fa795cf44f5efc1664ed3edb308685c92de8c72412505d36bb135d3e1cd1744791ba52a2f2dc08409e123afa4d0c6f9bb6bd9c8dc020329eb94f6a39904bddd1d0e86d849c1db0cf888d067fd5d38cc60e75f7cbea9bca37484a796430e3b36ea489a3970681627fcdacaebe8620de0fd97d23f813f6b0d2f33a57840b1d66fe54d006e319d4983f0453624c25053e7298d7c89262f11617af8f0c09052cb7a7cdf5622b08059dcbf5f2d6b282ff490387a7f31a29430a99c36c28fd29a88b95ab19bbf35ba6f86c04149c4847186b0e9f6ba83dfe8352be497ba9c4d164879fd19152e2a0c40a8e5ccecb0973b75c03bdf91820260d7dde1fdd24467341fc81313b7892290bea287fa7e15ee6b29032a3f798d7e125f108fe65efa0b573f29583c216482bcd592cc962fe5bce802f9b714bf8540a2ab767ba54811b64f2a5d11897cc078c03ea91cac32c2ab4948fa5544ca26b8f9ed89a710e3cecf919e19cee72a8d4d99289bc8e08bae41b6845a16abdc3c2ff6544db8e20c32470b005fe97000ac2eef3ee3e78d4fb69c0b219ab30a405661b2455ee44e9a29340c2cef96ab1e191e523723b8cf35e9156ed71f9edb29b91361f247a968bf9e40bbd1e669a6a03c319b017125f3791489cd95920c03a287a7a7e6a09c88ba545777fb4330dba52604e4ac7e5b9704ac256acc76d239fb3cf11452a5b8dd87736eb3254880a82e1bee8860b0c6cdac0f0ce1e3c255bd53f58fdc85bef8f99d7fa38bc1b02c3e9867f50ca38b68e7f542c0dc4183241fc4e1a5c864832e6254d09dc60c878834f45b3cdb0f14f903dfcbbe8005e4b058cb271873e6e4838f6e85b60ddc6891eb041f1c98bb43d87b0ea6d737ee30f84b696ba2537c844d0eb47d7b590afd65cbc60b59f08a6e3eec81a1130df4bbcbb338dcbe32192a78ee20d8bb49e83ea939e29a183cbf4de7c4b697767cd89dd6f627dcb2db05abb8505588f74095c15829049a212999ef126444a8005eaccf7e4be6316baca830b4db7bb9c6603d7adf1c61e414e13be6f5c2bd8cb4ab5f24d0bd64cb55165617675c57950ef0e53946386cbbbd4ae11204e638bf9363435dc30fd9d0a02f220cf7994d7e99959b4e83e17c99bfef53560032ce21f12a4cabb6e6c268502a3888131374326909463eac393dfefde6615a501b22fc0c0396486729c6f6bc14a8f102db48470fce48190877e1edb7d7266eeef1955cf0ef0106981b7882317bb94b3a277519fe0661466d19afec1887e6392a7ce471658e52c212154106be0566f60376fe47e03d6b16454883a1acecdb25c6bba0dc2204343d8373609b8405c6566ecb83863904869784f1837575db76de8c440ea74f7b9abc6d34653490757742d12ea68bb300ae963f7ee80510aa809fcdf48207c4e80ae0851f62c3966a4020359febe198d19af5cfeed6832d8c4a1ee6ad357cf3e60074147ff1701daf928a7ac484896b6549bd04633c1b6bb19057f070add74c3f27a74226791441a69fffdeba971599fc7d8d876c0cc75cfca8842f27cfa9ad25702878a7762f03409c2a27d78e81af215c26e09535b58f2cc57fbebeea5528f390add65c6d61ca3d861f687c6138d8b29f3d3520836d8ed4f722332f6a35e63f998556320b45b48d0b14ab7f4d72477205eb0716608de1bd1a6009e342bcc7e6221b7f007fac1583d15eb5354156e9fe6cd62897828d344f499ed16d725abe17358ee2ee6d25c8e26fb3dd40c179f05a78f088333fcf251ad3a62f62cfb999b7cc7a59785ba64729c5097deedd4d41ad26a42a67a98af045b827e4fc27525e616f71fbf7bb895e2328027f4c363cbd99a768ad190a12a9a79eb4febf6c84d81824c808ea94a7b813e255236c3a743779a9f6b3a41a8e057d8d85b29c474bc0f9114e3aec2751edb3141fd076bcceaa826eb660d5633379f452a110508711f4f28f2f26ca65d5d4a129bd190c2d83fac432149f42f61d512d938652269e6263256e4623f798e397b76d1a45b761c33f3c7e45ce8420f93c25d75b2fce6b4985ddba7d04ce1d2c929abe2d4b522a528b100f2a9350fe27733bf2c0505a823235fb04f4f19119c3f8ed8a83c6467760611f6d929882da85bdbf2b8a20b1c236f8531c9b15c939edd49c10e72d2daabff6f4ce01c2dd19f883125f8bb52ecaff4185eaba278af32d80c69c16f378725066e508e4637f6d3164d4f1b4467de375b8584614ad024daa9810fa6fd3a54b2f8586ae6446e0ffb54248a3a049a563ff5c426a3f162667a0e845adc3159e7dd01d5bfee13d116f54ee27c1fabd15f3a0a4bb067326524580d31c7ecd6594e9f2873ebf839252e5d18774f91a3db6d369b3126b744b086737c3e11d6240e94c385ee0a2e5a230cef5e0304b8c3205511ef8af64e6ed34b33449d84fff32ae501a6ae1f4ab123a839c49580a6cdc25a743561bcdd58700c2c864f95b6b3cc1936af4d5284a25850e98a8f01fbda3307c6d900aa4b3d4a3d88f02b8c3c7097e3409a90e3e13a176572baaef0c1aca7fda62a619104d1232793f8c647104c10685a4fdae6c0341ba18276cda556d7465d330779c63ebd2c0a53613d498df0507e7d3c03158ce47dcd172b57bc729c2a35ed4d7520107dc929736df0742219f16e2a5ac82f68496bfa167e6907d82bf4cf0dc318cddead8f8aacd88162a4136f352a14a5c13a38c3074ef3871c17d8cd219b21abc06b87e270a9df579ca2c76683b1ae35d192f2855966cb54176cffe88250d21603eedd1d982acb8f4401c02fed3fb915765c5bc40783d28ac79605fb9c0451cea012b757810584d6315237909a9921788306d287d2e13e5f88fad91db240680531b5c41ce689650061a55651503abaa0e406348059d04a4ea13f39574b7b9e7637b42e1cea2e9b6691c477cf4c25582a543b3ae1069ec7b8f24c16f5338cbaff2a35da45b7e0114f75e1bb3fbc6445fd53f0c6ead5652e53f6ec980c74ee036eccc6e9781caa60ed652e4477d5355d9a563c3d4f69b1a593e9307406a06243b873d1e1f89ed223e82b7710b31ad57b14a71316a362a1f9279ca70bf1a790b099070b0b5d9db0d0022e1a512c7f1af38b9105da96ddc4cd6a92a03c1ea57875d4d8c2f4590068eb253148c6e7c68426920417bff412e70d48aef0d31f6af88a6a7da9c27f1c15b49a769def539bc4783dc7d938e5b5997dd467d42da4c735cb4730c8b658fa4e1f4f36ad096de0372e73348bd8d00b448d69b925c5ac623fc5b0ee53da80b39e6dcf4d94691e58f22abdc1e9d8d656aec31c0c5f87d14481871407acab460d8dee5c6ea6192f2ce2d90c83cc8d2b2f4170124a5015c2059664ef49903a0372c591bb8f66837c4d0e7fe74f07de4fead75951ae12d5421d0096ef9e285f64e26278eda43540dd61f03d2979a7ec827b159fc83f02bd6de6214e4252", 0x1000}, {&(0x7f0000006640)="f7c4de42b58df88a6fe493c526ec89d974c9088c74cb44871acc90139b0fce030a", 0x21}, {&(0x7f0000006680)="8cac92ab48ff41a43d222eef707ed2f3fe5d3c96f48a9df371b1a649a0ea686fecc25f084a7e9d4ca5b56dc9ce0f9cd1b14e6a11eebc7039a84ebca88e95f11977", 0x41}, {&(0x7f0000006700)="55766b9dda234e10bec5a337bc36968cbeb34d316111a970fbd6d4d26b7954b3ec1c553c0d4a18e1038528356553900623aac0cad0784059dcdb85f56e44f0226b65fa0b1ada337d284ced775748c3cb6f94e80bc147e974b59542d1b8a1a165fcbf3749f57d1094d4bc1332fac9bdcef8eb84b79b7d23c87d863deb1626e12268752aea2ad80a6503a91a6b39ba2b74691bef675e54eda4638c6414aafa427ad12b1fa232194f15862517d42e4e996c", 0xb0}, {&(0x7f00000067c0)="608c1064a683d5b66dbbb9421abc7766e650d95e38b5afdf9f7101b2330e8cb8b4751e1bccc19366fd6a0e10576b709e4507875509ea9a120516f7b30799fa17a558b0130b7a9f12caeb037be92be248023e", 0x52}, {&(0x7f0000006840)="6d5cff83bab34de029cb4a445fcf7c4e78aaebd47f821e5c10e44552482005bc58081f83c33f99beab7686d2e5cfca35f6b71f9fd255a62ccb9ce788a4085ef6f359afedc99ce8b85837ad2bd3d1322ecc479b232460b5a4029e071c979918f5b942fffbf67d4d04a4c270269dcffdc432428c61c763e816c022a946a07354797740a24a4a9ef725a4ef8a3297d61f18f3f206891152e9575643", 0x9a}], 0x6, &(0x7f0000006ac0)=[@rights={{0x34, 0x1, 0x1, [r19, r20, r10, r11, r0, r0, r11, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r21, r8}}}, @rights={{0x30, 0x1, 0x1, [r10, r10, r22, r5, r10, 0xffffffffffffffff, r0, r5]}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r10]}}], 0xa8, 0x48004}}, {{&(0x7f0000006b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006e00)=[{&(0x7f0000006c00)="4ee9bb1d6134b228a557500625b907498010e54301f17fef4bda70f980c2d2ffaff51f8a34dcd5bcc73d8b62b463d6453e91dd191541eab599d63d002648", 0x3e}, {&(0x7f0000006c40)="14854a060423457607a042a34d22975ce509fa5e2f72e59e0c152c7bfb943d8d4c4df6890d5d8bf1e740d84a460d1ba246bd6f453c9fc5c10f8ee2806d22971fe5a6815a8080334807f74113848484f3df3e59f85541b9c58e03f92ae1dd55ee1cdc9b5d1438575d74d469269277313d1413bcfb1d498b682cda6ae4760979083456cb705a9bdf43feda7917fd589da3188a33fc631bea11d8aa0e0adcb0a7cce34d3aeaa6b869fa4a465a8435a8a80a9181", 0xb2}, {&(0x7f0000006d00)="8a04eaffac77f3189a38cacf763ff91f8fff048ebe877921f7f35be583d3121a77b1249bd59e0bca7b776f1ddfe30833340b50123e581041e47b454f697304ab1d780712db838758536077d567fc310834f03eaa2927577d8b5686e7010567ecd8c3f4dbc75c8ab4843d008f5226bc3947528cd9bee013f5f4eedff4b7ad4507ea84f171793c38659a7420b1f6fbb0e06a3c4996c26cf6a3b9d7c97c4748183ce1dcd9482f73388c3f37759d28e7a6c61e1e81579d851b150f9d927ffe662332", 0xc0}, {&(0x7f0000006dc0)}], 0x4, &(0x7f0000006f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r11]}}, @rights={{0x18, 0x1, 0x1, [r0, r11]}}, @cred={{0x1c, 0x1, 0x2, {r6, r2, r3}}}, @rights={{0x18, 0x1, 0x1, [r13, r13]}}, @rights={{0x1c, 0x1, 0x1, [r5, r11, r10]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r2, r3}}}], 0x100, 0x40880}}], 0x7, 0x44000) 165.467317ms ago: executing program 4 (id=1170): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) syz_clone3(&(0x7f00000005c0)={0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200), {0x34}, &(0x7f00000004c0)=""/215, 0xd7, &(0x7f0000000240)=""/100, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 0s ago: executing program 8 (id=1079): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0xe7330000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) kernel console output (not intermixed with test programs): r+0x97/0xb0 [ 170.768527][ T3134] do_syscall_64+0xca/0x1c0 [ 170.773283][ T3134] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 170.779193][ T3134] RIP: 0033:0x7fc7e1e06169 [ 170.783664][ T3134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.804042][ T3134] RSP: 002b:00007fc7e044f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 170.813454][ T3134] RAX: ffffffffffffffda RBX: 00007fc7e201f080 RCX: 00007fc7e1e06169 [ 170.821596][ T3134] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 170.830947][ T3134] RBP: 00007fc7e044f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.839090][ T3134] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 170.847115][ T3134] R13: 0000000000000001 R14: 00007fc7e201f080 R15: 00007ffc627b3c98 [ 170.867396][ T3129] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 170.966425][ T3135] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 170.978246][ T18] usb 5-1: device descriptor read/64, error 18 [ 171.006421][ T3135] EXT4-fs (loop1): invalid journal inode [ 171.013224][ T3135] EXT4-fs (loop1): can't get journal size [ 171.076188][ T3135] EXT4-fs (loop1): 1 truncate cleaned up [ 171.082879][ T3135] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 171.499729][ T3157] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 171.517390][ T3157] EXT4-fs (loop7): invalid journal inode [ 171.523785][ T3157] EXT4-fs (loop7): can't get journal size [ 171.536866][ T3157] EXT4-fs (loop7): 1 truncate cleaned up [ 171.559614][ T3157] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 171.778285][ T18] usb 5-1: device descriptor read/64, error -71 [ 171.918311][ T18] usb usb5-port1: attempt power cycle [ 172.039049][ T3168] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue [ 172.056555][ T3168] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 172.260365][ T23] audit: type=1400 audit(1743784098.364:506): avc: denied { create } for pid=3172 comm="syz.6.713" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.307641][ T23] audit: type=1400 audit(1743784098.394:507): avc: denied { write } for pid=3172 comm="syz.6.713" name="file0" dev="tmpfs" ino=33825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.331379][ T18] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 172.341017][ T23] audit: type=1400 audit(1743784098.394:508): avc: denied { open } for pid=3172 comm="syz.6.713" path="/91/file0" dev="tmpfs" ino=33825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.367180][ T23] audit: type=1400 audit(1743784098.404:509): avc: denied { write } for pid=3172 comm="syz.6.713" path="socket:[33828]" dev="sockfs" ino=33828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.428257][ T1650] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 172.518046][ T1034] print_req_error: 38 callbacks suppressed [ 172.518109][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.537922][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.549726][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.560886][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.572287][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.583586][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 172.587646][ T18] usb 5-1: device descriptor read/8, error -61 [ 172.668237][ T1650] usb 3-1: Using ep0 maxpacket: 32 [ 172.677654][ T23] audit: type=1400 audit(1743784098.774:510): avc: denied { unlink } for pid=1203 comm="syz-executor" name="file0" dev="tmpfs" ino=33825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.727588][ T3183] binder: 3177:3183 ioctl c0306201 0 returned -14 [ 172.808314][ T1650] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 172.824395][ T1650] usb 3-1: config 0 has no interface number 0 [ 172.869108][ T125] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 172.912358][ T3184] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 172.932399][ T3184] EXT4-fs (loop6): invalid journal inode [ 172.938561][ T3184] EXT4-fs (loop6): can't get journal size [ 172.946958][ T3184] EXT4-fs (loop6): 1 truncate cleaned up [ 172.953592][ T3184] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 172.978269][ T18] usb 5-1: device descriptor read/8, error -61 [ 172.999152][ T1650] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 173.023717][ T1650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.047425][ T1650] usb 3-1: Product: syz [ 173.053311][ T1650] usb 3-1: Manufacturer: syz [ 173.059509][ T1650] usb 3-1: SerialNumber: syz [ 173.067550][ T1650] usb 3-1: config 0 descriptor?? [ 173.113079][ T1650] uvcvideo: Found UVC 0.00 device syz (19ab:1000) [ 173.121444][ T1650] uvcvideo: No valid video chain found. [ 173.128570][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 173.202236][ T23] audit: type=1400 audit(1743784099.304:511): avc: denied { bind } for pid=3194 comm="syz.6.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.248347][ T18] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 173.248360][ T125] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 173.248377][ T125] usb 2-1: config 0 has no interface number 0 [ 173.301103][ T3198] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 175.028544][ T18] usb 5-1: device descriptor read/8, error -71 [ 175.223790][ T125] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 175.287833][ T3212] FAULT_INJECTION: forcing a failure. [ 175.287833][ T3212] name failslab, interval 1, probability 0, space 0, times 0 [ 175.300974][ T3212] CPU: 1 PID: 3212 Comm: syz.6.720 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 175.310873][ T3212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.321482][ T3212] Call Trace: [ 175.324866][ T3212] dump_stack+0x1d8/0x241 [ 175.329365][ T3212] ? panic+0x89d/0x89d [ 175.333474][ T3212] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 175.339102][ T3212] ? find_lowest_rq+0x1dd/0x7d0 [ 175.344288][ T3212] ? debug_smp_processor_id+0x20/0x20 [ 175.349995][ T3212] should_fail+0x71f/0x880 [ 175.354249][ T3212] ? setup_fault_attr+0x3d0/0x3d0 [ 175.359312][ T3212] ? push_rt_tasks+0x7c5/0x8a0 [ 175.363909][ T3212] ? check_preemption_disabled+0x9f/0x320 [ 175.370320][ T3212] ? ovl_fill_super+0x100/0x4820 [ 175.372356][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.375701][ T3212] should_failslab+0x5/0x20 [ 175.384135][ T125] usb 2-1: Product: syz [ 175.388838][ T3212] kmem_cache_alloc_trace+0x28/0x260 [ 175.388853][ T3212] ? ovl_mount+0x30/0x30 [ 175.388862][ T3212] ovl_fill_super+0x100/0x4820 [ 175.388873][ T3212] ? rto_push_irq_work_func+0x3c0/0x3c0 [ 175.388883][ T3212] ? switch_mm_irqs_off+0x325/0xab0 [ 175.388893][ T3212] ? plist_check_list+0x1f8/0x220 [ 175.388902][ T3212] ? rto_push_irq_work_func+0x3c0/0x3c0 [ 175.388912][ T3212] ? __balance_callback+0x86/0xe0 [ 175.388922][ T3212] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 175.388931][ T3212] ? __schedule+0xd0c/0x1320 [ 175.388940][ T3212] ? ida_alloc_range+0x98f/0xa60 [ 175.388950][ T3212] ? ovl_mount+0x30/0x30 [ 175.388969][ T3212] ? delete_node+0x706/0x780 [ 175.401912][ T125] usb 2-1: Manufacturer: syz [ 175.402728][ T3212] ? idr_replace+0x1c5/0x230 [ 175.469370][ T3212] ? idr_get_next+0x4a0/0x4a0 [ 175.474128][ T3212] ? up_write+0xa6/0x270 [ 175.478723][ T3212] ? _raw_spin_lock+0xa4/0x1b0 [ 175.484104][ T3212] ? up_read+0x1b0/0x1b0 [ 175.488793][ T3212] ? ___preempt_schedule+0x16/0x20 [ 175.493974][ T3212] ? sget+0x4ae/0x4d0 [ 175.497865][ T3212] ? free_anon_bdev+0x20/0x20 [ 175.502781][ T3212] ? ovl_mount+0x30/0x30 [ 175.506998][ T3212] mount_nodev+0x52/0xe0 [ 175.511081][ T3212] legacy_get_tree+0xdf/0x170 [ 175.515741][ T3212] ? asan.module_dtor+0x20/0x20 [ 175.520602][ T3212] vfs_get_tree+0x85/0x260 [ 175.525518][ T3212] do_new_mount+0x292/0x570 [ 175.530213][ T3212] ? do_move_mount_old+0x160/0x160 [ 175.535431][ T3212] ? security_capable+0x86/0xb0 [ 175.540447][ T3212] do_mount+0x688/0xe10 [ 175.544989][ T3212] ? copy_mount_string+0x30/0x30 [ 175.550227][ T3212] ? _copy_from_user+0xa6/0xe0 [ 175.554859][ T3212] ? copy_mount_options+0xcb/0x300 [ 175.559846][ T3212] ksys_mount+0xc2/0xf0 [ 175.563832][ T3212] __x64_sys_mount+0xb1/0xc0 [ 175.568294][ T3212] do_syscall_64+0xca/0x1c0 [ 175.572721][ T3212] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 175.578638][ T3212] RIP: 0033:0x7fc7e1e06169 [ 175.583032][ T3212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.603291][ T3212] RSP: 002b:00007fc7e042e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.612056][ T3212] RAX: ffffffffffffffda RBX: 00007fc7e201f160 RCX: 00007fc7e1e06169 [ 175.620919][ T3212] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 175.628861][ T3212] RBP: 00007fc7e042e090 R08: 0000000000000000 R09: 0000000000000000 [ 175.637064][ T3212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.645141][ T3212] R13: 0000000000000000 R14: 00007fc7e201f160 R15: 00007ffc627b3c98 [ 175.678577][ T18] usb 5-1: device descriptor read/8, error -71 [ 175.682539][ T125] usb 2-1: SerialNumber: syz [ 175.721950][ T3214] EXT4-fs (loop7): Ignoring removed orlov option [ 175.792335][ T125] usb 2-1: config 0 descriptor?? [ 175.799681][ T3214] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 175.809944][ T125] usb 2-1: can't set config #0, error -71 [ 175.817338][ T3214] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 175.827775][ T125] usb 2-1: USB disconnect, device number 17 [ 175.851922][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.872223][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.897338][ T18] usb usb5-port1: unable to enumerate USB device [ 175.906994][ T108] usb 3-1: USB disconnect, device number 19 [ 175.913503][ T1034] buffer_io_error: 25 callbacks suppressed [ 175.913514][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 175.927759][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.940147][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 175.950678][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.963003][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 175.972704][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 175.981798][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 176.248253][ T18] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 176.480332][ T125] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 176.594008][ T3235] binder: 3230:3235 ioctl c0306201 0 returned -14 [ 176.608697][ T18] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.694540][ T18] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.843755][ T18] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 176.853046][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.865151][ T18] usb 5-1: config 0 descriptor?? [ 177.018298][ T125] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 177.058241][ T125] usb 2-1: config 0 has no interface number 0 [ 177.065250][ T125] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.103088][ T3238] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 177.111859][ T23] audit: type=1400 audit(1743784103.214:512): avc: denied { ioctl } for pid=3210 comm="syz.4.721" path="socket:[34022]" dev="sockfs" ino=34022 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.228357][ T23] audit: type=1400 audit(1743784103.334:513): avc: denied { mount } for pid=3242 comm="syz.6.731" name="/" dev="ramfs" ino=35019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 177.308586][ T125] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 177.318608][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.327269][ T125] usb 2-1: Product: syz [ 177.344278][ T125] usb 2-1: Manufacturer: syz [ 177.349961][ T125] usb 2-1: SerialNumber: syz [ 177.359382][ T125] usb 2-1: config 0 descriptor?? [ 177.508406][ T18] usbhid 5-1:0.0: can't add hid device: -71 [ 177.516010][ T18] usbhid: probe of 5-1:0.0 failed with error -71 [ 177.524369][ T18] usb 5-1: USB disconnect, device number 25 [ 177.600061][ T23] audit: type=1400 audit(1743784103.704:514): avc: denied { connect } for pid=3216 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.642057][ T3217] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 177.673803][ T3217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.718290][ T1034] print_req_error: 2 callbacks suppressed [ 177.718312][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 177.738324][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.750554][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 177.760102][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.772617][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 177.781483][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.793173][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 177.801684][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.816929][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 177.821973][ T125] usb 2-1: USB disconnect, device number 18 [ 177.829693][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.847804][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 178.023909][ T3254] FAULT_INJECTION: forcing a failure. [ 178.023909][ T3254] name failslab, interval 1, probability 0, space 0, times 0 [ 178.038336][ T3254] CPU: 1 PID: 3254 Comm: syz.7.734 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 178.047981][ T3254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.059027][ T3254] Call Trace: [ 178.062602][ T3254] dump_stack+0x1d8/0x241 [ 178.067102][ T3254] ? panic+0x89d/0x89d [ 178.071264][ T3254] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 178.077282][ T3254] ? pcpu_alloc_area+0x658/0x750 [ 178.082128][ T3254] should_fail+0x71f/0x880 [ 178.086581][ T3254] ? setup_fault_attr+0x3d0/0x3d0 [ 178.091788][ T3254] ? prealloc_shrinker+0x50/0x210 [ 178.096903][ T3254] should_failslab+0x5/0x20 [ 178.101747][ T3254] kmem_cache_alloc_trace+0x28/0x260 [ 178.107308][ T3254] prealloc_shrinker+0x50/0x210 [ 178.112693][ T3254] alloc_super+0x5ed/0x760 [ 178.116972][ T3254] sget_fc+0x218/0x620 [ 178.121065][ T3254] ? kill_litter_super+0xa0/0xa0 [ 178.126357][ T3254] ? fuse_reconfigure+0xb0/0xb0 [ 178.131130][ T3254] get_tree_nodev+0x26/0x150 [ 178.135819][ T3254] vfs_get_tree+0x85/0x260 [ 178.140171][ T3254] do_new_mount+0x292/0x570 [ 178.144629][ T3254] ? do_move_mount_old+0x160/0x160 [ 178.150288][ T3254] ? security_capable+0x86/0xb0 [ 178.155676][ T3254] do_mount+0x688/0xe10 [ 178.160390][ T3254] ? copy_mount_string+0x30/0x30 [ 178.166569][ T3254] ? copy_mount_options+0x1c6/0x300 [ 178.171727][ T3254] ? copy_mount_options+0x29a/0x300 [ 178.176763][ T3254] ksys_mount+0xc2/0xf0 [ 178.181018][ T3254] __x64_sys_mount+0xb1/0xc0 [ 178.185610][ T3254] do_syscall_64+0xca/0x1c0 [ 178.188338][ T399] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 178.190265][ T3254] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 178.204207][ T3254] RIP: 0033:0x7f7d8b1cd169 [ 178.208910][ T3254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.231947][ T3254] RSP: 002b:00007f7d89837038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.241036][ T3254] RAX: ffffffffffffffda RBX: 00007f7d8b3e5fa0 RCX: 00007f7d8b1cd169 [ 178.249272][ T3254] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 178.257263][ T3254] RBP: 00007f7d89837090 R08: 00002000000000c0 R09: 0000000000000000 [ 178.265885][ T3254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.274018][ T3254] R13: 0000000000000000 R14: 00007f7d8b3e5fa0 R15: 00007fff219a7738 [ 178.548220][ T399] usb 3-1: Using ep0 maxpacket: 32 [ 178.570039][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 178.597764][ T23] audit: type=1400 audit(1743784104.694:515): avc: denied { create } for pid=3268 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.630116][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.647273][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.659450][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.792452][ T3278] netlink: 'syz.1.740': attribute type 1 has an invalid length. [ 179.221202][ T3278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 180.138504][ T399] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 180.152709][ T399] usb 3-1: config 0 has no interface number 0 [ 180.199155][ T3286] binder: 3267:3286 ioctl c0306201 0 returned -14 [ 180.318827][ T399] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 180.363221][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.372895][ T399] usb 3-1: Product: syz [ 180.374409][ T3281] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 180.377528][ T399] usb 3-1: Manufacturer: syz [ 180.394053][ T3281] ext4 filesystem being mounted at /150/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 180.405396][ T399] usb 3-1: SerialNumber: syz [ 180.411656][ T399] usb 3-1: config 0 descriptor?? [ 180.420448][ T3282] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 180.433350][ T3282] ext4 filesystem being mounted at /78/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 180.485955][ T399] uvcvideo: Found UVC 0.00 device syz (19ab:1000) [ 180.495356][ T3290] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 180.503481][ T399] uvcvideo: No valid video chain found. [ 181.668041][ T3301] overlayfs: failed to resolve './file1': -2 [ 181.910799][ T3309] FAULT_INJECTION: forcing a failure. [ 181.910799][ T3309] name failslab, interval 1, probability 0, space 0, times 0 [ 181.968261][ T3309] CPU: 1 PID: 3309 Comm: syz.7.749 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 181.979023][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.989186][ T3309] Call Trace: [ 181.992323][ T3309] dump_stack+0x1d8/0x241 [ 181.996759][ T3309] ? panic+0x89d/0x89d [ 182.000672][ T3309] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 182.006835][ T3309] should_fail+0x71f/0x880 [ 182.011059][ T3309] ? setup_fault_attr+0x3d0/0x3d0 [ 182.016074][ T3309] ? _raw_spin_unlock+0x49/0x60 [ 182.021234][ T3309] ? inode_doinit_with_dentry+0x926/0x1050 [ 182.026965][ T3309] ? __alloc_file+0x26/0x310 [ 182.031600][ T3309] should_failslab+0x5/0x20 [ 182.035930][ T3309] kmem_cache_alloc+0x28/0x250 [ 182.040542][ T3309] __alloc_file+0x26/0x310 [ 182.044780][ T3309] alloc_empty_file+0x92/0x180 [ 182.049466][ T3309] alloc_file+0x56/0x4f0 [ 182.053621][ T3309] alloc_file_pseudo+0x259/0x2f0 [ 182.058326][ T3309] ? alloc_empty_file_noaccount+0x80/0x80 [ 182.064285][ T3309] __shmem_file_setup+0x1ca/0x290 [ 182.069462][ T3309] ? shmem_file_setup+0x13/0x30 [ 182.074232][ T3309] __se_sys_memfd_create+0x1cf/0x360 [ 182.079497][ T3309] do_syscall_64+0xca/0x1c0 [ 182.083871][ T3309] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 182.089599][ T3309] RIP: 0033:0x7f7d8b1cd169 [ 182.093962][ T3309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.113722][ T3309] RSP: 002b:00007f7d89836e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 182.122344][ T3309] RAX: ffffffffffffffda RBX: 00000000000004af RCX: 00007f7d8b1cd169 [ 182.130159][ T3309] RDX: 00007f7d89836ef0 RSI: 0000000000000000 RDI: 00007f7d8b24ec3c [ 182.137971][ T3309] RBP: 0000200000000480 R08: 00007f7d89836bb7 R09: 00007f7d89836e40 [ 182.145783][ T3309] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 182.153766][ T3309] R13: 00007f7d89836ef0 R14: 00007f7d89836eb0 R15: 0000200000000100 [ 182.347736][ T3317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 182.429547][ T403] buffer_io_error: 10 callbacks suppressed [ 182.429558][ T403] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 182.472183][ T403] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 182.483090][ T403] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 182.502559][ T403] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 182.511823][ T403] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 182.694482][ T3330] 9pnet: Insufficient options for proto=fd [ 182.702113][ T23] audit: type=1400 audit(1743784108.804:516): avc: denied { write } for pid=3329 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 182.793742][ T498] usb 3-1: USB disconnect, device number 20 [ 182.872052][ T3336] overlayfs: failed to resolve './file1': -2 [ 183.139853][ T3333] EXT4-fs (loop7): Ignoring removed orlov option [ 183.157542][ T1034] print_req_error: 14 callbacks suppressed [ 183.157569][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 183.185523][ T3333] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv0,nojournal_checksum,orlov, [ 183.203357][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.216297][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 183.231800][ T3352] binder: 3338:3352 ioctl c0306201 0 returned -14 [ 183.255426][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.277364][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 183.296181][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.345693][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 183.354296][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.376255][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 183.399214][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.441346][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 183.506721][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 183.620763][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.661802][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.674646][ T3357] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 183.709970][ T3361] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 183.760549][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.412087][ T3368] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noinit_itable,noload,,errors=continue [ 184.469827][ T23] audit: type=1400 audit(1743784110.574:517): avc: denied { map } for pid=3366 comm="syz.2.764" path="/143/file1/bus" dev="devtmpfs" ino=9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.514095][ T3368] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 184.635916][ T3368] EXT4-fs error (device loop2): mb_free_blocks:1458: group 0, inode 19: block 336:freeing already freed block (bit 21); block bitmap corrupt. [ 184.651055][ T3368] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 14 vs 15 free clusters [ 185.184680][ T3387] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 185.187265][ T3398] FAULT_INJECTION: forcing a failure. [ 185.187265][ T3398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.197466][ T3387] ext4 filesystem being mounted at /109/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 185.222857][ T3398] CPU: 1 PID: 3398 Comm: syz.4.773 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 185.232865][ T3398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.242824][ T3398] Call Trace: [ 185.245980][ T3398] dump_stack+0x1d8/0x241 [ 185.250228][ T3398] ? panic+0x89d/0x89d [ 185.254130][ T3398] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 185.259849][ T3398] ? wp_page_copy+0x1077/0x1820 [ 185.264713][ T3398] ? __do_page_fault+0x509/0xbb0 [ 185.269661][ T3398] ? page_fault+0x2f/0x40 [ 185.273818][ T3398] should_fail+0x71f/0x880 [ 185.278364][ T3398] ? setup_fault_attr+0x3d0/0x3d0 [ 185.283496][ T3398] __alloc_pages_nodemask+0x1b4/0x840 [ 185.288705][ T3398] ? memset+0x1f/0x40 [ 185.292502][ T3398] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 185.297989][ T3398] ? anon_vma_interval_tree_insert+0x32e/0x3a0 [ 185.304064][ T3398] ? __anon_vma_prepare+0x3a6/0x420 [ 185.309227][ T3398] wp_page_copy+0x20f/0x1820 [ 185.313885][ T3398] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 185.319259][ T3398] ? check_preemption_disabled+0x153/0x320 [ 185.324999][ T3398] ? __kunmap_atomic+0x80/0x80 [ 185.329597][ T3398] ? _raw_spin_lock+0xa4/0x1b0 [ 185.334180][ T3398] ? _raw_spin_trylock_bh+0x190/0x190 [ 185.339605][ T3398] ? _raw_spin_unlock+0x49/0x60 [ 185.344497][ T3398] ? do_wp_page+0x4d7/0xae0 [ 185.348801][ T3398] handle_mm_fault+0x1888/0x4920 [ 185.353593][ T3398] ? finish_fault+0x230/0x230 [ 185.358097][ T3398] ? userfaultfd_unmap_prep+0x4c0/0x4c0 [ 185.363469][ T3398] ? down_read_trylock+0x179/0x1d0 [ 185.368421][ T3398] ? check_preemption_disabled+0x153/0x320 [ 185.374238][ T3398] __do_page_fault+0x509/0xbb0 [ 185.378838][ T3398] page_fault+0x2f/0x40 [ 185.382827][ T3398] RIP: 0033:0x7f17f45aabe3 [ 185.387483][ T3398] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 185.407280][ T3398] RSP: 002b:00007f17f2d514a0 EFLAGS: 00010202 [ 185.413257][ T3398] RAX: 0000000000000400 RBX: 00007f17f2d51540 RCX: 00007f17ea932000 [ 185.421155][ T3398] RDX: 00007f17f2d516e0 RSI: 0000000000000011 RDI: 00007f17f2d515e0 [ 185.429311][ T3398] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001d0 [ 185.437127][ T3398] R10: 00000000000001da R11: 00007f17f2d51540 R12: 0000000000000001 [ 185.444953][ T3398] R13: 00007f17f47843e0 R14: 0000000000000020 R15: 00007f17f2d515e0 [ 185.472364][ T3398] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 185.514833][ T3397] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue [ 185.549269][ T2068] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 185.558483][ T3398] EXT4-fs error (device loop4): __ext4_iget:5217: inode #3: block 127754: comm syz.4.773: invalid block [ 185.578483][ T3398] EXT4-fs error (device loop4): ext4_quota_enable:6059: comm syz.4.773: Bad quota inode: 3, type: 0 [ 185.644135][ T3398] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 185.659897][ T3398] EXT4-fs (loop4): mount failed [ 185.838209][ T2068] usb 3-1: Using ep0 maxpacket: 32 [ 185.861928][ T2637] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.891177][ T3407] FAT-fs (loop6): Directory bread(block 64) failed [ 185.905640][ T3407] FAT-fs (loop6): Directory bread(block 65) failed [ 185.913329][ T3407] FAT-fs (loop6): Directory bread(block 66) failed [ 185.920164][ T3407] FAT-fs (loop6): Directory bread(block 67) failed [ 185.933142][ T3407] FAT-fs (loop6): Directory bread(block 68) failed [ 185.941843][ T3407] FAT-fs (loop6): Directory bread(block 69) failed [ 185.948425][ T3407] FAT-fs (loop6): Directory bread(block 70) failed [ 185.954927][ T3407] FAT-fs (loop6): Directory bread(block 71) failed [ 185.961804][ T3407] FAT-fs (loop6): Directory bread(block 72) failed [ 185.978331][ T2068] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 185.988396][ T3407] FAT-fs (loop6): Directory bread(block 73) failed [ 185.996863][ T2068] usb 3-1: config 0 has no interface number 0 [ 186.028368][ T3410] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 186.047163][ T3410] EXT4-fs (loop4): invalid journal inode [ 186.058481][ T3410] EXT4-fs (loop4): can't get journal size [ 186.132185][ T3410] EXT4-fs (loop4): 1 truncate cleaned up [ 186.138276][ T3410] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 186.168303][ T2068] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 186.177855][ T2068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.186389][ T2068] usb 3-1: Product: syz [ 186.472484][ T2068] usb 3-1: Manufacturer: syz [ 186.477033][ T2068] usb 3-1: SerialNumber: syz [ 186.482882][ T2068] usb 3-1: config 0 descriptor?? [ 186.519225][ T2068] uvcvideo: Found UVC 0.00 device syz (19ab:1000) [ 186.537081][ T2068] uvcvideo: No valid video chain found. [ 188.681090][ T3437] binder_alloc: 3436: binder_alloc_buf, no vma [ 188.691322][ T1650] usb 3-1: USB disconnect, device number 21 [ 188.715530][ T3433] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 188.728438][ T3433] ext4 filesystem being mounted at /87/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 188.780129][ T399] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 188.857729][ T3443] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 188.858363][ T23] audit: type=1400 audit(1743784114.954:518): avc: denied { mount } for pid=3449 comm="syz.2.785" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 188.891619][ T3450] FAULT_INJECTION: forcing a failure. [ 188.891619][ T3450] name failslab, interval 1, probability 0, space 0, times 0 [ 188.958356][ T3450] CPU: 1 PID: 3450 Comm: syz.2.785 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 188.968801][ T3450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.979210][ T3450] Call Trace: [ 188.982626][ T3450] dump_stack+0x1d8/0x241 [ 188.986953][ T3450] ? panic+0x89d/0x89d [ 188.991204][ T3450] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 188.997213][ T3450] should_fail+0x71f/0x880 [ 189.001988][ T3450] ? setup_fault_attr+0x3d0/0x3d0 [ 189.007289][ T3450] ? security_file_alloc+0x24/0x120 [ 189.012533][ T3450] should_failslab+0x5/0x20 [ 189.013620][ T357] print_req_error: 20 callbacks suppressed [ 189.013632][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 189.016829][ T3450] kmem_cache_alloc+0x28/0x250 [ 189.016847][ T3450] security_file_alloc+0x24/0x120 [ 189.023650][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.034975][ T3450] __alloc_file+0xb1/0x310 [ 189.034985][ T3450] alloc_empty_file+0x92/0x180 [ 189.034995][ T3450] path_openat+0x103/0x34b0 [ 189.035008][ T3450] ? stack_trace_save+0x118/0x1c0 [ 189.035017][ T3450] ? _kstrtoull+0x390/0x4a0 [ 189.035026][ T3450] ? stack_trace_snprint+0x170/0x170 [ 189.035043][ T3450] ? kstrtouint_from_user+0x20a/0x2a0 [ 189.040039][ T357] buffer_io_error: 20 callbacks suppressed [ 189.040049][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 189.045222][ T3450] ? kstrtol_from_user+0x310/0x310 [ 189.056216][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.060226][ T3450] ? __kasan_kmalloc+0x1d9/0x210 [ 189.060237][ T3450] ? do_filp_open+0x450/0x450 [ 189.060246][ T3450] ? do_sys_open+0x357/0x810 [ 189.060255][ T3450] ? do_syscall_64+0xca/0x1c0 [ 189.060272][ T3450] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 189.068223][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 189.069258][ T3450] do_filp_open+0x20b/0x450 [ 189.074396][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.078700][ T3450] ? vfs_tmpfile+0x2c0/0x2c0 [ 189.078716][ T3450] ? _raw_spin_unlock+0x49/0x60 [ 189.078724][ T3450] ? __alloc_fd+0x4c5/0x570 [ 189.078736][ T3450] do_sys_open+0x39c/0x810 [ 189.078747][ T3450] ? check_preemption_disabled+0x153/0x320 [ 189.078764][ T3450] ? file_open_root+0x490/0x490 [ 189.078774][ T3450] ? fput_many+0x15e/0x1b0 [ 189.078784][ T3450] do_syscall_64+0xca/0x1c0 [ 189.078794][ T3450] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 189.078803][ T3450] RIP: 0033:0x7fac69e31169 [ 189.078819][ T3450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.094350][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 189.095020][ T3450] RSP: 002b:00007fac6849b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.095031][ T3450] RAX: ffffffffffffffda RBX: 00007fac6a049fa0 RCX: 00007fac69e31169 [ 189.095046][ T3450] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 189.113283][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.119663][ T3450] RBP: 00007fac6849b090 R08: 0000000000000000 R09: 0000000000000000 [ 189.119669][ T3450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.119675][ T3450] R13: 0000000000000000 R14: 00007fac6a049fa0 R15: 00007ffef93f7d38 [ 189.303889][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 189.312367][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.323468][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 189.378290][ T399] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.398201][ T399] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.408026][ T399] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 189.420629][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.438840][ T3458] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 189.449358][ T3458] EXT4-fs (loop2): invalid journal inode [ 189.455540][ T3458] EXT4-fs (loop2): can't get journal size [ 189.455685][ T399] usb 5-1: config 0 descriptor?? [ 189.485256][ T3458] EXT4-fs (loop2): 1 truncate cleaned up [ 189.491749][ T3458] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 189.565214][ T3466] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 189.783649][ T399] usb 5-1: USB disconnect, device number 26 [ 189.958581][ T3478] binder_alloc: 3477: binder_alloc_buf, no vma [ 189.959681][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 190.019889][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.053469][ T3480] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 190.122814][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 190.132297][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.144979][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 190.154983][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.167625][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 190.247019][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 190.268398][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 190.400280][ T3486] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 190.409916][ T3486] ext4 filesystem being mounted at /89/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 190.428271][ T125] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 190.436259][ T3490] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 190.459326][ T3490] EXT4-fs (loop1): invalid journal inode [ 190.728741][ T3486] EXT4-fs error (device loop7): ext4_ext_check_inode:543: inode #2: comm syz.7.796: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 190.749528][ T3494] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 190.762677][ T3494] ext4 filesystem being mounted at /153/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 190.968234][ T125] usb 7-1: Using ep0 maxpacket: 32 [ 191.088458][ T125] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 191.097274][ T125] usb 7-1: config 0 has no interface number 0 [ 191.172040][ T3513] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 191.341405][ T3518] binder_alloc: 3517: binder_alloc_buf, no vma [ 191.345552][ T125] usb 7-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 191.357678][ T125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.366372][ T125] usb 7-1: Product: syz [ 191.372009][ T125] usb 7-1: Manufacturer: syz [ 191.376532][ T125] usb 7-1: SerialNumber: syz [ 191.384333][ T125] usb 7-1: config 0 descriptor?? [ 191.500809][ T125] uvcvideo: Found UVC 0.00 device syz (19ab:1000) [ 191.507659][ T125] uvcvideo: No valid video chain found. [ 192.887495][ T3527] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 193.714698][ T3542] EXT4-fs (loop2): Unrecognized mount option "dax=never" or missing value [ 193.845996][ T23] audit: type=1400 audit(1743784119.894:519): avc: denied { bind } for pid=3541 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.866048][ T3544] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,errors=remount-ro,barrier=0x0000000000000003,nolazytime, [ 193.880125][ T3544] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 194.231364][ T1081] usb 7-1: USB disconnect, device number 13 [ 194.254912][ T3544] EXT4-fs error (device loop1): dx_make_map:1292: inode #2: block 20: comm syz.1.812: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 194.285010][ T3544] EXT4-fs (loop1): Remounting filesystem read-only [ 194.307147][ T3544] EXT4-fs error (device loop1) in do_split:2046: Corrupt filesystem [ 194.330787][ T3562] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 194.341968][ T3544] EXT4-fs error (device loop1) in ext4_evict_inode:276: Readonly filesystem [ 194.436088][ T23] audit: type=1400 audit(1743784120.534:520): avc: denied { read } for pid=3543 comm="syz.1.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.439536][ T3566] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 195.451688][ T3566] ext4 filesystem being mounted at /166/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 195.544728][ T3578] overlayfs: overlapping lowerdir path [ 196.158213][ T3554] F2FS-fs (loop7): invalid crc value [ 196.248585][ T1034] print_req_error: 26 callbacks suppressed [ 196.248600][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 196.273075][ T3554] F2FS-fs (loop7): Found nat_bits in checkpoint [ 196.285176][ T3589] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 196.296241][ T3589] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.309237][ T23] audit: type=1400 audit(1743784122.414:521): avc: denied { nlmsg_write } for pid=3600 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 196.311062][ T3589] F2FS-fs (loop1): invalid crc value [ 196.353949][ T3589] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.364091][ T3554] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 196.372659][ T3554] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 196.448422][ T3589] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.456169][ T3589] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.718643][ T3589] attempt to access beyond end of device [ 196.718643][ T3589] loop1: rw=0, want=71688, limit=40427 [ 196.733180][ T3589] attempt to access beyond end of device [ 196.733180][ T3589] loop1: rw=0, want=71688, limit=40427 [ 196.745144][ T3589] attempt to access beyond end of device [ 196.745144][ T3589] loop1: rw=0, want=71688, limit=40427 [ 196.768206][ T2068] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 196.817293][ T3589] attempt to access beyond end of device [ 196.817293][ T3589] loop1: rw=524288, want=69640, limit=40427 [ 196.848495][ T3589] attempt to access beyond end of device [ 196.848495][ T3589] loop1: rw=524288, want=69648, limit=40427 [ 196.884764][ T3589] attempt to access beyond end of device [ 196.884764][ T3589] loop1: rw=524288, want=69656, limit=40427 [ 196.897510][ T3589] attempt to access beyond end of device [ 196.897510][ T3589] loop1: rw=524288, want=69664, limit=40427 [ 196.910802][ T3589] attempt to access beyond end of device [ 196.910802][ T3589] loop1: rw=524288, want=69672, limit=40427 [ 196.928378][ T3589] attempt to access beyond end of device [ 196.928378][ T3589] loop1: rw=524288, want=69680, limit=40427 [ 196.940777][ T3589] attempt to access beyond end of device [ 196.940777][ T3589] loop1: rw=524288, want=69688, limit=40427 [ 197.028216][ T2068] usb 7-1: Using ep0 maxpacket: 32 [ 197.148367][ T2068] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 197.176463][ T2068] usb 7-1: config 0 has no interface number 0 [ 197.184257][ T358] F2FS-fs (loop1): Issue discard(8961, 8961, 255) failed, ret: -5 [ 197.358333][ T2068] usb 7-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 197.402265][ T2068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.419443][ T2068] usb 7-1: Product: syz [ 197.425051][ T3621] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 197.428545][ T2068] usb 7-1: Manufacturer: syz [ 197.448231][ T2068] usb 7-1: SerialNumber: syz [ 197.460567][ T2068] usb 7-1: config 0 descriptor?? [ 197.509001][ T2068] uvcvideo: Found UVC 0.00 device syz (19ab:1000) [ 197.515912][ T2068] uvcvideo: No valid video chain found. [ 197.970213][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 198.702111][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.990489][ T1034] buffer_io_error: 20 callbacks suppressed [ 198.990697][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.266043][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.317613][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.325701][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.336484][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.344577][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.355393][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.370550][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.403086][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.464600][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 199.492379][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.519716][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.742448][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 199.757770][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.766390][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 199.867980][ T3646] overlayfs: overlapping lowerdir path [ 200.556695][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 200.569289][ T5] usb 7-1: USB disconnect, device number 14 [ 200.598359][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 200.777350][ T3645] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 200.789710][ T3645] ext4 filesystem being mounted at /162/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 200.950162][ T399] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 201.136032][ T3663] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 201.156780][ T3663] EXT4-fs (loop7): Unsupported blocksize for fs encryption [ 201.585947][ T399] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.048286][ T399] usb 2-1: not running at top speed; connect to a high speed hub [ 202.142573][ T399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.246170][ T399] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.304873][ T399] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 202.358317][ T23] audit: type=1400 audit(1743784128.424:522): avc: denied { accept } for pid=3678 comm="syz.7.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.678613][ T399] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.737427][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.763850][ T3687] binder: 3671:3687 ioctl c0306201 0 returned -14 [ 202.782660][ T399] usb 2-1: Product: syz [ 202.863474][ T399] usb 2-1: Manufacturer: syz [ 202.896093][ T399] usb 2-1: SerialNumber: syz [ 203.187539][ T3693] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 203.418392][ T13] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 203.468446][ T399] usb 2-1: 0:2 : does not exist [ 203.515177][ T399] usb 2-1: USB disconnect, device number 19 [ 203.603355][ T3701] erofs: (device loop6): mounted with opts: , root inode @ nid 36. [ 203.764406][ T13] usb 8-1: Using ep0 maxpacket: 32 [ 203.898692][ T13] usb 8-1: config 0 has an invalid interface number: 96 but max is 0 [ 203.908055][ T13] usb 8-1: config 0 has no interface number 0 [ 204.162787][ T3708] incfs: Backing dir is not set, filesystem can't be mounted. [ 204.166002][ T1034] print_req_error: 29 callbacks suppressed [ 204.166016][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 204.170651][ T3708] incfs: mount failed -2 [ 204.176457][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.206090][ T1034] buffer_io_error: 21 callbacks suppressed [ 204.206106][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 204.208306][ T13] usb 8-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 204.219239][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.228613][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.228624][ T13] usb 8-1: Product: syz [ 204.228634][ T13] usb 8-1: Manufacturer: syz [ 204.228643][ T13] usb 8-1: SerialNumber: syz [ 204.229563][ T13] usb 8-1: config 0 descriptor?? [ 204.253452][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 204.272452][ T3711] fuse: Bad value for 'fd' [ 204.286611][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.305050][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 204.319018][ T13] uvcvideo: Found UVC 0.00 device syz (19ab:1000) [ 204.325425][ T13] uvcvideo: No valid video chain found. [ 204.340366][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.353153][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 204.388386][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.456110][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 205.814374][ T3715] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 205.822165][ T3715] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 205.832574][ T3715] F2FS-fs (loop2): invalid crc value [ 205.839871][ T3715] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.931665][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.963826][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.975854][ T3715] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 205.993168][ T3715] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.001003][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 206.070940][ T1081] usb 8-1: USB disconnect, device number 18 [ 206.081918][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.094536][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 206.105470][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.128286][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 206.136471][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 206.158358][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 206.201316][ T3742] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 206.282845][ T3715] handle_bad_sector: 509 callbacks suppressed [ 206.282860][ T3715] attempt to access beyond end of device [ 206.282860][ T3715] loop2: rw=0, want=71688, limit=40427 [ 206.318345][ T3715] attempt to access beyond end of device [ 206.318345][ T3715] loop2: rw=0, want=71688, limit=40427 [ 206.330687][ T3715] attempt to access beyond end of device [ 206.330687][ T3715] loop2: rw=0, want=71688, limit=40427 [ 206.356164][ T3715] attempt to access beyond end of device [ 206.356164][ T3715] loop2: rw=524288, want=69640, limit=40427 [ 206.400072][ T3715] attempt to access beyond end of device [ 206.400072][ T3715] loop2: rw=524288, want=69648, limit=40427 [ 206.462892][ T3715] attempt to access beyond end of device [ 206.462892][ T3715] loop2: rw=524288, want=69656, limit=40427 [ 206.531485][ T3715] attempt to access beyond end of device [ 206.531485][ T3715] loop2: rw=524288, want=69664, limit=40427 [ 206.590712][ T3715] attempt to access beyond end of device [ 206.590712][ T3715] loop2: rw=524288, want=69672, limit=40427 [ 206.607118][ T3754] binder: 3738:3754 ioctl c0306201 0 returned -14 [ 206.621094][ T3715] attempt to access beyond end of device [ 206.621094][ T3715] loop2: rw=524288, want=69680, limit=40427 [ 206.644371][ T3715] attempt to access beyond end of device [ 206.644371][ T3715] loop2: rw=524288, want=69688, limit=40427 [ 206.906207][ T359] F2FS-fs (loop2): Issue discard(8961, 8961, 255) failed, ret: -5 [ 207.422705][ T3770] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 207.594519][ T3777] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 207.596305][ T23] audit: type=1400 audit(1743784133.694:523): avc: denied { remount } for pid=3769 comm="syz.6.869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 207.606940][ T3777] ext4 filesystem being mounted at /101/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 207.707083][ T3770] EXT4-fs (loop6): re-mounted. Opts: (null) [ 207.749337][ T3784] loop2: p1 < > p4 [ 207.753887][ T3784] loop2: p4 size 8388608 extends beyond EOD, truncated [ 207.790161][ T164] loop2: p1 < > p4 [ 207.794654][ T164] loop2: p4 size 8388608 extends beyond EOD, truncated [ 207.871249][ T13] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 207.881464][ T3792] fuse: Bad value for 'fd' [ 208.098509][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 208.109923][ T1034] udevd[1034]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 208.151817][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 208.152006][ T1034] udevd[1034]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 208.182991][ T3795] netlink: 'syz.2.875': attribute type 4 has an invalid length. [ 208.214006][ T23] audit: type=1326 audit(1743784134.314:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac69e31169 code=0x0 [ 208.308492][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.358376][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 208.438733][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.470275][ T13] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 208.648428][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.668662][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.701541][ T13] usb 2-1: Product: syz [ 208.719535][ T13] usb 2-1: Manufacturer: syz [ 208.738523][ T13] usb 2-1: SerialNumber: syz [ 208.813394][ T3807] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 209.118421][ T13] usb 2-1: 0:2 : does not exist [ 209.134958][ T13] usb 2-1: USB disconnect, device number 20 [ 209.230700][ T3822] binder: 3816:3822 ioctl c0306201 0 returned -14 [ 209.580191][ T1034] print_req_error: 44 callbacks suppressed [ 209.580206][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.616631][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.641516][ T1034] buffer_io_error: 35 callbacks suppressed [ 209.641528][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 209.700133][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.768283][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 209.777513][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.791401][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 209.800439][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.827223][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 209.835863][ T1034] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.836023][ T3831] loop7: p1 < > p3 [ 209.847577][ T1034] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 209.893758][ T3831] loop7: p3 size 134217728 extends beyond EOD, truncated [ 209.973962][ T164] loop7: p1 < > p3 [ 210.004782][ T164] loop7: p3 size 134217728 extends beyond EOD, truncated [ 210.403100][ T3837] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 210.671021][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 210.673156][ T1034] udevd[1034]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 210.693712][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.694352][ T398] udevd[398]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 210.717167][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 210.732222][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.753257][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 210.762752][ T357] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.774515][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 210.784025][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 210.792520][ T357] Buffer I/O error on dev loop1p3, logical block 0, async page read [ 210.840321][ T3849] fuse: Bad value for 'fd' [ 210.868244][ T498] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 210.948236][ T1081] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 211.612745][ T3862] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 211.827127][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 211.836812][ T3864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'. [ 211.847666][ T3858] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 211.860573][ T3858] ext4 filesystem being mounted at /171/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 212.068968][ T498] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.077056][ T1081] usb 8-1: unable to get BOS descriptor or descriptor too short [ 212.108298][ T498] usb 5-1: not running at top speed; connect to a high speed hub [ 212.120626][ T1081] usb 8-1: not running at top speed; connect to a high speed hub [ 212.288355][ T498] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.298600][ T1081] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.309919][ T498] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.320844][ T1081] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.498863][ T1081] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.498910][ T498] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.517630][ T1081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.542042][ T1081] usb 8-1: Product: syz [ 212.551258][ T1081] usb 8-1: Manufacturer: syz [ 212.555814][ T1081] usb 8-1: SerialNumber: syz [ 212.562488][ T3883] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 212.574763][ T3883] ext4 filesystem being mounted at /172/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 212.629797][ T498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.639703][ T498] usb 5-1: Product: syz [ 212.643910][ T498] usb 5-1: Manufacturer: syz [ 212.649312][ T498] usb 5-1: SerialNumber: syz [ 212.779695][ T3891] loop1: p1 < > p3 [ 212.784484][ T3891] loop1: p3 size 134217728 extends beyond EOD, truncated [ 212.984187][ T3895] fuse: Bad value for 'fd' [ 213.053395][ T1081] usb 8-1: 0:2 : does not exist [ 213.062947][ T1081] usb 8-1: USB disconnect, device number 19 [ 213.077372][ T23] audit: type=1400 audit(1743784139.174:525): avc: denied { ioctl } for pid=3897 comm="syz.6.904" path="socket:[38464]" dev="sockfs" ino=38464 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.103434][ T23] audit: type=1400 audit(1743784139.184:526): avc: denied { setopt } for pid=3897 comm="syz.6.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.157751][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 213.167195][ T498] usb 5-1: 0:2 : does not exist [ 213.171951][ T3904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 213.179993][ T498] usb 5-1: USB disconnect, device number 27 [ 213.209689][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 213.369083][ T1034] udevd[1034]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.389732][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 213.443826][ T3920] FAULT_INJECTION: forcing a failure. [ 213.443826][ T3920] name failslab, interval 1, probability 0, space 0, times 0 [ 213.457762][ T3920] CPU: 0 PID: 3920 Comm: syz.7.913 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 213.467635][ T3920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.477976][ T3920] Call Trace: [ 213.481656][ T3920] dump_stack+0x1d8/0x241 [ 213.486310][ T3920] ? panic+0x89d/0x89d [ 213.490456][ T3920] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 213.496097][ T3920] should_fail+0x71f/0x880 [ 213.500450][ T3920] ? setup_fault_attr+0x3d0/0x3d0 [ 213.505486][ T3920] ? __alloc_skb+0x7a/0x4d0 [ 213.509839][ T3920] should_failslab+0x5/0x20 [ 213.514754][ T3920] kmem_cache_alloc+0x28/0x250 [ 213.519551][ T3920] __alloc_skb+0x7a/0x4d0 [ 213.523827][ T3920] ? netlink_autobind+0x143/0x180 [ 213.528678][ T3920] netlink_sendmsg+0x797/0xcf0 [ 213.533367][ T3920] ? netlink_getsockopt+0x550/0x550 [ 213.538570][ T3920] ? import_iovec+0x1bb/0x380 [ 213.543329][ T3920] ? security_socket_sendmsg+0x7d/0xa0 [ 213.548594][ T3920] ? netlink_getsockopt+0x550/0x550 [ 213.553634][ T3920] ____sys_sendmsg+0x5ac/0x8f0 [ 213.558370][ T3920] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 213.563357][ T3920] ? proc_fail_nth_read+0x210/0x210 [ 213.568487][ T3920] __sys_sendmsg+0x28b/0x380 [ 213.572911][ T3920] ? ____sys_sendmsg+0x8f0/0x8f0 [ 213.577687][ T3920] ? check_preemption_disabled+0x9f/0x320 [ 213.583412][ T3920] ? fput_many+0x15e/0x1b0 [ 213.587835][ T3920] ? check_preemption_disabled+0x153/0x320 [ 213.593590][ T3920] ? __do_page_fault+0x725/0xbb0 [ 213.598340][ T3920] do_syscall_64+0xca/0x1c0 [ 213.602766][ T3920] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 213.608788][ T3920] RIP: 0033:0x7f7d8b1cd169 [ 213.612998][ T3920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.632767][ T3920] RSP: 002b:00007f7d89837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.641127][ T3920] RAX: ffffffffffffffda RBX: 00007f7d8b3e5fa0 RCX: 00007f7d8b1cd169 [ 213.649278][ T3920] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 213.657332][ T3920] RBP: 00007f7d89837090 R08: 0000000000000000 R09: 0000000000000000 [ 213.665518][ T3920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.673591][ T3920] R13: 0000000000000000 R14: 00007f7d8b3e5fa0 R15: 00007fff219a7738 [ 213.748227][ T5] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 213.806098][ T3929] binder: BINDER_SET_CONTEXT_MGR already set [ 213.812367][ T3929] binder: 3928:3929 ioctl 4018620d 200000000180 returned -16 [ 213.873693][ T3932] fuse: Bad value for 'fd' [ 214.128931][ T5] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 214.146305][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.159339][ T5] usb 2-1: config 0 descriptor?? [ 214.326717][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 214.338039][ T3937] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 214.343766][ T3940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 214.346230][ T3937] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 214.369992][ T3937] F2FS-fs (loop6): invalid crc value [ 214.377058][ T3937] F2FS-fs (loop6): Found nat_bits in checkpoint [ 214.407171][ T3937] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 214.414378][ T3937] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 214.487367][ T3937] handle_bad_sector: 509 callbacks suppressed [ 214.487380][ T3937] attempt to access beyond end of device [ 214.487380][ T3937] loop6: rw=0, want=71688, limit=40427 [ 214.504360][ T5] usb 2-1: Cannot read MAC address [ 214.506398][ T3937] attempt to access beyond end of device [ 214.506398][ T3937] loop6: rw=0, want=71688, limit=40427 [ 214.509616][ T5] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 214.521661][ T3937] attempt to access beyond end of device [ 214.521661][ T3937] loop6: rw=0, want=71688, limit=40427 [ 214.530592][ T5] usb 2-1: USB disconnect, device number 21 [ 214.555561][ T3937] attempt to access beyond end of device [ 214.555561][ T3937] loop6: rw=524288, want=69640, limit=40427 [ 214.567833][ T3937] attempt to access beyond end of device [ 214.567833][ T3937] loop6: rw=524288, want=69648, limit=40427 [ 214.579473][ T3937] attempt to access beyond end of device [ 214.579473][ T3937] loop6: rw=524288, want=69656, limit=40427 [ 214.591271][ T3937] attempt to access beyond end of device [ 214.591271][ T3937] loop6: rw=524288, want=69664, limit=40427 [ 214.619846][ T3937] attempt to access beyond end of device [ 214.619846][ T3937] loop6: rw=524288, want=69672, limit=40427 [ 214.634097][ T3937] attempt to access beyond end of device [ 214.634097][ T3937] loop6: rw=524288, want=69680, limit=40427 [ 214.635930][ T3948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 214.646500][ T3937] attempt to access beyond end of device [ 214.646500][ T3937] loop6: rw=524288, want=69688, limit=40427 [ 214.672790][ T3952] overlayfs: unrecognized mount option "\" or missing value [ 214.784989][ T3962] binder: BINDER_SET_CONTEXT_MGR already set [ 214.791378][ T3962] binder: 3961:3962 ioctl 4018620d 200000000180 returned -16 [ 214.802099][ T1203] F2FS-fs (loop6): Issue discard(8961, 8961, 255) failed, ret: -5 [ 215.011082][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 215.028298][ T498] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 215.058335][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 215.078314][ T5] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 215.384000][ T3987] fuse: Bad value for 'fd' [ 215.448255][ T5] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.458219][ T5] usb 3-1: config 0 has no interface number 0 [ 215.470489][ T5] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.491820][ T5] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.511823][ T5] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 215.530485][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.548603][ T5] usb 3-1: config 0 descriptor?? [ 215.598286][ T498] usb 8-1: unable to get BOS descriptor or descriptor too short [ 215.638340][ T498] usb 8-1: not running at top speed; connect to a high speed hub [ 215.758438][ T498] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.768383][ T498] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.938732][ T498] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.055506][ T3994] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 216.178336][ T498] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.186583][ T498] usb 8-1: Product: syz [ 216.190864][ T498] usb 8-1: Manufacturer: syz [ 216.195464][ T498] usb 8-1: SerialNumber: syz [ 216.199123][ T3997] EXT4-fs (loop1): Ignoring removed bh option [ 216.211218][ T3997] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,nolazytime,,errors=continue [ 216.222220][ T3997] ext4 filesystem being mounted at /229/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 216.268337][ T5] usbhid 3-1:0.1: can't add hid device: -71 [ 216.274507][ T5] usbhid: probe of 3-1:0.1 failed with error -71 [ 216.282535][ T5] usb 3-1: USB disconnect, device number 22 [ 216.563594][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 216.698370][ T498] usb 8-1: 0:2 : does not exist [ 216.708674][ T498] usb 8-1: USB disconnect, device number 20 [ 216.886653][ T4035] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 217.860629][ T4045] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 217.873740][ T4045] ext4 filesystem being mounted at /110/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 217.946545][ T4052] __nla_validate_parse: 1 callbacks suppressed [ 217.946553][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 218.041067][ T4052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 218.622400][ T4062] IPv6: addrconf: prefix option has invalid lifetime [ 218.772291][ T4044] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 218.802738][ T4044] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 218.859749][ T4044] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.952848][ T4044] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 218.963216][ T4073] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 218.968229][ T4044] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.980705][ T4079] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 219.108310][ T23] audit: type=1400 audit(1743784145.174:527): avc: denied { create } for pid=4072 comm="syz.7.958" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 219.130930][ T23] audit: type=1400 audit(1743784145.174:528): avc: denied { write } for pid=4072 comm="syz.7.958" name=E91F7189591E9233614B dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 219.268185][ T1081] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 219.628302][ T1650] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 219.898267][ T1081] usb 7-1: unable to get BOS descriptor or descriptor too short [ 219.978715][ T1081] usb 7-1: not running at top speed; connect to a high speed hub [ 220.069899][ T1081] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.178375][ T1650] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.214209][ T1081] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.274930][ T1650] usb 8-1: config 1 interface 0 has no altsetting 0 [ 220.330280][ T4107] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 220.342682][ T4107] ext4 filesystem being mounted at /197/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 220.459972][ T4115] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 220.488334][ T1081] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.554562][ T4117] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 220.593106][ T1081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.601562][ T1081] usb 7-1: Product: syz [ 220.605704][ T1081] usb 7-1: Manufacturer: syz [ 220.611473][ T1081] usb 7-1: SerialNumber: syz [ 221.098270][ T1650] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.216130][ T1650] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.224550][ T1650] usb 8-1: Product: syz [ 221.229000][ T1650] usb 8-1: Manufacturer: syz [ 221.233593][ T1650] usb 8-1: SerialNumber: syz [ 221.377646][ T1081] usb 7-1: 0:2 : does not exist [ 221.382737][ T1081] usb 7-1: unit 0 not found! [ 221.393909][ T1081] usb 7-1: USB disconnect, device number 15 [ 221.465511][ T23] audit: type=1400 audit(1743784147.564:529): avc: denied { getopt } for pid=4127 comm="syz.4.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.608822][ T1034] udevd[1034]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.663460][ T1650] usb 8-1: USB disconnect, device number 21 [ 221.683567][ T4135] binder: 4122:4135 ioctl c0306201 0 returned -14 [ 221.895470][ T108] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 221.968265][ T498] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 222.138512][ T108] usb 5-1: Using ep0 maxpacket: 32 [ 222.218440][ T1081] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 222.302554][ T108] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 222.312255][ T108] usb 5-1: config 0 has no interface number 0 [ 222.388263][ T498] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.428258][ T498] usb 2-1: not running at top speed; connect to a high speed hub [ 222.724746][ T4153] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 222.730065][ T498] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 222.745312][ T4153] ext4 filesystem being mounted at /188/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 222.756306][ T498] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 222.767529][ T1081] usb 7-1: Using ep0 maxpacket: 32 [ 222.773910][ T498] usb 2-1: config 4 has no interface number 0 [ 222.808363][ T108] usb 5-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.da [ 222.817841][ T108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.826057][ T108] usb 5-1: Product: syz [ 222.830578][ T108] usb 5-1: Manufacturer: syz [ 222.835075][ T108] usb 5-1: SerialNumber: syz [ 222.841772][ T108] usb 5-1: config 0 descriptor?? [ 222.879177][ T108] uvcvideo: Found UVC 0.00 device syz (19ab:1000) [ 222.885668][ T108] uvcvideo: No valid video chain found. [ 222.891379][ T1081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.903532][ T1081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.918031][ T1081] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 222.927865][ T1081] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.941086][ T498] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 222.950505][ T1081] usb 7-1: config 0 descriptor?? [ 222.955585][ T498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.964628][ T498] usb 2-1: Product: syz [ 222.969338][ T498] usb 2-1: Manufacturer: syz [ 222.973922][ T498] usb 2-1: SerialNumber: syz [ 223.499904][ T1081] savu 0003:1E7D:2D5A.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 224.519348][ T498] usb 2-1: USB disconnect, device number 22 [ 224.908201][ T399] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 225.099141][ T4185] F2FS-fs (loop7): Unrecognized mount option "~EHwYn5L[IEfaЍ*Fwcv*z.Zxx`k n6 *]00000000000000000000000" or missing value [ 225.202152][ T4193] binder: 4186:4193 ioctl c0306201 0 returned -14 [ 225.388246][ T399] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.428300][ T399] usb 3-1: not running at top speed; connect to a high speed hub [ 225.538303][ T399] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.563469][ T399] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.758296][ T399] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.774711][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.817137][ T399] usb 3-1: Product: syz [ 225.824732][ T399] usb 3-1: Manufacturer: syz [ 225.832322][ T399] usb 3-1: SerialNumber: syz [ 225.875030][ T4203] 9pnet: Insufficient options for proto=fd [ 226.008862][ T1081] usb 7-1: USB disconnect, device number 16 [ 226.275270][ T4211] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 226.320917][ T4213] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 226.333540][ T4213] ext4 filesystem being mounted at /122/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 226.388895][ T399] usb 3-1: 0:2 : does not exist [ 226.401600][ T399] usb 3-1: unit 0 not found! [ 226.451180][ T399] usb 3-1: USB disconnect, device number 23 [ 226.484396][ T2068] usb 5-1: USB disconnect, device number 28 [ 227.098317][ T1034] udevd[1034]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.267248][ T4239] netlink: 'syz.1.999': attribute type 4 has an invalid length. [ 227.297472][ T23] audit: type=1326 audit(1743784153.394:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37bf9b9169 code=0x0 [ 227.523644][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.995'. [ 228.079503][ T4257] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 228.401145][ T4251] binder: 4246:4251 ioctl c0306201 0 returned -14 [ 228.650298][ T4264] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 230.074647][ T4270] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 230.086928][ T4270] ext4 filesystem being mounted at /151/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 230.178582][ T4285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 230.349148][ T23] audit: type=1400 audit(1743784156.444:531): avc: denied { execute } for pid=4286 comm="syz.7.1013" path="/proc/bus/input/devices" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 230.381795][ T1081] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 230.506362][ T4301] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 231.048531][ T1081] usb 2-1: unable to get BOS descriptor or descriptor too short [ 231.267521][ T4311] binder: 4310:4311 ioctl 4018620d 0 returned -22 [ 231.289716][ T1081] usb 2-1: not running at top speed; connect to a high speed hub [ 231.408273][ T1081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.425137][ T1081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.435774][ T4320] binder: 4307:4320 ioctl c0306201 0 returned -14 [ 231.522979][ T4318] FAULT_INJECTION: forcing a failure. [ 231.522979][ T4318] name failslab, interval 1, probability 0, space 0, times 0 [ 231.562630][ T4318] CPU: 0 PID: 4318 Comm: syz.7.1023 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 231.572535][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.582434][ T4318] Call Trace: [ 231.585573][ T4318] dump_stack+0x1d8/0x241 [ 231.589726][ T4318] ? panic+0x89d/0x89d [ 231.593715][ T4318] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 231.599368][ T4318] ? proc_fail_nth_read+0x210/0x210 [ 231.604609][ T4318] should_fail+0x71f/0x880 [ 231.608939][ T4318] ? setup_fault_attr+0x3d0/0x3d0 [ 231.613809][ T4318] ? check_preemption_disabled+0x9f/0x320 [ 231.619359][ T4318] ? debug_smp_processor_id+0x20/0x20 [ 231.624566][ T4318] ? getname_flags+0xb8/0x4e0 [ 231.629103][ T4318] should_failslab+0x5/0x20 [ 231.633593][ T4318] kmem_cache_alloc+0x28/0x250 [ 231.638198][ T4318] getname_flags+0xb8/0x4e0 [ 231.642526][ T4318] ? __sb_end_write+0xc4/0x120 [ 231.647246][ T4318] do_sys_open+0x357/0x810 [ 231.651501][ T4318] ? check_preemption_disabled+0x153/0x320 [ 231.657254][ T4318] ? file_open_root+0x490/0x490 [ 231.662119][ T4318] do_syscall_64+0xca/0x1c0 [ 231.666397][ T4318] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 231.672156][ T4318] RIP: 0033:0x7f7d8b1cd169 [ 231.676378][ T4318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.695911][ T4318] RSP: 002b:00007f7d89837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.704165][ T4318] RAX: ffffffffffffffda RBX: 00007f7d8b3e5fa0 RCX: 00007f7d8b1cd169 [ 231.711974][ T4318] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c [ 231.718873][ T1081] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.719775][ T4318] RBP: 00007f7d89837090 R08: 0000000000000000 R09: 0000000000000000 [ 231.719781][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.719795][ T4318] R13: 0000000000000000 R14: 00007f7d8b3e5fa0 R15: 00007fff219a7738 [ 231.739450][ T1081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.778203][ T1081] usb 2-1: Product: syz [ 231.782304][ T1081] usb 2-1: Manufacturer: syz [ 231.786721][ T1081] usb 2-1: SerialNumber: syz [ 232.420926][ T4337] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 232.561895][ T1081] usb 2-1: 0:2 : does not exist [ 232.598277][ T1081] usb 2-1: unit 0 not found! [ 232.655942][ T4328] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 232.679942][ T4332] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 232.686874][ T1081] usb 2-1: USB disconnect, device number 23 [ 232.692135][ T4332] ext4 filesystem being mounted at /210/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 232.810253][ T4339] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 232.820510][ T4339] ext4 filesystem being mounted at /200/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 232.835714][ T4339] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1028: path /200/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 232.865670][ T4339] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 4: comm syz.2.1028: path /200/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 233.011778][ T4347] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1028'. [ 233.029163][ T1034] udevd[1034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.047379][ T4339] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.1028: path /200/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 233.398179][ T13] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 233.468813][ T4367] loop6: p1 < > p3 [ 233.487682][ T4367] loop6: p3 size 134217728 extends beyond EOD, truncated [ 233.615849][ T4354] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 233.631606][ T4354] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 233.648018][ T4354] F2FS-fs (loop4): invalid crc value [ 233.655127][ T4354] F2FS-fs (loop4): Found nat_bits in checkpoint [ 233.699790][ T4354] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 233.706777][ T4354] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 233.892802][ T4387] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 234.103495][ T13] usb 8-1: unable to get BOS descriptor or descriptor too short [ 234.143936][ T4354] handle_bad_sector: 511 callbacks suppressed [ 234.143948][ T4354] attempt to access beyond end of device [ 234.143948][ T4354] loop4: rw=0, want=71688, limit=40427 [ 234.161954][ T4354] attempt to access beyond end of device [ 234.161954][ T4354] loop4: rw=0, want=71688, limit=40427 [ 234.168253][ T13] usb 8-1: not running at top speed; connect to a high speed hub [ 234.173235][ T4354] attempt to access beyond end of device [ 234.173235][ T4354] loop4: rw=0, want=71688, limit=40427 [ 234.214067][ T4354] attempt to access beyond end of device [ 234.214067][ T4354] loop4: rw=524288, want=69640, limit=40427 [ 234.226785][ T4354] attempt to access beyond end of device [ 234.226785][ T4354] loop4: rw=524288, want=69648, limit=40427 [ 234.288272][ T13] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 234.299873][ T13] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 234.307255][ T4354] attempt to access beyond end of device [ 234.307255][ T4354] loop4: rw=524288, want=69656, limit=40427 [ 234.321455][ T13] usb 8-1: config 4 has no interface number 0 [ 234.322886][ T4354] attempt to access beyond end of device [ 234.322886][ T4354] loop4: rw=524288, want=69664, limit=40427 [ 235.846257][ T4354] attempt to access beyond end of device [ 235.846257][ T4354] loop4: rw=524288, want=69672, limit=40427 [ 235.858686][ T4354] attempt to access beyond end of device [ 235.858686][ T4354] loop4: rw=524288, want=69680, limit=40427 [ 235.870810][ T4354] attempt to access beyond end of device [ 235.870810][ T4354] loop4: rw=524288, want=69688, limit=40427 [ 235.904545][ T13] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 235.914120][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.922311][ T13] usb 8-1: Product: syz [ 235.926288][ T13] usb 8-1: Manufacturer: syz [ 235.930757][ T13] usb 8-1: SerialNumber: syz [ 235.954538][ T4397] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 235.966764][ T4397] ext4 filesystem being mounted at /252/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 236.028450][ T361] F2FS-fs (loop4): Issue discard(8961, 8961, 255) failed, ret: -5 [ 236.095897][ T4408] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 236.411740][ T108] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 236.497557][ T4416] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 236.698283][ T13] uvcvideo: Found UVC 0.02 device syz (04f2:b746) [ 236.704694][ T13] uvcvideo: No valid video chain found. [ 236.720574][ T13] usb 8-1: USB disconnect, device number 22 [ 237.102281][ T4418] FAT-fs (loop2): Directory bread(block 11554) failed [ 237.109077][ T4418] FAT-fs (loop2): Directory bread(block 11555) failed [ 237.115836][ T4418] FAT-fs (loop2): Directory bread(block 11556) failed [ 237.122887][ T4418] FAT-fs (loop2): Directory bread(block 11557) failed [ 237.138415][ T4418] FAT-fs (loop2): Directory bread(block 11558) failed [ 237.150532][ T4418] FAT-fs (loop2): Directory bread(block 11559) failed [ 237.177892][ T4418] FAT-fs (loop2): Directory bread(block 11560) failed [ 237.185750][ T4418] FAT-fs (loop2): Directory bread(block 11561) failed [ 237.194381][ T4418] FAT-fs (loop2): Directory bread(block 11562) failed [ 237.204073][ T4418] FAT-fs (loop2): Directory bread(block 11563) failed [ 237.247390][ T4424] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 237.519904][ T108] usb 7-1: unable to get BOS descriptor or descriptor too short [ 237.568244][ T108] usb 7-1: not running at top speed; connect to a high speed hub [ 237.658626][ T108] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.669303][ T108] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.850618][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 237.898173][ T498] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 237.948769][ T108] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.957523][ T4441] netlink: 'syz.4.1053': attribute type 4 has an invalid length. [ 237.963194][ T108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.982555][ T4443] x_tables: duplicate entry at hook 1 [ 237.984096][ T108] usb 7-1: Product: syz [ 237.992257][ T23] audit: type=1326 audit(1743784164.084:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.4.1053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17f46e8169 code=0x0 [ 238.042974][ T108] usb 7-1: Manufacturer: syz [ 238.087647][ T108] usb 7-1: SerialNumber: syz [ 238.278294][ T498] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 238.287210][ T498] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.297770][ T498] usb 3-1: config 0 has no interface number 0 [ 238.304349][ T498] usb 3-1: config 0 interface 39 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.483819][ T498] usb 3-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 238.494527][ T108] usb 7-1: 0:2 : does not exist [ 238.500373][ T108] usb 7-1: unit 0 not found! [ 238.509564][ T498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.530502][ T108] usb 7-1: USB disconnect, device number 17 [ 238.537116][ T498] usb 3-1: Product: syz [ 238.543726][ T498] usb 3-1: Manufacturer: syz [ 238.543965][ T1034] udevd[1034]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.549231][ T498] usb 3-1: SerialNumber: syz [ 238.579025][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1055'. [ 238.590291][ T498] usb 3-1: config 0 descriptor?? [ 238.630132][ T4451] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 238.789992][ T23] audit: type=1400 audit(1743784164.894:533): avc: denied { read } for pid=4455 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.791615][ T4447] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 238.825837][ T4447] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 238.949824][ T4447] F2FS-fs (loop1): invalid crc value [ 239.139426][ T4447] F2FS-fs (loop1): Found nat_bits in checkpoint [ 239.186453][ T4447] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 239.194149][ T4447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.238343][ T4467] EXT4-fs error (device loop6) in ext4_do_update_inode:5534: error 27 [ 239.247688][ T4467] EXT4-fs error (device loop6) in ext4_do_update_inode:5534: error 27 [ 239.258495][ T4467] Quota error (device loop6): write_blk: dquota write failed [ 239.265912][ T4467] Quota error (device loop6): qtree_write_dquot: Error -27 occurred while creating quota [ 239.278073][ T4467] EXT4-fs (loop6): 1 orphan inode deleted [ 239.283744][ T4467] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 239.295643][ T498] usb 3-1: USB disconnect, device number 24 [ 239.301929][ T4467] ext4 filesystem being mounted at /158/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 239.313102][ T4447] handle_bad_sector: 508 callbacks suppressed [ 239.313114][ T4447] attempt to access beyond end of device [ 239.313114][ T4447] loop1: rw=0, want=71688, limit=40427 [ 239.335957][ T4447] attempt to access beyond end of device [ 239.335957][ T4447] loop1: rw=0, want=71688, limit=40427 [ 239.347693][ T4447] attempt to access beyond end of device [ 239.347693][ T4447] loop1: rw=0, want=71688, limit=40427 [ 239.363191][ T4447] attempt to access beyond end of device [ 239.363191][ T4447] loop1: rw=524288, want=69640, limit=40427 [ 239.375056][ T4447] attempt to access beyond end of device [ 239.375056][ T4447] loop1: rw=524288, want=69648, limit=40427 [ 239.397278][ T4447] attempt to access beyond end of device [ 239.397278][ T4447] loop1: rw=524288, want=69656, limit=40427 [ 239.417397][ T4447] attempt to access beyond end of device [ 239.417397][ T4447] loop1: rw=524288, want=69664, limit=40427 [ 239.439099][ T4447] attempt to access beyond end of device [ 239.439099][ T4447] loop1: rw=524288, want=69672, limit=40427 [ 239.466409][ T4447] attempt to access beyond end of device [ 239.466409][ T4447] loop1: rw=524288, want=69680, limit=40427 [ 239.478337][ T4447] attempt to access beyond end of device [ 239.478337][ T4447] loop1: rw=524288, want=69688, limit=40427 [ 239.699589][ T358] F2FS-fs (loop1): Issue discard(8961, 8961, 255) failed, ret: -5 [ 240.050937][ T4494] syz.7.1066[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.088995][ T4494] syz.7.1066[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.583257][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1068'. [ 240.863325][ T5] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 240.943991][ T4510] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 240.952904][ T4510] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 240.968906][ T4510] F2FS-fs (loop6): Found nat_bits in checkpoint [ 241.027466][ T4510] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 241.047562][ T4510] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 241.058319][ T4510] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 241.268640][ T5] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.308259][ T5] usb 5-1: not running at top speed; connect to a high speed hub [ 241.398342][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.420120][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.598378][ T5] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.624275][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.649923][ T5] usb 5-1: Product: syz [ 241.662929][ T5] usb 5-1: Manufacturer: syz [ 241.677561][ T5] usb 5-1: SerialNumber: syz [ 241.919758][ T23] audit: type=1400 audit(1743784168.024:534): avc: denied { mounton } for pid=4537 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 241.993566][ T103] device bridge_slave_1 left promiscuous mode [ 242.004224][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.018743][ T103] device bridge_slave_0 left promiscuous mode [ 242.030383][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.058334][ T5] usb 5-1: 0:2 : does not exist [ 242.063398][ T5] usb 5-1: unit 0 not found! [ 242.110094][ T5] usb 5-1: USB disconnect, device number 29 [ 242.224184][ T4544] syz.1.1082[4544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.224253][ T4544] syz.1.1082[4544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.393743][ T4539] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 242.444908][ T4539] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 242.581026][ T4539] F2FS-fs (loop7): Found nat_bits in checkpoint [ 242.685503][ T4559] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 242.892258][ T4539] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 242.909449][ T4539] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 243.262857][ T4570] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 244.084078][ T4584] binder: BINDER_SET_CONTEXT_MGR already set [ 244.105131][ T4584] binder: 4582:4584 ioctl 4018620d 200000000180 returned -16 [ 244.731724][ T4600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 244.778362][ T18] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 244.810736][ T4612] xt_hashlimit: size too large, truncated to 1048576 [ 245.178356][ T18] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.211899][ T4617] netlink: 'syz.7.1099': attribute type 10 has an invalid length. [ 245.228412][ T18] usb 2-1: not running at top speed; connect to a high speed hub [ 245.280912][ T4619] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 245.280912][ T4619] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 245.280912][ T4619] [ 245.355417][ T4619] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,nolazytime,,errors=continue [ 245.366384][ T4619] ext4 filesystem being mounted at /224/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 245.374936][ T18] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.387115][ T18] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.819102][ T18] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.829729][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.837569][ T18] usb 2-1: Product: syz [ 245.841726][ T18] usb 2-1: Manufacturer: syz [ 245.846554][ T18] usb 2-1: SerialNumber: syz [ 246.037854][ T23] audit: type=1400 audit(1743784172.134:535): avc: denied { read } for pid=4635 comm="syz.4.1104" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.258397][ T18] usb 2-1: 0:2 : does not exist [ 246.263503][ T18] usb 2-1: unit 0 not found! [ 246.281014][ T18] usb 2-1: USB disconnect, device number 24 [ 247.383233][ T4645] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 247.388232][ T18] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 247.402334][ T4645] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 247.415209][ T4645] F2FS-fs (loop2): invalid crc value [ 247.428459][ T4645] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.479587][ T4645] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 247.486494][ T4645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.586293][ T4645] handle_bad_sector: 509 callbacks suppressed [ 247.586302][ T4645] attempt to access beyond end of device [ 247.586302][ T4645] loop2: rw=0, want=71688, limit=40427 [ 247.604394][ T4645] attempt to access beyond end of device [ 247.604394][ T4645] loop2: rw=0, want=71688, limit=40427 [ 247.615884][ T4645] attempt to access beyond end of device [ 247.615884][ T4645] loop2: rw=0, want=71688, limit=40427 [ 247.631074][ T4645] attempt to access beyond end of device [ 247.631074][ T4645] loop2: rw=524288, want=69640, limit=40427 [ 247.642903][ T4645] attempt to access beyond end of device [ 247.642903][ T4645] loop2: rw=524288, want=69648, limit=40427 [ 247.655040][ T4645] attempt to access beyond end of device [ 247.655040][ T4645] loop2: rw=524288, want=69656, limit=40427 [ 247.667032][ T4645] attempt to access beyond end of device [ 247.667032][ T4645] loop2: rw=524288, want=69664, limit=40427 [ 247.679792][ T4645] attempt to access beyond end of device [ 247.679792][ T4645] loop2: rw=524288, want=69672, limit=40427 [ 247.698883][ T4645] attempt to access beyond end of device [ 247.698883][ T4645] loop2: rw=524288, want=69680, limit=40427 [ 247.718494][ T4645] attempt to access beyond end of device [ 247.718494][ T4645] loop2: rw=524288, want=69688, limit=40427 [ 247.778309][ T18] usb 2-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config [ 247.791737][ T18] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.806124][ T18] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 247.815468][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.825877][ T18] usb 2-1: config 0 descriptor?? [ 247.869119][ T18] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 247.960137][ T359] F2FS-fs (loop2): Issue discard(8961, 8961, 255) failed, ret: -5 [ 248.239465][ T4667] netlink: 'syz.7.1110': attribute type 4 has an invalid length. [ 248.288113][ T23] audit: type=1326 audit(1743784174.384:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.7.1110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8b1cd169 code=0x0 [ 248.340851][ T23] audit: type=1400 audit(1743784174.444:537): avc: denied { connect } for pid=4673 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.836222][ T18] usb 2-1: USB disconnect, device number 25 [ 249.293098][ T4684] fuse: Bad value for 'fd' [ 249.452230][ T4686] loop7: p1 < > p3 [ 249.456613][ T4692] FAT-fs (loop1): Unrecognized mount option "uni_xlatset=cp1251" or missing value [ 249.469182][ T4686] loop7: p3 size 134217728 extends beyond EOD, truncated [ 249.481689][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 249.581992][ T4696] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 249.912824][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 250.084301][ T398] udevd[398]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 250.084318][ T1034] udevd[1034]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 250.829677][ T4711] usb usb1: usbfs: process 4711 (syz.7.1118) did not claim interface 0 before use [ 250.844209][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 250.871200][ T4715] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1120'. [ 250.882619][ T4707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4707 comm=syz.2.1117 [ 251.128331][ T5] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 251.352250][ T4722] erofs: (device loop2): erofs_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 251.518264][ T5] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.638312][ T5] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 251.646516][ T5] usb 2-1: can't read configurations, error -71 [ 252.260926][ T23] audit: type=1400 audit(1743784178.364:538): avc: denied { ioctl } for pid=4730 comm="syz.1.1123" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9398 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.251706][ T4748] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 253.264092][ T4748] ext4 filesystem being mounted at /222/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 253.355800][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 253.443494][ T4733] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 253.478371][ T4733] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 253.489015][ T4733] F2FS-fs (loop7): invalid crc value [ 253.506901][ T4733] F2FS-fs (loop7): Found nat_bits in checkpoint [ 253.546770][ T4733] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 253.554275][ T4733] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 253.619400][ T4733] handle_bad_sector: 509 callbacks suppressed [ 253.619410][ T4733] attempt to access beyond end of device [ 253.619410][ T4733] loop7: rw=0, want=71688, limit=40427 [ 253.637171][ T4733] attempt to access beyond end of device [ 253.637171][ T4733] loop7: rw=0, want=71688, limit=40427 [ 253.648311][ T4733] attempt to access beyond end of device [ 253.648311][ T4733] loop7: rw=0, want=71688, limit=40427 [ 253.662578][ T4733] attempt to access beyond end of device [ 253.662578][ T4733] loop7: rw=524288, want=69640, limit=40427 [ 253.674290][ T4733] attempt to access beyond end of device [ 253.674290][ T4733] loop7: rw=524288, want=69648, limit=40427 [ 253.685592][ T4733] attempt to access beyond end of device [ 253.685592][ T4733] loop7: rw=524288, want=69656, limit=40427 [ 253.697040][ T4733] attempt to access beyond end of device [ 253.697040][ T4733] loop7: rw=524288, want=69664, limit=40427 [ 253.708225][ T4733] attempt to access beyond end of device [ 253.708225][ T4733] loop7: rw=524288, want=69672, limit=40427 [ 253.719881][ T4733] attempt to access beyond end of device [ 253.719881][ T4733] loop7: rw=524288, want=69680, limit=40427 [ 253.731946][ T4733] attempt to access beyond end of device [ 253.731946][ T4733] loop7: rw=524288, want=69688, limit=40427 [ 253.944302][ T1619] F2FS-fs (loop7): Issue discard(8961, 8961, 255) failed, ret: -5 [ 254.608554][ T4772] fuse: Bad value for 'fd' [ 254.630445][ T4774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4774 comm=syz.7.1132 [ 254.868238][ T498] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 254.928217][ T18] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 255.168385][ T18] usb 8-1: Using ep0 maxpacket: 16 [ 255.268351][ T498] usb 5-1: unable to get BOS descriptor or descriptor too short [ 255.288329][ T18] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 255.298551][ T18] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 255.308397][ T498] usb 5-1: not running at top speed; connect to a high speed hub [ 255.321464][ T18] usb 8-1: config 0 has no interface number 0 [ 255.398339][ T498] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 255.406748][ T498] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 255.417027][ T498] usb 5-1: config 4 has no interface number 0 [ 255.478399][ T18] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 255.487303][ T18] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.495307][ T18] usb 8-1: Product: syz [ 255.499495][ T18] usb 8-1: Manufacturer: syz [ 255.504011][ T18] usb 8-1: SerialNumber: syz [ 255.509651][ T18] usb 8-1: config 0 descriptor?? [ 255.549111][ T18] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 255.555553][ T18] uvcvideo: No valid video chain found. [ 255.578344][ T498] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 255.587228][ T498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.595866][ T498] usb 5-1: Product: syz [ 255.600022][ T498] usb 5-1: Manufacturer: syz [ 255.604492][ T498] usb 5-1: SerialNumber: syz [ 255.749623][ T18] usb 8-1: USB disconnect, device number 23 [ 256.048393][ T498] uvcvideo: Found UVC 0.02 device syz (04f2:b746) [ 256.056012][ T498] uvcvideo: No valid video chain found. [ 256.146939][ T498] usb 5-1: USB disconnect, device number 30 [ 256.206702][ T4787] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 256.418212][ T18] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 256.778253][ T18] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.898269][ T18] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 256.934824][ T18] usb 3-1: can't read configurations, error -71 [ 257.786938][ T4804] FAULT_INJECTION: forcing a failure. [ 257.786938][ T4804] name failslab, interval 1, probability 0, space 0, times 0 [ 257.799414][ T4804] CPU: 1 PID: 4804 Comm: syz.2.1137 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 257.809166][ T4804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.819058][ T4804] Call Trace: [ 257.822222][ T4804] dump_stack+0x1d8/0x241 [ 257.826382][ T4804] ? panic+0x89d/0x89d [ 257.830566][ T4804] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 257.836374][ T4804] ? should_fail+0x3c3/0x880 [ 257.841003][ T4804] should_fail+0x71f/0x880 [ 257.845348][ T4804] ? setup_fault_attr+0x3d0/0x3d0 [ 257.850659][ T4804] ? is_bpf_text_address+0x24c/0x260 [ 257.855832][ T4804] ? stack_trace_save+0x1c0/0x1c0 [ 257.860834][ T4804] ? mls_compute_context_len+0x74b/0x790 [ 257.866286][ T4804] ? context_struct_to_string+0x441/0x8a0 [ 257.871867][ T4804] should_failslab+0x5/0x20 [ 257.876276][ T4804] __kmalloc+0x51/0x2e0 [ 257.880270][ T4804] ? check_preemption_disabled+0x9f/0x320 [ 257.885822][ T4804] context_struct_to_string+0x441/0x8a0 [ 257.891212][ T4804] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 257.896587][ T4804] ? security_bounded_transition+0x560/0x560 [ 257.902407][ T4804] ? check_preemption_disabled+0x9f/0x320 [ 257.908090][ T4804] ? debug_smp_processor_id+0x20/0x20 [ 257.913290][ T4804] ? debug_smp_processor_id+0x20/0x20 [ 257.918498][ T4804] context_add_hash+0x141/0x270 [ 257.923255][ T4801] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 257.923417][ T4804] ? debug_smp_processor_id+0x20/0x20 [ 257.931140][ T4801] FAT-fs (loop4): Filesystem has been set read-only [ 257.936271][ T4804] ? security_sid_to_context_inval+0x40/0x40 [ 257.936281][ T4804] ? mls_convert_context+0x6c0/0x6c0 [ 257.936298][ T4804] ? mls_context_isvalid+0xa4/0x380 [ 257.959253][ T4804] ? policydb_context_isvalid+0x1bc/0x410 [ 257.964950][ T4804] security_compute_sid+0x11a7/0x1d60 [ 257.970123][ T4804] ? security_transition_sid+0x90/0x90 [ 257.975546][ T4804] ? preempt_schedule_irq+0xe7/0x140 [ 257.981188][ T4804] ? preempt_schedule_notrace+0x140/0x140 [ 257.986890][ T4804] ? preempt_count_add+0x8f/0x180 [ 257.991985][ T4804] ? cgroup_tryget+0x108/0x2c0 [ 257.996555][ T4804] ? __module_get+0x130/0x130 [ 258.001273][ T4804] ? check_preemption_disabled+0x9f/0x320 [ 258.006831][ T4804] ? memset+0x1f/0x40 [ 258.010660][ T4804] security_transition_sid+0x78/0x90 [ 258.015788][ T4804] selinux_socket_post_create+0x37f/0x500 [ 258.021343][ T4804] ? selinux_socket_create+0x330/0x330 [ 258.027167][ T4804] ? __module_put_and_exit+0x20/0x20 [ 258.032287][ T4804] security_socket_post_create+0x86/0xc0 [ 258.037851][ T4804] __sock_create+0x46d/0x7a0 [ 258.042262][ T4804] __sys_socketpair+0x308/0x6e0 [ 258.046939][ T4804] ? __ia32_sys_socket+0x80/0x80 [ 258.051725][ T4804] ? switch_fpu_return+0x1d4/0x410 [ 258.056944][ T4804] ? fpu__clear+0x3c0/0x3c0 [ 258.061610][ T4804] __x64_sys_socketpair+0x97/0xb0 [ 258.066572][ T4804] do_syscall_64+0xca/0x1c0 [ 258.070955][ T4804] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 258.076763][ T4804] RIP: 0033:0x7fac69e31169 [ 258.081331][ T4804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.100934][ T4804] RSP: 002b:00007fac68459038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 258.109171][ T4804] RAX: ffffffffffffffda RBX: 00007fac6a04a160 RCX: 00007fac69e31169 [ 258.117180][ T4804] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 258.124996][ T4804] RBP: 00007fac68459090 R08: 0000000000000000 R09: 0000000000000000 [ 258.132812][ T4804] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 258.140613][ T4804] R13: 0000000000000000 R14: 00007fac6a04a160 R15: 00007ffef93f7d38 [ 258.242720][ T4805] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 258.328241][ T408] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 258.768563][ T408] usb 8-1: unable to get BOS descriptor or descriptor too short [ 258.808294][ T408] usb 8-1: not running at top speed; connect to a high speed hub [ 258.888330][ T408] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 258.896884][ T408] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 258.907125][ T408] usb 8-1: config 4 has no interface number 0 [ 259.068381][ T408] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 259.077536][ T408] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.085555][ T408] usb 8-1: Product: syz [ 259.089696][ T408] usb 8-1: Manufacturer: syz [ 259.094149][ T408] usb 8-1: SerialNumber: syz [ 259.538478][ T408] uvcvideo: Found UVC 0.02 device syz (04f2:b746) [ 259.547162][ T408] uvcvideo: No valid video chain found. [ 259.562457][ T408] usb 8-1: USB disconnect, device number 24 [ 259.565950][ T4822] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 259.599481][ T4813] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 259.619517][ T4813] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 259.718035][ T4813] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 259.731106][ T4813] EXT4-fs (loop4): This should not happen!! Data will be lost [ 259.731106][ T4813] [ 259.740948][ T4813] EXT4-fs (loop4): Total free blocks count 0 [ 259.746766][ T4813] EXT4-fs (loop4): Free/Dirty block details [ 259.753030][ T4813] EXT4-fs (loop4): free_blocks=2415919504 [ 259.759224][ T4813] EXT4-fs (loop4): dirty_blocks=16 [ 259.764531][ T4813] EXT4-fs (loop4): Block reservation details [ 259.771107][ T4813] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 261.233341][ T4843] xt_hashlimit: size too large, truncated to 1048576 [ 261.399442][ T4845] device syzkaller0 entered promiscuous mode [ 261.455470][ T4847] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 261.716234][ T4845] fuse: Unknown parameter '' [ 261.738164][ T5] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 262.131965][ T5] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.258268][ T5] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 262.265920][ T5] usb 5-1: can't read configurations, error -71 [ 263.532448][ T23] audit: type=1400 audit(1743784189.634:539): avc: denied { ioctl } for pid=4854 comm="syz.1.1149" path="socket:[46453]" dev="sockfs" ino=46453 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 263.561293][ T23] audit: type=1400 audit(1743784189.664:540): avc: denied { map } for pid=4857 comm="syz.7.1151" path="socket:[46037]" dev="sockfs" ino=46037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.587806][ T23] audit: type=1400 audit(1743784189.664:541): avc: denied { read } for pid=4857 comm="syz.7.1151" path="socket:[46037]" dev="sockfs" ino=46037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.597225][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 265.506713][ T4878] FAULT_INJECTION: forcing a failure. [ 265.506713][ T4878] name failslab, interval 1, probability 0, space 0, times 0 [ 265.522848][ T4879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1156'. [ 265.531955][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.539048][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.553519][ T4879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1156'. [ 265.562710][ T4875] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 265.566020][ T4878] CPU: 0 PID: 4878 Comm: syz.2.1154 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 265.580470][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.590444][ T4878] Call Trace: [ 265.593705][ T4878] dump_stack+0x1d8/0x241 [ 265.597895][ T4878] ? panic+0x89d/0x89d [ 265.601900][ T4878] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 265.607527][ T4878] should_fail+0x71f/0x880 [ 265.611786][ T4878] ? setup_fault_attr+0x3d0/0x3d0 [ 265.616845][ T4878] ? skb_clone+0x1c0/0x360 [ 265.621020][ T4878] should_failslab+0x5/0x20 [ 265.625359][ T4878] kmem_cache_alloc+0x28/0x250 [ 265.630098][ T4878] skb_clone+0x1c0/0x360 [ 265.634255][ T4878] pfkey_broadcast_one+0x99/0x320 [ 265.639206][ T4878] pfkey_broadcast+0x2c5/0x2f0 [ 265.643803][ T4878] pfkey_sendmsg+0xde4/0x1040 [ 265.648362][ T4878] ? pfkey_release+0x330/0x330 [ 265.652915][ T4878] ? selinux_socket_sendmsg+0x243/0x340 [ 265.658296][ T4878] ? import_iovec+0x1bb/0x380 [ 265.662901][ T4878] ? security_socket_sendmsg+0x7d/0xa0 [ 265.668276][ T4878] ? pfkey_release+0x330/0x330 [ 265.672878][ T4878] ____sys_sendmsg+0x5ac/0x8f0 [ 265.677490][ T4878] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 265.682608][ T4878] ? is_bpf_text_address+0x24c/0x260 [ 265.687724][ T4878] ? __sys_sendmmsg+0x3e6/0x700 [ 265.692418][ T4878] __sys_sendmmsg+0x3c3/0x700 [ 265.697058][ T4878] ? __ia32_sys_sendmsg+0x90/0x90 [ 265.701957][ T4878] ? proc_fail_nth_write+0x20b/0x290 [ 265.707175][ T4878] ? proc_fail_nth_read+0x210/0x210 [ 265.714117][ T4878] ? proc_fail_nth_read+0x210/0x210 [ 265.719143][ T4878] ? memset+0x1f/0x40 [ 265.723084][ T4878] ? fsnotify+0x1280/0x1340 [ 265.727602][ T4878] ? __kernel_write+0x350/0x350 [ 265.732307][ T4878] ? check_preemption_disabled+0x9f/0x320 [ 265.737884][ T4878] ? debug_smp_processor_id+0x20/0x20 [ 265.743270][ T4878] ? debug_smp_processor_id+0x20/0x20 [ 265.748473][ T4878] ? __ia32_sys_read+0x80/0x80 [ 265.753058][ T4878] ? __do_page_fault+0x725/0xbb0 [ 265.757840][ T4878] __x64_sys_sendmmsg+0x9c/0xb0 [ 265.762536][ T4878] do_syscall_64+0xca/0x1c0 [ 265.766873][ T4878] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 265.772923][ T4878] RIP: 0033:0x7fac69e31169 [ 265.777172][ T4878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.797002][ T4878] RSP: 002b:00007fac6849b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.805364][ T4878] RAX: ffffffffffffffda RBX: 00007fac6a049fa0 RCX: 00007fac69e31169 [ 265.813441][ T4878] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 265.821778][ T4878] RBP: 00007fac6849b090 R08: 0000000000000000 R09: 0000000000000000 [ 265.829886][ T4878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.838191][ T4878] R13: 0000000000000000 R14: 00007fac6a049fa0 R15: 00007ffef93f7d38 [ 266.050711][ T23] audit: type=1400 audit(1743784192.104:542): avc: denied { getopt } for pid=4877 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.753703][ T4910] netlink: 'syz.4.1163': attribute type 6 has an invalid length. [ 269.290470][ T4920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.303434][ T4920] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 269.416816][ T4909] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 269.476576][ T4909] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 269.501919][ T4909] F2FS-fs (loop2): invalid crc value [ 269.514870][ T4909] F2FS-fs (loop2): Found nat_bits in checkpoint [ 269.605787][ T4909] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 269.618151][ T4909] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 269.846276][ T4909] handle_bad_sector: 509 callbacks suppressed [ 269.846299][ T4909] attempt to access beyond end of device [ 269.846299][ T4909] loop2: rw=0, want=71688, limit=40427 [ 269.868461][ T4909] attempt to access beyond end of device [ 269.868461][ T4909] loop2: rw=0, want=71688, limit=40427 [ 269.880377][ T4909] attempt to access beyond end of device [ 269.880377][ T4909] loop2: rw=0, want=71688, limit=40427 [ 269.904247][ T4909] attempt to access beyond end of device [ 269.904247][ T4909] loop2: rw=524288, want=69640, limit=40427 [ 269.916231][ T4909] attempt to access beyond end of device [ 269.916231][ T4909] loop2: rw=524288, want=69648, limit=40427 [ 269.930575][ T4909] attempt to access beyond end of device [ 269.930575][ T4909] loop2: rw=524288, want=69656, limit=40427 [ 269.943681][ T4909] attempt to access beyond end of device [ 269.943681][ T4909] loop2: rw=524288, want=69664, limit=40427 [ 269.957392][ T4909] attempt to access beyond end of device [ 269.957392][ T4909] loop2: rw=524288, want=69672, limit=40427 [ 269.969438][ T4909] attempt to access beyond end of device [ 269.969438][ T4909] loop2: rw=524288, want=69680, limit=40427 [ 269.981282][ T4909] attempt to access beyond end of device [ 269.981282][ T4909] loop2: rw=524288, want=69688, limit=40427 [ 270.028348][ T408] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 270.152959][ T359] F2FS-fs (loop2): Issue discard(8961, 8961, 255) failed, ret: -5 [ 270.388370][ T408] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 270.404550][ T408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.414781][ T408] usb 2-1: config 0 has no interface number 0 [ 270.421207][ T408] usb 2-1: config 0 interface 39 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.588349][ T408] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 270.597245][ T408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.605113][ T408] usb 2-1: Product: syz [ 270.609394][ T408] usb 2-1: Manufacturer: syz [ 270.613810][ T408] usb 2-1: SerialNumber: syz [ 270.622390][ T408] usb 2-1: config 0 descriptor?? [ 270.870861][ T4908] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 270.929576][ T23] audit: type=1400 audit(1743784197.034:543): avc: denied { accept } for pid=4934 comm="syz.4.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.996371][ T23] audit: type=1326 audit(1743784197.094:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.7.1168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d8b1cd169 code=0x0 [ 271.151267][ T408] usb 2-1: USB disconnect, device number 28 [ 271.182277][ T23] audit: type=1400 audit(1743784197.274:545): avc: denied { write } for pid=346 comm="syz-executor" path="pipe:[11724]" dev="pipefs" ino=11724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 271.390864][ T4937] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=1079 state=3 status=67 (errno 9: Bad file descriptor) [ 271.490383][ T4937] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 271.537266][ T4937] F2FS-fs (loop2): invalid crc value [ 271.543103][ T4937] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 273.539196][ T386] device bridge_slave_1 left promiscuous mode [ 273.545974][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.554294][ T386] device bridge_slave_0 left promiscuous mode [ 273.560313][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.567596][ T386] device bridge_slave_1 left promiscuous mode [ 273.573678][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.581378][ T386] device bridge_slave_0 left promiscuous mode [ 273.587305][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.594954][ T386] device bridge_slave_1 left promiscuous mode [ 273.601131][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.608698][ T386] device bridge_slave_0 left promiscuous mode [ 273.614623][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.622273][ T386] device bridge_slave_1 left promiscuous mode [ 273.628397][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.635636][ T386] bridge0: port 1(bridge_slave_0) entered disabled state