last executing test programs: 15m26.007488837s ago: executing program 32 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) fallocate(r0, 0x0, 0x9, 0x10001) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2}}, 0x30) fchdir(0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x18d042, 0x15) 9m10.708363491s ago: executing program 33 (id=2820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) 8m44.961994961s ago: executing program 34 (id=2938): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m33.052835866s ago: executing program 35 (id=3013): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc5) syz_emit_ethernet(0x0, 0x0, 0x0) 8m32.141019449s ago: executing program 36 (id=3022): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f000000cf00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c) listen(r2, 0x0) 8m28.12582877s ago: executing program 37 (id=3039): bpf$MAP_CREATE(0x0, 0x0, 0x0) set_tid_address(0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb88a8410081000e"], 0x0) socketpair(0x22, 0x0, 0x6, &(0x7f0000000180)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0xc}, @struct={0x9, 0x1, 0x0, 0x4, 0x1, 0xe8, [{0x6, 0x1, 0x3e}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30]}}, 0x0, 0x4b, 0x0, 0x0, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)={0x40, 0x16, 0x49, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m7.812767833s ago: executing program 38 (id=3112): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0xfff, 0x7) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010102, 0x1, 0x394, 0x4e21, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x40010) 7m43.286651845s ago: executing program 39 (id=3172): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x100801, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10000, 0x8, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 7m34.623463026s ago: executing program 40 (id=3200): socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6m41.330359453s ago: executing program 41 (id=3380): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r2, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x80, 0x800) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r4 = socket(0x28, 0x5, 0x0) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) socket$pptp(0x18, 0x1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$key(0xf, 0x3, 0x2) write$P9_RXATTRWALK(r7, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x1}, 0xf) 6m28.598572797s ago: executing program 42 (id=3428): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x400e49, 0x8, 0x8002, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fd}, 0x1c) r4 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x25) pwrite64(r4, 0x0, 0x0, 0xe7c) socket(0x16381754611cf041, 0x4, 0x62a4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 6m24.283172341s ago: executing program 43 (id=3448): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000b80)="3303120081fd120000007ef5", 0xc, 0xc000, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) 6m9.367954728s ago: executing program 44 (id=3527): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x2, &(0x7f0000001cc0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x8, 0x4080, r0, &(0x7f0000000c80)="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", 0x1000, 0xfffffffffffffffe, 0x0, 0x2}]) 5m16.968203073s ago: executing program 5 (id=3798): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m16.923935425s ago: executing program 5 (id=3799): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0x11) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x1000042, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x1, 0x5530, &(0x7f00000013c0)="$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") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)="1988fcd59ceb32a371703b0b13b9d8c89f114de94ed06b2af8004015d397a0aa6d718b27731cd6b96111059d6f91babc3e197b64ed541ae238626ef3e7355c21ecb277cc444616bd87559d0e080200000000b7c2d90cd1d5f8ab54df5fa80e277c7110099ad30b99de2158e35535d77f3b16c660418a7d1969bbcdd7285a6dcbfbee47fdf96218149e3bba77db9531bcfe", &(0x7f0000000580), 0x80000000, r1}, 0x38) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@vsock, &(0x7f0000000180)=0x80, 0x800) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_open_dev$vcsu(&(0x7f0000000080), 0xdb, 0x111200) 5m7.920957582s ago: executing program 45 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000400), &(0x7f0000000080)=@tcp6=r2, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xcf10, 0x0, 0xffff, 0x9dff, 0x15, "0500"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0x17) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r10, 0x221, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x400c810) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xcb}, 0xfffffffffffffe5c, 0xfffffffffffffff9) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x30, 0x2c, 0x63f, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) 5m0.006845637s ago: executing program 46 (id=3799): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0x11) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x1000042, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x1, 0x5530, &(0x7f00000013c0)="$eJzs3L9vG3UUAPDnpOlvSoQY2HpShZRItVWnSQVbgFb8EKmiAgMTOLZjubV9Uew4IVMHRsTAf4JAYmLkb2BgZkMMIDYkkO8utEEgFWLHTfP5SOd39/X33r2vlUR6d5EDOLXmk99+KcWVuBARsxFxOSLbLxVbZjUPL0XE1YiYeWwrFeN/DZyNiIsRcWWUPM9ZKt764vrw2srP7/z67ffnzlz68psfprdqYNpejojuVr6/281j2srj/WK8Nmxnsbs8LGL+RvdBcZzmcbe5kWXYrR3Mq2XxZiufn27t9Edxs1Orj2KrvZmNb/XyC/aHrYM82Qn3a9vZcaO5kcV2P81iaz+va28//9u23x/keRpFvk+y9DEYHMR8vLnXzNez9SCL9d6gGM/zpo3m3igOi1hcLuppp5HVsXGUT/rp9m67t7OXDJvb/XbaS1Yq1Vcq1Vvl6sNoNAfN5XKt27i1nCy0OqNp5UGz1l1tpWmr06zU0+5istCq18vVarJwu7nRrvWSarVys3KjvLJY7F1P3rz7QdJpJAuj+Hq7tzNod/rJZrqd5GcsJkuVm68uJteqyXtr68n6vTt31tbf/+j2h3dfW3v7jWLSo7K206ysZGHpxtJSuXqjvFRdnMj6iws9Zev/tCh6jOuHIylNuwCAk0f/D0zD5Pr/7XsRk+//Q/8/Fieq/z3t/f8E1g9Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpz76q1sZz4/vlSMP1cMvVAclyJiJiL++AezcfZQztkiz9y/zJ/7Ww3flSLLMLrGuWK7GBGrxfb785P+FAAAAODZ9fXDq5/n3Xr+Mv8kJ52fdFUck/ymzczlj8eUrxQRc/M/jSnbzOjlxTEly36+z8TemLJlN7DG9ouQ3XI7M65sT2T2UDj/WCjlYeZYywEAAI7F4U7geLsQAAAAjtNn0y6A6SjFwaPMg2fB2X/eP3ogeOHQEQAAAHAClaZdAAAAAPCfzP6Pc7L+3/f/AQAAwLMt//4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTnfvJTRuI4gD8bHCh/1RUdd879ATdwTF6hC67rDhAL8EBuqBX6AU4A9nlCBGO8DgORCyIGGMl+j7JmYxlfrxBsJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPt1U68W/31//XJqzqy+TZzQAAADAKdtqvWj+maX++/b+x/bW57ZfREQZEafm7qN4c5Q5anOqx+f/Hj5fPanhf0STsH+PSXu9i4jv7XX3qe9PAQAAAF6vzXI1T7P19Gc2dEFcU1q0KT/8yJRXREQ1u82UVu7zvmQKa77f4/iVKa1ZwJpmCktLbuNcaWdpfu7dqt30oClSU558WVdktrEDAABXNDpqzp2FfOutHgAAAPryc+gCGEYRD1uZ3VbgJDXt9t7box4AAADwAhVDFwAAAAD0rpn/X+n8v9r5fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdpW68VmuZpfmrOrO5Oony/PaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO7Zn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLn/n3jpuIAgD/b5ystII6AbgiqQGKAhV6vpaUbYgBFDPwJSFF6LaFXfrQZaFUhsrChzF0QjAghgcLWmbVzK3UpW4cbisQMss/OOclJOYhiX5LPR3p+X7uW3/fZUpWvnxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNHpvEifZpjOO4+LYg6d3VrL+4Y4+c2/j0WLWsjiqM+nD4XR1J+o2lwgAAABHwguznJSU9X0I4XG6uZT1cSev/9PynKzm/+H5cVzW8zvr/rIva/+s/f7bk5e3BuqMx8kuemV1ODi7O5XW/57pIbf3g2rldz5/95LkDyT+cP2lUZrfz+i7+/ffb+fhiTqyBQD2cnrKsTNlXwTlz0NZ368zOQCOrVal8C7r/6TTbE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdRith2fLOAohLLYmcebh0zsr0/p7G48Wy3bx7t2N8M3kmtkl0hDCldXh4Gyts5lvN2/dvrY8HA5u1B+8GkKY+k/tcOCjv1tM/9rHM5wcDj6f/QfJfKQxj0FcPOx5yedwBA3+pwQAwJGUFi2r6x+nm0vZsWghhH9+3F7/v1GJw4z1/5NPLj6ojlWt//u1zXD+9dauf9G7eev2W6vXl68Org4+e/tc/53++UsXLlzq5e9Ket6YAAAAsD/tolXr/3hh9/r/qUocZqz/v/y+/3V1rET9P9Vk0a/pTAAAAI63F1/7+69oyvGo3Q5fLa+t3eiPt1v758bbBlL9z04UrVr/JwtNZwUAAADUYbQebVv/v1yJw4zr/8/99Mov1WsmIYSTxfr/mZXPh5frm85cq+PXiZueIwAAAM06WbTq+n+af/8fb33yEIcQ3nx9HBd/BnCm+j/54Nufq2NVv/8/X98U51LcHd+PvO+G0Oo2nREAAABHyR879p8pWlbs/5luLn3666mP2r7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//yz08Pw==") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)="1988fcd59ceb32a371703b0b13b9d8c89f114de94ed06b2af8004015d397a0aa6d718b27731cd6b96111059d6f91babc3e197b64ed541ae238626ef3e7355c21ecb277cc444616bd87559d0e080200000000b7c2d90cd1d5f8ab54df5fa80e277c7110099ad30b99de2158e35535d77f3b16c660418a7d1969bbcdd7285a6dcbfbee47fdf96218149e3bba77db9531bcfe", &(0x7f0000000580), 0x80000000, r1}, 0x38) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@vsock, &(0x7f0000000180)=0x80, 0x800) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_open_dev$vcsu(&(0x7f0000000080), 0xdb, 0x111200) 4m39.612138464s ago: executing program 2 (id=3975): r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(0x0, 0x1) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000340)={{r5, r6+10000000}, {0x0, 0x989680}}, 0x0) poll(0x0, 0x0, 0xf6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x4, 0x62, 0x7, 0x7, 0x0}) sched_setattr(r7, &(0x7f0000000100)={0x38, 0x5, 0x75, 0x1, 0x4a, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) 4m39.367222136s ago: executing program 2 (id=3979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff640ab0ffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB="d0000000010601022bbd7000ffdbdf250a0000066a3a116f1d8c6890f046776c4b516cfc55901497d7076effe1888e5cc8bc1eb2c25ee29d517803189175279590edcff7c7a9b819b19c796fbf07457626233a641e318e21fc2288965f2722081cddee49ffaf86c91922923d8cb447a7fc46737a8fd690d8cab61bde2f6340c51f04991ca9846c4fd9259e3273acaaa6ca1aad29018d0dea0705e6913b699ec80edfd4cd225a2d742403d72fdbc4851180f6258822391f6c2bd69b6110859f0894fda996a75672dbfaa8f4b0f3370000"], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x5204) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531", 0x71, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc013fd04, &(0x7f00000001c0)="0400000000000000580000003801") bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 4m38.104579365s ago: executing program 2 (id=3985): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m35.413915963s ago: executing program 2 (id=3996): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8405}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x40800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/128, 0x80}], 0x1, 0x3, 0xfffffa64) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000000000000002) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000780)='keyring\x00', &(0x7f00000007c0)) 4m34.930895636s ago: executing program 2 (id=4001): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/flowlabel_consistency\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000200)='./proc/sys/net/ipv6/flowlabel_consistency\x00', 0x3a00c44, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x2b4, &(0x7f0000000bc0)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x80}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x6e24, 0xdc, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r7) socket$nl_audit(0x10, 0x3, 0x9) 4m34.546378744s ago: executing program 2 (id=4002): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000400000001000084070000000a000000030000080000002000000000000000010500000052000000000000000000000b0200000000008370fb63f2a3907ec0c77cc446ba88e30a2c1b3e6ca7348ab6a4e674b8b99ca603a9de0a78776036ace14aa780c57195f8a118bb2ef2f2bcb24481be509b6ce7a91c003f888bce9f4cd85f7f7786b4f8fa49dcd2d1c94944ac9b9422bb24859556c5040150ea"], 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000110000006f00005b3312172de36f1700"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3204010, &(0x7f0000000d00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d6c6f7765722c696f636861727365743d6d616363656e746575726f2c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d332c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c757466383d312c636f6465706167653d3836342c757466383d312c696f636861727365743d63703836332c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c61742beb312c7569643c", @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x2a9, &(0x7f0000000500)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000800000/0x2000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) 4m34.448224419s ago: executing program 47 (id=4002): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000400000001000084070000000a000000030000080000002000000000000000010500000052000000000000000000000b0200000000008370fb63f2a3907ec0c77cc446ba88e30a2c1b3e6ca7348ab6a4e674b8b99ca603a9de0a78776036ace14aa780c57195f8a118bb2ef2f2bcb24481be509b6ce7a91c003f888bce9f4cd85f7f7786b4f8fa49dcd2d1c94944ac9b9422bb24859556c5040150ea"], 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000110000006f00005b3312172de36f1700"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3204010, &(0x7f0000000d00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d6c6f7765722c696f636861727365743d6d616363656e746575726f2c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d332c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c757466383d312c636f6465706167653d3836342c757466383d312c696f636861727365743d63703836332c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c61742beb312c7569643c", @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x2a9, &(0x7f0000000500)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000800000/0x2000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) 4m32.150728298s ago: executing program 7 (id=4012): pselect6(0x40, &(0x7f0000000080)={0x3, 0x100000001, 0x0, 0x2, 0x7, 0x6f3, 0x4903, 0x3}, &(0x7f0000000200)={0x4, 0xfffffffffffffffc, 0x58ea, 0x7, 0x8, 0x6, 0x5, 0x9}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004dde00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000", 0xff0b, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0xffffffffffffff45, 0x0, 0xfffffffff94e4ad8, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x150, 0x0, 0xfffffffffffffff9, [{{0x2, 0x0, 0x0, 0xd, 0xfffffffc, 0x10, {0x3, 0x8000000000000000, 0x10000, 0x7fffffff, 0x7fff, 0x6, 0xfffe, 0xa8, 0x6c, 0x2000, 0x7ff, 0x0, r2, 0x56, 0x80f6}}, {0x3, 0x83fc, 0x5, 0x30e, 'fuse\x00'}}, {{0x6, 0x3, 0xed, 0x1, 0x1, 0xfffffff7, {0x1, 0x6, 0x9c, 0x70000000000000, 0x2, 0x3, 0xfffffb47, 0x4ff, 0x3eb80, 0x8000, 0xa, 0x0, r2, 0x9, 0x3}}, {0x1, 0x7, 0x5, 0x0, ',[@\xd3\xb5'}}]}, 0x0, 0x0, 0x0}) syz_clone(0x22100900, &(0x7f0000000000)="d7d30cbf0daa54004958d5105dbe63abd60522b8dd9c5454fa196ca8f5fa6b6e949c9fd27e70f90989018548ff208dc463dc21739b0030232e114c794dbb962b53b5060ac2cad2ce4dbe24053882ce8e87574c71e63840b4ca0e5e1a8d6be08a24f336a60aa45cac2b71f7811aed397854ad378619", 0x75, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000340)="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") 4m32.09432592s ago: executing program 7 (id=4026): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x8000) 4m30.938993745s ago: executing program 7 (id=4028): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4m29.720139613s ago: executing program 7 (id=4033): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x343883, 0x10f) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r6, 0x1000) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r8, 0x7800, 0x20, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) openat$tun(0xffffffffffffff9c, 0x0, 0x103002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 4m28.797160737s ago: executing program 7 (id=4040): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "01010101010101010101010101010101"}}}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x60, 0x3}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={0x0}) ioprio_set$pid(0x3, r4, 0x4000) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x80000000) 4m28.09546009s ago: executing program 7 (id=4047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x2000801, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000200)='./proc\x00', 0x1028, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x10081) stat(&(0x7f0000002780)='./bus\x00', &(0x7f00000027c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f0000004900)=[0xee01, 0x0]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004b40)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000004c40)=0xe8) getgroups(0x4, &(0x7f0000004c80)=[0xffffffffffffffff, 0xee01, 0x0, 0xee01]) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x9a) read$FUSE(0xffffffffffffffff, &(0x7f0000004dc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x1, &(0x7f0000006e00)=[0xee00]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000480)="f46bd699fa95142b19b7031c6e18caa6ffd93c79d093376b053d9e80a2b3137e421cb9db11c1b9b957029a3227ef3eca2b45d2e5de206f6cc47a56b00b62c7341ea3bc96110d1c8ef39f0722fa65e50a188d17833d738982b3c311b257879f3522658a0cd76e3092c13c0fca88a8751b102b658a8a52ea639bacb232d2e7d76e3fc06350dd2953d0aaabad8e110715272adf4ec946c242d53fbe38d4b2f9cea7c3cb082bb4cb4e4e4946cfef7aed6ed964e8fedb5cc6c2fca8aa744fba780ab69c33b595f1d7fdd93859dbc88ac961fb294a8da2a00beec3597c8f06a8761e73cb6f464e74619809554d87cc01cf30be237d79d31e59fede7c9f2e17af6eed66678a4f4d3e9e71104d2f54a1b23b3997415e3b745342911539fcf7dc3e7f83a0b7dbd47cbf22f6eecfd1daf54efddae356ec60724f8432f916ab9e99546e1b50365dd7a4cdedb5e2c3c724401d7cc3e6bf622d5f445b5645594e2c5af58c1d1dfe025ee9c824aa738ae8a73c1680532f8e2134a4e9ede2fcf697e0302a379dd5605f1bd9d5361dc2d3c8ce7981fae79739f4a694a3a3193bddc13eac88518bdb25fa9e621b10bfc3b7de861f97d2647675aaba01d28e0c20f499b5d0b4fb411498c2c19230885ea180e0584e2a8b6fe2febcc72b000ff49252d173759376600e7d1eef57e9cda952865a368b809831ffd3dceadf387dfbbe03b39bb77e3736396824d2a42476298ce50fb420bac907cc4329457f4419e0ba14e6b8e6815ed6a60f488adae8e5fd650fbc9817f5fe5fff9ddcdd7290231caab001e9515b81ebd3b3a5b499f5ac6a90f60a54eadb178b4b08f7cb467521c25b055477d16a1f1ab75296fb27f559876ffc5d6a9b72c0321df63b7b2e7cff8fafb0296949ef29fe954c48fc4665a2a639fe90c9071f6902c91a3245f9f944a2e13d2979dadb492e053af58ab7a2bf320ddae4e338116e5ba3693c7edcd6a5927386c890dea6370886dcffb691700220cd5c03633d7829175140fe4c4be51becf94e32132a3502f9aea3610ca55453df9f3e0060857da99e8bedcbe735192ca2e911be2ee9844f3ff5cbdc079fab87cb4504d2a216a5ec119b2267002f6be673d236595e6e99c480a400f8bf375642f21814efae43afe359fff09deb2be6d6a856e19ec3418e13722b6ee32b52d3292c72f838ceea208b400e512c79d3f3f48be72f24210359c97ef3d5584409e5e6310f8a5af5290ca3b75c168d0b4e6a866ec06cf439a81af660eaf8cab73b5173ed5f818a1eb747ca0d5581acbb4cca979cbde59d2a1e763ab93826f1d612e7ae2666a8626997579f2fee686855cf13f9048b5b073ed8c42f8b5aa6c725470081181d5b2d04a75ef96696a711a3a07e52fe17653c348e7516fe78b15bd8218202debfc21dac94251d9933a34af6af496d8ebc607cace8d70985c3868b2d0346d9ef59c797ddc5bbe9c6b59f85ddda2db7a7bfdebaa35611e701a95de3f930b8c988f3b38fa889fa09a77f60c824bf464bd445ea886542b910f1d61ddff4d4f890292fb1182a44d9bf13460759c363cfcfe72f2594f04d2257c4a93224d19d491d8070f6e445dccd6096c11c1bd78823c5a146f642407787e24ac6a4a068f33467ec7e7d050c2fa77af5fec6d63c485e6e1e9e616adc7939329dc0fa3646b1f9352792c73a8806360186c22ff2374c34aa0a2cba2034d4b772578285648f4a289a6801e9c5a2b099f74d819522f6a2469031c846c577f4d15c8fb2dfa4570943248cfda82e4454f777e019aaf655d16625e41be93cf787de5423d4292d02996f7b7b69a143b5be5732aceeff046804a8d94c7522577584fdc36fa2b456164edc4e8503c342f71c80293841a8a92fde4ba4c3d626c6bade8bf4b84be06c6d781226ea12454a0ee2eb579bdfa105150d009a793aeddf01ae9318b5de220ff86feb9b14ec02c7aa963933f2e71033533c83bcefb7ca5553dfa14d0596badb522ecb16ddb636a585f05ae1e23a638fcb4fcaddbecd1c40469a421aa564e2f12910718be017d73055fc057941eeec73093aa5841c57b7e93de1cfb4f45b1b73fc1c3265ba9487b04a40786ece6d0f90b3fad0975bd5f5226ebda6f9e1464c4d5d481534f0b353657cbfbedeb1115f9af021a0dfe2729ad24dba8fb1af060b81093d808c8b8c7e52d34f260e428b3c7efc15927407d670df1c7aeee28d53b6244b6986c0f6a8a326ffd37d635a17b458f695a1db65ea40f7d06c337fa1ea9d80cab2e1296386f3d25bdffb24275b95d71cb7e6a1e34b8ff133e5eb701a216acf085ce6f0f340d2cba5bd975ace546300e92626925af3a6a61ebc7d3bdd4fcb09630b060cb0a24673de4de848cc655fde9b9979a05bc73e9be73e004cb7001a5764c4dff40c6fe546841f595560adbda555f9e059bb05abc87d7754ca237312be10535725f5123bfcc50b4266761177f3fc1fe2d4acb0d7c728d223c235730e7784e762bd15d8da015115379cf8a71d8995bcb634d2511d2fdfb6f25c9eab47a54cea57c871a9ac22d983bc1574dff943cd3ee88ab946adb2278ac17d90c8f0ccc824b0fb75f09b1390b5713b642375adc792fab7893d6d1b1bd0300c1639bb0b613aba2dd80d19844cc8e313994ce1f35230d7c5454cc2eb5a39341ff9508897708b32610a848f45b08a18985e1926d3d4b13533661698474fa28007fd83ab7a4ec674ab961e369ec29fe5b67d85f8fbe8afafcae2d76801516941a193add2cd57adc064b3a0114c7dd2959b2b58062f65655e582efa4fe7f518380e3483bdb6154094f545becd555eb7ab46b133a666fa941047ddbf688edc665947fc30edc921c835bf8ae2555cb783b305fc9803dac64fc5218a3219209b942fdd00da99469a0747964baa81732ce430334b8b1f51e0f16e74202993ea03a937b1718f52f56000a3a21f40f7f7f39ff890eb9f58a3c699bc0cd06b130ad136af5282b070d3f5ddc6ea6adca2eadadaaee11d75d4ac2d02199ca072e0673fdb7a931aa4cdeb31d3bd6352c49f953a804777ab35cf85ad03ff3a387b64abbf9e6da5eb153e723c5a722cdb093c971bcc06db1eb1dba210efa1da96d616070bf61f87a01b06c3adc9d81350d6a9c3e14d8e69fc2985ee843e4fa3b0439245316943b0bc96280e8b4c55529900c5f5a48d7306639883a6dc3bd3eee9ec64ec12dbf288957c3d0a7100a0c0e9243246dcc5af26ac5c0f88639b689186c87d3d9bb8cf6a0616f0679ea643d19070789e3ff5ea908bbe80ef3f7a61039cf672ffeb80ae53a75e492fa4371764875b2559f5450fadc3e8824f1542d54f53f6081fc916612d03f917dd8b2956d1e4ab6c651f08d2a7fa9f39068fab11983c880c82a0cd364d8d651b209685cb8b464c95baeafbf0ee7213e79b29195e77a9ff76c620fcfed73f9b0297a95dfe752ad48ff46131dad1c860c206043611fb69492458684cd91c14d9bc3ddcca1d79e8b05b62d0ee09b8d3820e59f3848e1e5f13c104fd156c87b984c0f67ab7a05a283f8843cf4a01a2c9e36afcc0c17fbb6831481498259470890e13d16d51e76a0d1f8a278cf8926f0e8e7726b921cb8397522584b01d6643d37e29673623ff1b319815fb103153fbc30c4656ccfdfe71cbe0576eb678041f1348749530d36fa6c16a4cd0b696c760874ec444c4b47ef423efea02c04e8d0cdeb1b2a3174a015f31a953c0a27c1c5ec606d4de2c504ae003fdcb08f94fe6d38194e5d30ed7425d43bdfb3966d10081d9acb6fb1105f9ebb4da36996322ad617ec509479ccdbc7eb8a1f66a66198cea77983fc9306669cfe03ede602b10835d813934b7e3ca207cd80c34ff32172df692e985ea3ff567bdecc8179a3d4a82235da16d402db1e7e0e2ffa8fc84448c18bc880a6df979f1d8d58cea48e13cefedb70855a65632ed5bc4a5c964e19e00b32265b023c00e2b7d402327951dab7f338a145124f092341b59411506d23e86626c596dada585c7af5ec4de476453e11092eb1bd2a2214f977291d6fcfb2a7e68b796ef51d003c2599225565faca81e5cdcc5593644647568195635c6c76f743968ee39153f7fdb8828afe6ee7872e72275b76e72846f22db517c9c0bfee4e072910283254e6fdadf53b5bce7b91524a8e023dc5a3329698046da332bde72d0704a00141e89721d0f74c0c0c080c7478fe48e75caf287374e7a4da3fe69feb87efcbb40c363f4635c04e48ed4cc6865bb5bad091c6f0b81ae0a818301962e38f437443d97598c2891e058c6c9f8831ccbb3bf20b4cbf8ef1cad65814b79bc0db84e790e59dd682d56a5e9fd31b0babb158cdfa28ceede88132d9c85f784266452b5996e45a97eb0942e1b45131b3fc540e72c4fe76446e0efeee607ad9166f6abf3fce8db9322ddb8c9bba56e22909b0776ca685ca3b86dcf791d4ce2573f182ceb54eb12570fe70dba3fdbe5e42db348b8915570393e9b0d213daaf720cc6eaa2fbb0d3a6f82e1eebba9ea53830203f4ba0697b3f8be169b49a086737d8175acf6a467a00eb21e8d6f31dcf37a6b7eaf21fca42c698bd14fb8c781633d9d260d96b86da11b3c673a4c46559d4e50d23a12e28f4e9ba652a61a001df5a6cdea3e6812a91b2168f63688401ae6244390b7ba408cda64150ae132d7c22ce2846d9363f288511a35c7cf5a8bc5ad5cfd1a8ff28231f123fee50562d9e93048deb14dfe12c9e282559b74dc4536c342064ac1f423d99cf7915f9293d717ca57a85782c9f19a4961561fb57cd92fe9ea8153adb348a33f0e807da25d9220860c2243bd6c27ee296bce36aef3a0b2698ed772a3413c79dba48b2b414ed045ad246b8f1fa1253ffbf600eef9d2ff850f4a01dd00964a8db05cbf1a537f91a5e67d026aba8baa5868b7bb17a8c1a000321b9bdd52714fdaac05831b37e4a5f8a463eea5e69d5b12e3ac4514fafe9eb6fad524c09bc5042bf1103e17b9b7e85253812ec2633c9608ddbe7685a65bd7e7d70acb75cb61446cdd448be93d10bc6cf958f5b3dab8cf5f164c81247fa2f29743f429145122d8bd7ad85184421cfd8a2fac157b174a324695e6875beaeaf0aeb599ad990dfb082f39ed0403a5f65f47ccf17bfb810631ba3328202240ea59a0104e74730a41eaa565415072cc1afe25a8a6f83aa227c1a280a73cd6228c5bc4d041c838d09c0fb4dc07f3e2644a79983790f229273db082235a541f5a5c94e361ece9ac774cf10ca441d6f0dde0d9ad167541acd0fd7e2621d23977e30f2500c8771809e185f307fb20258b90c60e83577134c8c9a65c6232bced90d576bf8bdcd116365d78f2cc4c2247523538a996d6c743cfef57d33f9b74f12dd362a13bd65685227d6ad349019bd412cf46e24a655880776c70c9e57b906218596eedafe665d6a4d5d75cfbc8a21ed0dd472356d4e11a37aa0a8f7ad9b7408cd089729bd87f7e4f8ef9d981e13b382d76eb07e5548383ec011fa52350a1e33a8ce611456b0f8132b6c2920c1e4833015417ad858394bc08d7fdca3bbf9b091fcc58e0ac82a6c0872c2459b3c67f8d4139fc758b0daef21636e366f13732a267bfa9813cda3ddab41e4b164c79b4bae7b232745f3b0a436c7668e63a6dfa608c6cb70fc39797c9ee5f19a0bd34a150dcd5762fac0cebbbd57609741d72ca56d47e317877112ee3d70905203806bde72edfa6bc6db0476136d783b7edc24c11402535bdb8e0d8a4446539e5839b5a8f45ad640888b9d8c13fad27c23b01bcb37dd36f4714660136d2e8bb4b75ebffab9afdfe669213d50bbd4130ea40a70db618ce7bfd1e2bf8a1b5fcae35818a17cef943b9dbc51c0741e28b2402b64058c0de894ed3dff01ff84f4e468b8368db8a214b48530a9e60c35cea8521a858a06db2a347aef179aca90d2aafbb4413111f4c3ccae20f589721d7d15f6aee9a4dda772c2aaa2b24bb4800123f129fdf3b36485d1ff04d2e55395cba50054a7599d6fad10cd384aeb07d4eae600e4c7cbd6d2ca66bdcb8698fd26b1621bb216570787268303bffeed5238b7286bd502465adba1ef8c9af0804580b14ba8843925bdc428b748a1e5999f3d882c9905c2f993cee21ffe2d42e21847541e4600655d5d27355d365d000d1e2a2c5a12ebe5c26484343e1f39f869ac9ff79451e7d32d9908111bc8a4263290b693534fd3663ee60ec517712d4e56fc8900ccfedd0f67c45a15be5f5b11ca129be4c5e6e0352156a90256b983837709664bf172c0713cbf4e48f39f83970740499334780ea4b76704af9c79d83d294e35318ba2994fc539defd5ae65ba8ed7e6b0d1abe14c29d27b50623410feaea8a74a1fb8626241c376c22e6f655b5db088ef1f4c5c2492a89b2b117f9256196ab8544c789bcde786dd398487175e5e2a16fe906fd582a0f3b2b26eddbb48aee0eb5a6ed877f483c7cc6c63a034a4ede2b877562b0601f74d428f7400d4c5289d0669406903fd568f25a9a530c2796cf810e48ee2a294a8a5b1a7e9847f71bbbba758ab39bea088b2fac675bc5905cd6a72d305997e253a1a087027cd293a8ac460e3eced22bf82742f85210f30f3ad8ab32dcaf153892b85c2f206636dae89dde1d7e60f9a6fbf05923dff6c80ff396d427f200a8d1806bf65f1e2f6cb0b0e7b3146ca1e8828f7018f3fc6f7e5c97c744adf024d3bb4acca4ce0a9b07482c1d0b971d4d36121a4eab1059f3513001da7f7f591ab3bcb3ecbe4c10a817903bc210c727541f5b4c4005a3e73c0710c02c277e20407bdafde06d2190467966ff68002e85efb5d6fcf7b6adedc1808e003f7e0fe9981775730b9102a8b54ed63fa273f73c75c757b9bce47149c47848275a6ebb4c94eb580bbc3bccc1482e82c093e6326064a03080521181ad825846e47de4719de698ae306356d19be3f6c61092676878d8ddd1181175c93e4b1ec83d47e9de2ac7c495159bf63508404e35e1531fff5112af8a95ffef817c56b346e7f6b80a77915cdf6960849d61ff30b079a036dbcc53f87bff1964077ae6d392f351ae4677ac754eb1758ede0b7d8cbcb38440556aff01e3231f16ca8c59e629024eb8e06d042d7b4370f7ad770386e4a71b40cb60dbdb24f9733b074fb03bbe978c1ba40b9f62b402b344a5305114344a0e515909d2e9bb9027cf6a8c76a212546dc30d3933f4886424acccd12ed17b788ab4100b6fce4b81aa67b3f99f1b04b1382175ebf2480082436fa59942f9d9eec2dfb372d651c9d0799fd41532be14756203cf495dbcca4fbb7d387f7946d334e3338b5f2565e0dabd2a2d1baf3e35944c29dcdb2948fd45ec3a7d193b9771520dbe7dd4bb07aa0e17f690981477e4f5625168ed7b4bfa04f11a5e29c45ddef2927c42ce137b556a991cebe9278f8d9710cd772554364c2d9f9066844d8a8c3f495fed0549c87d76046dd0fefe7cb7955ec71d04803794ab7f3e4730b334ceb6e06c275156bb296b9c94c7a43f137a8b8b3342dc19ad5b90efc25926ac60eca65aa07845e411e2342ba74114aebdac0b8eac518ded9e348844f5c9f593cece3f5004e05a7f561ed71f34f6b0326ee355e80a0d3abf2c72284ff6886c013f46c6c20f48ca0b5d844087e756d1a063ba0606410003fea14fba3dab202a8ea9bd7c758089aeff34b9c1f6696b0a00074712a2f31d23769ae8ec7bbfd2e25a857de818335652928102ba3a6d84418183cecbb0c8fb12c013135649e4b7d8b6a73878dba4c1dd9dbbcc4c1682b7e0720b325ce7040a3956c1bbc8b16aa8dfdfed90200e89365003254e5d9368deb19315c7c429177aa4d9deee097c4976213d346e0aa54e283fb41acd948af0ba9df40a1cc57efae3c8ae362489f039f6c6d4ff8d1ab266ffa6c485ac6504f73d400a4f644e54911824bb32d357b309b2bea16b61304be417508fd0b1439f0f7223ebbcc11ce84061f477ea998fcebcac0a371715fea6a36ae905e415e56347363897cfd6c2d2761ae83cbf6047953d17b7f5e4adc8576f4ae2edaa317779a827a6cca0fe2b4f72c9cda37798de7ec33a99eb8b7fd1c6c30e7ce1b22c93442fa971fd5f36a6098e2f589a93034629e006d73b6b6281ab744bc17499e38cf61e09fa96db1caa7caaee2f8a57fb77b95ef231275530258072632faf47ac68f2ee86581e1581dc49eb546f99007b3a9810721a590467d58296fc35bc73ed05f00cd18a991229c06c1e3ba38bae1fbeaee91a7efbc2fcbf31c1b8f7440390bd96dc232e465296ade8399c53ed00a34c057b7b8ada868ead9e31a661ed38a8e7c583f8b13b58f0c00768e8a788147c2081e6303568ba63b1791f91b8afa15636249660eb2db1a29131f98f8496617505b7cc7de2a9847621635acc0f0a1ee38beed651c665a1e03c74b8ed38711232767d43adbb658ad05e202fcd4913c24ea80365737cf8ced167dbd3fdbda963ea7c89cc9bbab1342608b552582ab62ee39b2d80b1a73ae56178d2bb783a72c4542128163898a45447823b0659dd543429f1d1246902387e67d3289d95d9ca88241818c5c0d0dd8bfd9a1fa03de6e09bcab5982c51f39e17d0289e7db9bc58cfda26eab7d59821d19b05752debc95f47fa363166c99c7a2e1fe3b34bfb1fb8ffcc52284fbc030be672a5272e899f893b6e46a4d42d1e90925aa7b518e67040db3215213bb535e59963a61e2fa89cb255b907214c84243f857fe2ac5cd83feec42b46601b5d35eabadc65083190440a32d679fcf50c88220dc2cac28b7f8731dd769685a184f321d6d23c208c096d092265d185ef77896836a7c89e82144523bd420d64bf7fba840ebd781b46bd03a1bf494dc3c005337a8806f87ec03a84da166678d84538b79be8adc8d82d9e65e4a43bcdd94fccf539927f8704f4c3fd54fd0298b51bbe448db8403ea6271a879bf71b7847c247be30043207283f08d889f3e1e495aef38d6ef0a98bacda4f2e564c4cc034e4a27c634e7c17a0534d76215acfb3953397f0e1ba53a056267baa575558bf30ae97da188dc2cc808b8e12a00465f65716ee86230867dd3eb15e92f42dd1321202b64e480f69cfc449c3244ad20467e04bbb7ff73c44b1a455541c437f81c222834993988158b49e94857d54bd7edbe5788fd71ea0ab60fc78ed6cbfeab53c2a7e52b05c22a6e995092391817552e7b7c624e033dbe810e8304ac3e689f36693c5aa9d6c36afef619acb536516b5010a41a2aec7e0b97a533acf44a3cd92555f2a0bae597c251271c5561f88172aa911770b228019f0afb6d23de7bf93a515fe3888a7035f202c0293d4b3eb7673a544d37cf8e2561ce7697059bf077d8f0f6557463e72c0797c472504b1e2aa7d64e67d8d56d0bac0b71dfa30a1ba4b4c90d7fe35d06f599d7c3dfbf046228b7d7184f18f65561627d27cce727ebe6aba0e12b91a8c9e0320f65af87da752de44cbe9f79ae81fd304defda013227c350845ceb9d835ae1710080daf750d1c0fd1ba01de86458a1b268fd318341ea8b2f423b01287206969486079d2f92e37e1ffe677dfb43859bfc8c5194da5e5e74a8c84243bea6475b3ce847db070299811c05381e10b8558389ba81101eed5964b90b20616c9d4ac8abb8bf5c2b201122a542806d42d3d853bb845ae7b325f41ede8b09898f0735927e29f31cb1761a501a109d57df31ca5c0d73b62cfa7767324c437654a16f780e95e9bb7940533d57de66754ae0ee21720994199e58ae9662e7846b4a372c6f95041d5abe1f7959eccd401ac8642b398bf88339358738c4d4df3b543ccafbf79982d401185970c62904f5fad1636797d379ecdd09a16c3f3af9e79a09c740e269beab5324b26347d3bf8ad7966aac9fff1b7762e8959cc6274cf0258a9b8aed34ce7a71b613ad4131eb95b3aaea8aa28d1468711c875ed4c192411e93e1dfc47b38f8d0eec61f0b7eba26ccfefabe190ba7572e9c1dcb3a919d3e2e6cb849416a0ed2a3ca67f33831527862a85edd87557eba7f4e32f71ebd7668ea6599479502c154d5ed21cc3d494d5a076bd89344f4148cacf7c9f0deb987834df701b5f4345b048d63e131c9d3835de7907e8dee83a53a1d686e8b8f177d33581504c586e4c430b16eff512f090c799cdbfc602e0e9fff8a7e9d9b72933e2d24a353d5612b8db8ad7781c5f02b0e33898b0c58215867f86c07b44ae79f1afb4a6f344b949f6b3d5f2d55c097e611484f73de344c8f74308bf72ece07fc9ccc0abbf371a138d7df5622edf8c47efe643f3e80f0ec4fb2f54658ddfe93edd1ccc04452b46bd59c7a17f8f7fc8bb90d50e1974163ddf4c827d3d120ede35c0316116a82559f8b0b273226edee8c37ad3e5c17d110ebf3d30c03260c527f68738d7a8b1a65741cdc8658aee016763ebbdde5e5a91ee2928e12e8b04b7f40e511909dc6111fee81dd5b68b3fa6272fbbfc0a25db056397defdd14ab503a9583dea3be542ec856993b6597498880ae3559fda19ae9dc1841681e186494f3700e9416032ce232f3ac37921b3cf5b7ec8da4db8403d41d316f9f44e5a7efe8f83c6f85872afa8467b6412372ad5af1a1c60690452a5d55bd9d3385dbb7dceb227e6b7d92879f4dca50accfefab7087bad43db7956ee72dfc99bb1014de5bb1cca4b952a1093978896e23b30ea0c8a42898e2cb9d24acea87e4c27a83b965363785a1a75aa9d824cd9ca01c4b863468c0a2e6dbad7c162154bb026d10c7c3b415d827d2c8f7a2be45b96e45c316d44e836afd26376416bdf288844ea3df0db5d70880d971c7c46d9a1b8b5f01afd057fefa0cde8f98842b2b95d80cf7857f35f40f39ed2d5ba7f1c1484f93a77c9f886be7fb414b1d31b51ed454bbb3ca40a73d249d43633be27fdfda963e0b3931d13cbe689b82dbbf27270738e38ae42dd4707310f1d286b8c8528c732da7c7d8b9bb7c99571605b7e9080df15f8be039ea081efa5fa64af0e33a81cee5f4da090cf52ff807598fe7cd5b694f374e8c47e31af801615ae84449598a52698895a44bdddbd742deae625ad1f16790bbc2eab04443942c3ad2704189f32121a7d979fc1d48cef01b38dd24b342cd2b1379543c645d6ff197a1edb7592b9a5990fdbf8832143d671049e88f0ef8afb49da115673b5437be6b891881928f029c479adc996fe4596171b22ba26262425e31229db3b301111d4811ed24b636bd0a32e4740c6ca14e9605fe6c92e4955453b9b4ce1ef0df7476cd6683a5d2fa5bac6994e0b6e5f90283280c59c5116eed7fee57b871b74e4e066194fbaea80463a19784479fcf2f34b34f83ddf146426988d9f8026d3c991f58ab44ce0d82447288a81460e720611b9bf98f270924a2a0e64988cd791a8945fb333bc2da7993fc6b7444443370bed486642f0575b8f9ce3710777d9c884c615f6dd932ca111314d93d15b48c764bd3da5798282ddfbd78fcd983c59c7b88c56077ba86a8746011bcd784010e10a11504607ecee951153caf37ebae8c2ceb67df704ac172fd31acbd5566453d001e20d5e31873a06555098656acd1131e108cb30a4ad7f83f027f8ee5668a5e569add", 0x2000, &(0x7f0000006f80)={&(0x7f0000002480)={0x50, 0x0, 0x100000001, {0x7, 0x2d, 0x1, 0x20000250, 0xf800, 0xff, 0x6, 0x8, 0x0, 0x0, 0x40, 0x3ff}}, &(0x7f0000002500)={0x18, 0x0, 0x4, {0x1}}, &(0x7f0000002540)={0x18, 0xbab16880af39da7c, 0x7, {0xfffffffffffffffc}}, &(0x7f0000002580)={0x18, 0x0, 0x30, {0x6}}, &(0x7f00000025c0)={0x18, 0x0, 0x77, {0x8635c7b6}}, &(0x7f0000002600)={0x28, 0x0, 0x9, {{0x9, 0x7, 0x2, 0xffffffffffffffff}}}, &(0x7f0000002640)={0x60, 0x0, 0x7c1f, {{0x9e01, 0x80000001, 0x3, 0x8, 0x0, 0x1, 0x0, 0x80000001}}}, &(0x7f00000026c0)={0x18, 0xffffffffffffffda, 0x1000, {0x8001}}, &(0x7f0000002700)={0x17, 0x0, 0x2, {'user_id'}}, &(0x7f0000002740)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0x5}}, &(0x7f0000004880)={0x78, 0x0, 0x1, {0xc15, 0xe, 0x0, {0x3, 0x8, 0xe1d, 0x8000000000000001, 0xc9, 0x6, 0x7e2, 0x6, 0x8000, 0x1000, 0xfff, r6, r2, 0x1, 0x7f}}}, &(0x7f0000004940)={0x90, 0x0, 0x40, {0x2, 0x3, 0xd0c9, 0x8000, 0x7f31, 0x7, {0x6, 0x8, 0x2, 0x8, 0x631a, 0x6, 0xd84, 0x6, 0x7, 0xa000, 0x2000007, 0xee00, r3, 0x19110}}}, &(0x7f0000004a00)={0xe0, 0xfffffffffffffffe, 0x8, [{0x0, 0xb, 0x9, 0x6, '---\'*%[:]'}, {0x1, 0x7, 0x8, 0x8, 'group_id'}, {0x6, 0x6, 0x2, 0xfffffff9, 'fd'}, {0x0, 0xd, 0xe, 0x8000, '\\!$\xba-*).:@*]{.'}, {0x3, 0xfffffffffffffff8, 0x7, 0x8, 'user_id'}, {0x0, 0x400, 0x1, 0xb32c, ','}]}, &(0x7f0000004b00)={0x10, 0x0, 0x6}, &(0x7f0000004cc0)={0xa0, 0xfffffffffffffff5, 0x3, {{0x0, 0x1, 0x6, 0x100000000, 0x3, 0x5, {0x3, 0x9, 0x1, 0x7, 0xe35f, 0x4, 0x5, 0xd, 0x5, 0x6000, 0x9, r4, r5, 0x4, 0x7}}, {0x0, 0x4}}}, &(0x7f0000004d80)={0x20, 0xfffffffffffffff5, 0x4, {0xfffffff1, 0x0, 0xffff, 0x4}}, &(0x7f0000006e40)={0x130, 0x0, 0x70, {0x5, 0x7, 0x0, '\x00', {0x4, 0x6, 0x8000, 0x4a2, r8, r7, 0x2000, '\x00', 0xfffffffffffffff8, 0x80000000, 0xffffffffffff4d7c, 0xfffffffffffff801, {0x8, 0x3}, {0x7ff, 0xfffeffff}, {0x8000000000000001, 0x7}, {0x1a7, 0x3}, 0x7730, 0x7fff, 0xd878, 0x401}}}}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 4m11.798727612s ago: executing program 48 (id=4047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x2000801, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000200)='./proc\x00', 0x1028, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x10081) stat(&(0x7f0000002780)='./bus\x00', &(0x7f00000027c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f0000004900)=[0xee01, 0x0]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004b40)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000004c40)=0xe8) getgroups(0x4, &(0x7f0000004c80)=[0xffffffffffffffff, 0xee01, 0x0, 0xee01]) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x9a) read$FUSE(0xffffffffffffffff, &(0x7f0000004dc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x1, &(0x7f0000006e00)=[0xee00]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000480)="f46bd699fa95142b19b7031c6e18caa6ffd93c79d093376b053d9e80a2b3137e421cb9db11c1b9b957029a3227ef3eca2b45d2e5de206f6cc47a56b00b62c7341ea3bc96110d1c8ef39f0722fa65e50a188d17833d738982b3c311b257879f3522658a0cd76e3092c13c0fca88a8751b102b658a8a52ea639bacb232d2e7d76e3fc06350dd2953d0aaabad8e110715272adf4ec946c242d53fbe38d4b2f9cea7c3cb082bb4cb4e4e4946cfef7aed6ed964e8fedb5cc6c2fca8aa744fba780ab69c33b595f1d7fdd93859dbc88ac961fb294a8da2a00beec3597c8f06a8761e73cb6f464e74619809554d87cc01cf30be237d79d31e59fede7c9f2e17af6eed66678a4f4d3e9e71104d2f54a1b23b3997415e3b745342911539fcf7dc3e7f83a0b7dbd47cbf22f6eecfd1daf54efddae356ec60724f8432f916ab9e99546e1b50365dd7a4cdedb5e2c3c724401d7cc3e6bf622d5f445b5645594e2c5af58c1d1dfe025ee9c824aa738ae8a73c1680532f8e2134a4e9ede2fcf697e0302a379dd5605f1bd9d5361dc2d3c8ce7981fae79739f4a694a3a3193bddc13eac88518bdb25fa9e621b10bfc3b7de861f97d2647675aaba01d28e0c20f499b5d0b4fb411498c2c19230885ea180e0584e2a8b6fe2febcc72b000ff49252d173759376600e7d1eef57e9cda952865a368b809831ffd3dceadf387dfbbe03b39bb77e3736396824d2a42476298ce50fb420bac907cc4329457f4419e0ba14e6b8e6815ed6a60f488adae8e5fd650fbc9817f5fe5fff9ddcdd7290231caab001e9515b81ebd3b3a5b499f5ac6a90f60a54eadb178b4b08f7cb467521c25b055477d16a1f1ab75296fb27f559876ffc5d6a9b72c0321df63b7b2e7cff8fafb0296949ef29fe954c48fc4665a2a639fe90c9071f6902c91a3245f9f944a2e13d2979dadb492e053af58ab7a2bf320ddae4e338116e5ba3693c7edcd6a5927386c890dea6370886dcffb691700220cd5c03633d7829175140fe4c4be51becf94e32132a3502f9aea3610ca55453df9f3e0060857da99e8bedcbe735192ca2e911be2ee9844f3ff5cbdc079fab87cb4504d2a216a5ec119b2267002f6be673d236595e6e99c480a400f8bf375642f21814efae43afe359fff09deb2be6d6a856e19ec3418e13722b6ee32b52d3292c72f838ceea208b400e512c79d3f3f48be72f24210359c97ef3d5584409e5e6310f8a5af5290ca3b75c168d0b4e6a866ec06cf439a81af660eaf8cab73b5173ed5f818a1eb747ca0d5581acbb4cca979cbde59d2a1e763ab93826f1d612e7ae2666a8626997579f2fee686855cf13f9048b5b073ed8c42f8b5aa6c725470081181d5b2d04a75ef96696a711a3a07e52fe17653c348e7516fe78b15bd8218202debfc21dac94251d9933a34af6af496d8ebc607cace8d70985c3868b2d0346d9ef59c797ddc5bbe9c6b59f85ddda2db7a7bfdebaa35611e701a95de3f930b8c988f3b38fa889fa09a77f60c824bf464bd445ea886542b910f1d61ddff4d4f890292fb1182a44d9bf13460759c363cfcfe72f2594f04d2257c4a93224d19d491d8070f6e445dccd6096c11c1bd78823c5a146f642407787e24ac6a4a068f33467ec7e7d050c2fa77af5fec6d63c485e6e1e9e616adc7939329dc0fa3646b1f9352792c73a8806360186c22ff2374c34aa0a2cba2034d4b772578285648f4a289a6801e9c5a2b099f74d819522f6a2469031c846c577f4d15c8fb2dfa4570943248cfda82e4454f777e019aaf655d16625e41be93cf787de5423d4292d02996f7b7b69a143b5be5732aceeff046804a8d94c7522577584fdc36fa2b456164edc4e8503c342f71c80293841a8a92fde4ba4c3d626c6bade8bf4b84be06c6d781226ea12454a0ee2eb579bdfa105150d009a793aeddf01ae9318b5de220ff86feb9b14ec02c7aa963933f2e71033533c83bcefb7ca5553dfa14d0596badb522ecb16ddb636a585f05ae1e23a638fcb4fcaddbecd1c40469a421aa564e2f12910718be017d73055fc057941eeec73093aa5841c57b7e93de1cfb4f45b1b73fc1c3265ba9487b04a40786ece6d0f90b3fad0975bd5f5226ebda6f9e1464c4d5d481534f0b353657cbfbedeb1115f9af021a0dfe2729ad24dba8fb1af060b81093d808c8b8c7e52d34f260e428b3c7efc15927407d670df1c7aeee28d53b6244b6986c0f6a8a326ffd37d635a17b458f695a1db65ea40f7d06c337fa1ea9d80cab2e1296386f3d25bdffb24275b95d71cb7e6a1e34b8ff133e5eb701a216acf085ce6f0f340d2cba5bd975ace546300e92626925af3a6a61ebc7d3bdd4fcb09630b060cb0a24673de4de848cc655fde9b9979a05bc73e9be73e004cb7001a5764c4dff40c6fe546841f595560adbda555f9e059bb05abc87d7754ca237312be10535725f5123bfcc50b4266761177f3fc1fe2d4acb0d7c728d223c235730e7784e762bd15d8da015115379cf8a71d8995bcb634d2511d2fdfb6f25c9eab47a54cea57c871a9ac22d983bc1574dff943cd3ee88ab946adb2278ac17d90c8f0ccc824b0fb75f09b1390b5713b642375adc792fab7893d6d1b1bd0300c1639bb0b613aba2dd80d19844cc8e313994ce1f35230d7c5454cc2eb5a39341ff9508897708b32610a848f45b08a18985e1926d3d4b13533661698474fa28007fd83ab7a4ec674ab961e369ec29fe5b67d85f8fbe8afafcae2d76801516941a193add2cd57adc064b3a0114c7dd2959b2b58062f65655e582efa4fe7f518380e3483bdb6154094f545becd555eb7ab46b133a666fa941047ddbf688edc665947fc30edc921c835bf8ae2555cb783b305fc9803dac64fc5218a3219209b942fdd00da99469a0747964baa81732ce430334b8b1f51e0f16e74202993ea03a937b1718f52f56000a3a21f40f7f7f39ff890eb9f58a3c699bc0cd06b130ad136af5282b070d3f5ddc6ea6adca2eadadaaee11d75d4ac2d02199ca072e0673fdb7a931aa4cdeb31d3bd6352c49f953a804777ab35cf85ad03ff3a387b64abbf9e6da5eb153e723c5a722cdb093c971bcc06db1eb1dba210efa1da96d616070bf61f87a01b06c3adc9d81350d6a9c3e14d8e69fc2985ee843e4fa3b0439245316943b0bc96280e8b4c55529900c5f5a48d7306639883a6dc3bd3eee9ec64ec12dbf288957c3d0a7100a0c0e9243246dcc5af26ac5c0f88639b689186c87d3d9bb8cf6a0616f0679ea643d19070789e3ff5ea908bbe80ef3f7a61039cf672ffeb80ae53a75e492fa4371764875b2559f5450fadc3e8824f1542d54f53f6081fc916612d03f917dd8b2956d1e4ab6c651f08d2a7fa9f39068fab11983c880c82a0cd364d8d651b209685cb8b464c95baeafbf0ee7213e79b29195e77a9ff76c620fcfed73f9b0297a95dfe752ad48ff46131dad1c860c206043611fb69492458684cd91c14d9bc3ddcca1d79e8b05b62d0ee09b8d3820e59f3848e1e5f13c104fd156c87b984c0f67ab7a05a283f8843cf4a01a2c9e36afcc0c17fbb6831481498259470890e13d16d51e76a0d1f8a278cf8926f0e8e7726b921cb8397522584b01d6643d37e29673623ff1b319815fb103153fbc30c4656ccfdfe71cbe0576eb678041f1348749530d36fa6c16a4cd0b696c760874ec444c4b47ef423efea02c04e8d0cdeb1b2a3174a015f31a953c0a27c1c5ec606d4de2c504ae003fdcb08f94fe6d38194e5d30ed7425d43bdfb3966d10081d9acb6fb1105f9ebb4da36996322ad617ec509479ccdbc7eb8a1f66a66198cea77983fc9306669cfe03ede602b10835d813934b7e3ca207cd80c34ff32172df692e985ea3ff567bdecc8179a3d4a82235da16d402db1e7e0e2ffa8fc84448c18bc880a6df979f1d8d58cea48e13cefedb70855a65632ed5bc4a5c964e19e00b32265b023c00e2b7d402327951dab7f338a145124f092341b59411506d23e86626c596dada585c7af5ec4de476453e11092eb1bd2a2214f977291d6fcfb2a7e68b796ef51d003c2599225565faca81e5cdcc5593644647568195635c6c76f743968ee39153f7fdb8828afe6ee7872e72275b76e72846f22db517c9c0bfee4e072910283254e6fdadf53b5bce7b91524a8e023dc5a3329698046da332bde72d0704a00141e89721d0f74c0c0c080c7478fe48e75caf287374e7a4da3fe69feb87efcbb40c363f4635c04e48ed4cc6865bb5bad091c6f0b81ae0a818301962e38f437443d97598c2891e058c6c9f8831ccbb3bf20b4cbf8ef1cad65814b79bc0db84e790e59dd682d56a5e9fd31b0babb158cdfa28ceede88132d9c85f784266452b5996e45a97eb0942e1b45131b3fc540e72c4fe76446e0efeee607ad9166f6abf3fce8db9322ddb8c9bba56e22909b0776ca685ca3b86dcf791d4ce2573f182ceb54eb12570fe70dba3fdbe5e42db348b8915570393e9b0d213daaf720cc6eaa2fbb0d3a6f82e1eebba9ea53830203f4ba0697b3f8be169b49a086737d8175acf6a467a00eb21e8d6f31dcf37a6b7eaf21fca42c698bd14fb8c781633d9d260d96b86da11b3c673a4c46559d4e50d23a12e28f4e9ba652a61a001df5a6cdea3e6812a91b2168f63688401ae6244390b7ba408cda64150ae132d7c22ce2846d9363f288511a35c7cf5a8bc5ad5cfd1a8ff28231f123fee50562d9e93048deb14dfe12c9e282559b74dc4536c342064ac1f423d99cf7915f9293d717ca57a85782c9f19a4961561fb57cd92fe9ea8153adb348a33f0e807da25d9220860c2243bd6c27ee296bce36aef3a0b2698ed772a3413c79dba48b2b414ed045ad246b8f1fa1253ffbf600eef9d2ff850f4a01dd00964a8db05cbf1a537f91a5e67d026aba8baa5868b7bb17a8c1a000321b9bdd52714fdaac05831b37e4a5f8a463eea5e69d5b12e3ac4514fafe9eb6fad524c09bc5042bf1103e17b9b7e85253812ec2633c9608ddbe7685a65bd7e7d70acb75cb61446cdd448be93d10bc6cf958f5b3dab8cf5f164c81247fa2f29743f429145122d8bd7ad85184421cfd8a2fac157b174a324695e6875beaeaf0aeb599ad990dfb082f39ed0403a5f65f47ccf17bfb810631ba3328202240ea59a0104e74730a41eaa565415072cc1afe25a8a6f83aa227c1a280a73cd6228c5bc4d041c838d09c0fb4dc07f3e2644a79983790f229273db082235a541f5a5c94e361ece9ac774cf10ca441d6f0dde0d9ad167541acd0fd7e2621d23977e30f2500c8771809e185f307fb20258b90c60e83577134c8c9a65c6232bced90d576bf8bdcd116365d78f2cc4c2247523538a996d6c743cfef57d33f9b74f12dd362a13bd65685227d6ad349019bd412cf46e24a655880776c70c9e57b906218596eedafe665d6a4d5d75cfbc8a21ed0dd472356d4e11a37aa0a8f7ad9b7408cd089729bd87f7e4f8ef9d981e13b382d76eb07e5548383ec011fa52350a1e33a8ce611456b0f8132b6c2920c1e4833015417ad858394bc08d7fdca3bbf9b091fcc58e0ac82a6c0872c2459b3c67f8d4139fc758b0daef21636e366f13732a267bfa9813cda3ddab41e4b164c79b4bae7b232745f3b0a436c7668e63a6dfa608c6cb70fc39797c9ee5f19a0bd34a150dcd5762fac0cebbbd57609741d72ca56d47e317877112ee3d70905203806bde72edfa6bc6db0476136d783b7edc24c11402535bdb8e0d8a4446539e5839b5a8f45ad640888b9d8c13fad27c23b01bcb37dd36f4714660136d2e8bb4b75ebffab9afdfe669213d50bbd4130ea40a70db618ce7bfd1e2bf8a1b5fcae35818a17cef943b9dbc51c0741e28b2402b64058c0de894ed3dff01ff84f4e468b8368db8a214b48530a9e60c35cea8521a858a06db2a347aef179aca90d2aafbb4413111f4c3ccae20f589721d7d15f6aee9a4dda772c2aaa2b24bb4800123f129fdf3b36485d1ff04d2e55395cba50054a7599d6fad10cd384aeb07d4eae600e4c7cbd6d2ca66bdcb8698fd26b1621bb216570787268303bffeed5238b7286bd502465adba1ef8c9af0804580b14ba8843925bdc428b748a1e5999f3d882c9905c2f993cee21ffe2d42e21847541e4600655d5d27355d365d000d1e2a2c5a12ebe5c26484343e1f39f869ac9ff79451e7d32d9908111bc8a4263290b693534fd3663ee60ec517712d4e56fc8900ccfedd0f67c45a15be5f5b11ca129be4c5e6e0352156a90256b983837709664bf172c0713cbf4e48f39f83970740499334780ea4b76704af9c79d83d294e35318ba2994fc539defd5ae65ba8ed7e6b0d1abe14c29d27b50623410feaea8a74a1fb8626241c376c22e6f655b5db088ef1f4c5c2492a89b2b117f9256196ab8544c789bcde786dd398487175e5e2a16fe906fd582a0f3b2b26eddbb48aee0eb5a6ed877f483c7cc6c63a034a4ede2b877562b0601f74d428f7400d4c5289d0669406903fd568f25a9a530c2796cf810e48ee2a294a8a5b1a7e9847f71bbbba758ab39bea088b2fac675bc5905cd6a72d305997e253a1a087027cd293a8ac460e3eced22bf82742f85210f30f3ad8ab32dcaf153892b85c2f206636dae89dde1d7e60f9a6fbf05923dff6c80ff396d427f200a8d1806bf65f1e2f6cb0b0e7b3146ca1e8828f7018f3fc6f7e5c97c744adf024d3bb4acca4ce0a9b07482c1d0b971d4d36121a4eab1059f3513001da7f7f591ab3bcb3ecbe4c10a817903bc210c727541f5b4c4005a3e73c0710c02c277e20407bdafde06d2190467966ff68002e85efb5d6fcf7b6adedc1808e003f7e0fe9981775730b9102a8b54ed63fa273f73c75c757b9bce47149c47848275a6ebb4c94eb580bbc3bccc1482e82c093e6326064a03080521181ad825846e47de4719de698ae306356d19be3f6c61092676878d8ddd1181175c93e4b1ec83d47e9de2ac7c495159bf63508404e35e1531fff5112af8a95ffef817c56b346e7f6b80a77915cdf6960849d61ff30b079a036dbcc53f87bff1964077ae6d392f351ae4677ac754eb1758ede0b7d8cbcb38440556aff01e3231f16ca8c59e629024eb8e06d042d7b4370f7ad770386e4a71b40cb60dbdb24f9733b074fb03bbe978c1ba40b9f62b402b344a5305114344a0e515909d2e9bb9027cf6a8c76a212546dc30d3933f4886424acccd12ed17b788ab4100b6fce4b81aa67b3f99f1b04b1382175ebf2480082436fa59942f9d9eec2dfb372d651c9d0799fd41532be14756203cf495dbcca4fbb7d387f7946d334e3338b5f2565e0dabd2a2d1baf3e35944c29dcdb2948fd45ec3a7d193b9771520dbe7dd4bb07aa0e17f690981477e4f5625168ed7b4bfa04f11a5e29c45ddef2927c42ce137b556a991cebe9278f8d9710cd772554364c2d9f9066844d8a8c3f495fed0549c87d76046dd0fefe7cb7955ec71d04803794ab7f3e4730b334ceb6e06c275156bb296b9c94c7a43f137a8b8b3342dc19ad5b90efc25926ac60eca65aa07845e411e2342ba74114aebdac0b8eac518ded9e348844f5c9f593cece3f5004e05a7f561ed71f34f6b0326ee355e80a0d3abf2c72284ff6886c013f46c6c20f48ca0b5d844087e756d1a063ba0606410003fea14fba3dab202a8ea9bd7c758089aeff34b9c1f6696b0a00074712a2f31d23769ae8ec7bbfd2e25a857de818335652928102ba3a6d84418183cecbb0c8fb12c013135649e4b7d8b6a73878dba4c1dd9dbbcc4c1682b7e0720b325ce7040a3956c1bbc8b16aa8dfdfed90200e89365003254e5d9368deb19315c7c429177aa4d9deee097c4976213d346e0aa54e283fb41acd948af0ba9df40a1cc57efae3c8ae362489f039f6c6d4ff8d1ab266ffa6c485ac6504f73d400a4f644e54911824bb32d357b309b2bea16b61304be417508fd0b1439f0f7223ebbcc11ce84061f477ea998fcebcac0a371715fea6a36ae905e415e56347363897cfd6c2d2761ae83cbf6047953d17b7f5e4adc8576f4ae2edaa317779a827a6cca0fe2b4f72c9cda37798de7ec33a99eb8b7fd1c6c30e7ce1b22c93442fa971fd5f36a6098e2f589a93034629e006d73b6b6281ab744bc17499e38cf61e09fa96db1caa7caaee2f8a57fb77b95ef231275530258072632faf47ac68f2ee86581e1581dc49eb546f99007b3a9810721a590467d58296fc35bc73ed05f00cd18a991229c06c1e3ba38bae1fbeaee91a7efbc2fcbf31c1b8f7440390bd96dc232e465296ade8399c53ed00a34c057b7b8ada868ead9e31a661ed38a8e7c583f8b13b58f0c00768e8a788147c2081e6303568ba63b1791f91b8afa15636249660eb2db1a29131f98f8496617505b7cc7de2a9847621635acc0f0a1ee38beed651c665a1e03c74b8ed38711232767d43adbb658ad05e202fcd4913c24ea80365737cf8ced167dbd3fdbda963ea7c89cc9bbab1342608b552582ab62ee39b2d80b1a73ae56178d2bb783a72c4542128163898a45447823b0659dd543429f1d1246902387e67d3289d95d9ca88241818c5c0d0dd8bfd9a1fa03de6e09bcab5982c51f39e17d0289e7db9bc58cfda26eab7d59821d19b05752debc95f47fa363166c99c7a2e1fe3b34bfb1fb8ffcc52284fbc030be672a5272e899f893b6e46a4d42d1e90925aa7b518e67040db3215213bb535e59963a61e2fa89cb255b907214c84243f857fe2ac5cd83feec42b46601b5d35eabadc65083190440a32d679fcf50c88220dc2cac28b7f8731dd769685a184f321d6d23c208c096d092265d185ef77896836a7c89e82144523bd420d64bf7fba840ebd781b46bd03a1bf494dc3c005337a8806f87ec03a84da166678d84538b79be8adc8d82d9e65e4a43bcdd94fccf539927f8704f4c3fd54fd0298b51bbe448db8403ea6271a879bf71b7847c247be30043207283f08d889f3e1e495aef38d6ef0a98bacda4f2e564c4cc034e4a27c634e7c17a0534d76215acfb3953397f0e1ba53a056267baa575558bf30ae97da188dc2cc808b8e12a00465f65716ee86230867dd3eb15e92f42dd1321202b64e480f69cfc449c3244ad20467e04bbb7ff73c44b1a455541c437f81c222834993988158b49e94857d54bd7edbe5788fd71ea0ab60fc78ed6cbfeab53c2a7e52b05c22a6e995092391817552e7b7c624e033dbe810e8304ac3e689f36693c5aa9d6c36afef619acb536516b5010a41a2aec7e0b97a533acf44a3cd92555f2a0bae597c251271c5561f88172aa911770b228019f0afb6d23de7bf93a515fe3888a7035f202c0293d4b3eb7673a544d37cf8e2561ce7697059bf077d8f0f6557463e72c0797c472504b1e2aa7d64e67d8d56d0bac0b71dfa30a1ba4b4c90d7fe35d06f599d7c3dfbf046228b7d7184f18f65561627d27cce727ebe6aba0e12b91a8c9e0320f65af87da752de44cbe9f79ae81fd304defda013227c350845ceb9d835ae1710080daf750d1c0fd1ba01de86458a1b268fd318341ea8b2f423b01287206969486079d2f92e37e1ffe677dfb43859bfc8c5194da5e5e74a8c84243bea6475b3ce847db070299811c05381e10b8558389ba81101eed5964b90b20616c9d4ac8abb8bf5c2b201122a542806d42d3d853bb845ae7b325f41ede8b09898f0735927e29f31cb1761a501a109d57df31ca5c0d73b62cfa7767324c437654a16f780e95e9bb7940533d57de66754ae0ee21720994199e58ae9662e7846b4a372c6f95041d5abe1f7959eccd401ac8642b398bf88339358738c4d4df3b543ccafbf79982d401185970c62904f5fad1636797d379ecdd09a16c3f3af9e79a09c740e269beab5324b26347d3bf8ad7966aac9fff1b7762e8959cc6274cf0258a9b8aed34ce7a71b613ad4131eb95b3aaea8aa28d1468711c875ed4c192411e93e1dfc47b38f8d0eec61f0b7eba26ccfefabe190ba7572e9c1dcb3a919d3e2e6cb849416a0ed2a3ca67f33831527862a85edd87557eba7f4e32f71ebd7668ea6599479502c154d5ed21cc3d494d5a076bd89344f4148cacf7c9f0deb987834df701b5f4345b048d63e131c9d3835de7907e8dee83a53a1d686e8b8f177d33581504c586e4c430b16eff512f090c799cdbfc602e0e9fff8a7e9d9b72933e2d24a353d5612b8db8ad7781c5f02b0e33898b0c58215867f86c07b44ae79f1afb4a6f344b949f6b3d5f2d55c097e611484f73de344c8f74308bf72ece07fc9ccc0abbf371a138d7df5622edf8c47efe643f3e80f0ec4fb2f54658ddfe93edd1ccc04452b46bd59c7a17f8f7fc8bb90d50e1974163ddf4c827d3d120ede35c0316116a82559f8b0b273226edee8c37ad3e5c17d110ebf3d30c03260c527f68738d7a8b1a65741cdc8658aee016763ebbdde5e5a91ee2928e12e8b04b7f40e511909dc6111fee81dd5b68b3fa6272fbbfc0a25db056397defdd14ab503a9583dea3be542ec856993b6597498880ae3559fda19ae9dc1841681e186494f3700e9416032ce232f3ac37921b3cf5b7ec8da4db8403d41d316f9f44e5a7efe8f83c6f85872afa8467b6412372ad5af1a1c60690452a5d55bd9d3385dbb7dceb227e6b7d92879f4dca50accfefab7087bad43db7956ee72dfc99bb1014de5bb1cca4b952a1093978896e23b30ea0c8a42898e2cb9d24acea87e4c27a83b965363785a1a75aa9d824cd9ca01c4b863468c0a2e6dbad7c162154bb026d10c7c3b415d827d2c8f7a2be45b96e45c316d44e836afd26376416bdf288844ea3df0db5d70880d971c7c46d9a1b8b5f01afd057fefa0cde8f98842b2b95d80cf7857f35f40f39ed2d5ba7f1c1484f93a77c9f886be7fb414b1d31b51ed454bbb3ca40a73d249d43633be27fdfda963e0b3931d13cbe689b82dbbf27270738e38ae42dd4707310f1d286b8c8528c732da7c7d8b9bb7c99571605b7e9080df15f8be039ea081efa5fa64af0e33a81cee5f4da090cf52ff807598fe7cd5b694f374e8c47e31af801615ae84449598a52698895a44bdddbd742deae625ad1f16790bbc2eab04443942c3ad2704189f32121a7d979fc1d48cef01b38dd24b342cd2b1379543c645d6ff197a1edb7592b9a5990fdbf8832143d671049e88f0ef8afb49da115673b5437be6b891881928f029c479adc996fe4596171b22ba26262425e31229db3b301111d4811ed24b636bd0a32e4740c6ca14e9605fe6c92e4955453b9b4ce1ef0df7476cd6683a5d2fa5bac6994e0b6e5f90283280c59c5116eed7fee57b871b74e4e066194fbaea80463a19784479fcf2f34b34f83ddf146426988d9f8026d3c991f58ab44ce0d82447288a81460e720611b9bf98f270924a2a0e64988cd791a8945fb333bc2da7993fc6b7444443370bed486642f0575b8f9ce3710777d9c884c615f6dd932ca111314d93d15b48c764bd3da5798282ddfbd78fcd983c59c7b88c56077ba86a8746011bcd784010e10a11504607ecee951153caf37ebae8c2ceb67df704ac172fd31acbd5566453d001e20d5e31873a06555098656acd1131e108cb30a4ad7f83f027f8ee5668a5e569add", 0x2000, &(0x7f0000006f80)={&(0x7f0000002480)={0x50, 0x0, 0x100000001, {0x7, 0x2d, 0x1, 0x20000250, 0xf800, 0xff, 0x6, 0x8, 0x0, 0x0, 0x40, 0x3ff}}, &(0x7f0000002500)={0x18, 0x0, 0x4, {0x1}}, &(0x7f0000002540)={0x18, 0xbab16880af39da7c, 0x7, {0xfffffffffffffffc}}, &(0x7f0000002580)={0x18, 0x0, 0x30, {0x6}}, &(0x7f00000025c0)={0x18, 0x0, 0x77, {0x8635c7b6}}, &(0x7f0000002600)={0x28, 0x0, 0x9, {{0x9, 0x7, 0x2, 0xffffffffffffffff}}}, &(0x7f0000002640)={0x60, 0x0, 0x7c1f, {{0x9e01, 0x80000001, 0x3, 0x8, 0x0, 0x1, 0x0, 0x80000001}}}, &(0x7f00000026c0)={0x18, 0xffffffffffffffda, 0x1000, {0x8001}}, &(0x7f0000002700)={0x17, 0x0, 0x2, {'user_id'}}, &(0x7f0000002740)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0x5}}, &(0x7f0000004880)={0x78, 0x0, 0x1, {0xc15, 0xe, 0x0, {0x3, 0x8, 0xe1d, 0x8000000000000001, 0xc9, 0x6, 0x7e2, 0x6, 0x8000, 0x1000, 0xfff, r6, r2, 0x1, 0x7f}}}, &(0x7f0000004940)={0x90, 0x0, 0x40, {0x2, 0x3, 0xd0c9, 0x8000, 0x7f31, 0x7, {0x6, 0x8, 0x2, 0x8, 0x631a, 0x6, 0xd84, 0x6, 0x7, 0xa000, 0x2000007, 0xee00, r3, 0x19110}}}, &(0x7f0000004a00)={0xe0, 0xfffffffffffffffe, 0x8, [{0x0, 0xb, 0x9, 0x6, '---\'*%[:]'}, {0x1, 0x7, 0x8, 0x8, 'group_id'}, {0x6, 0x6, 0x2, 0xfffffff9, 'fd'}, {0x0, 0xd, 0xe, 0x8000, '\\!$\xba-*).:@*]{.'}, {0x3, 0xfffffffffffffff8, 0x7, 0x8, 'user_id'}, {0x0, 0x400, 0x1, 0xb32c, ','}]}, &(0x7f0000004b00)={0x10, 0x0, 0x6}, &(0x7f0000004cc0)={0xa0, 0xfffffffffffffff5, 0x3, {{0x0, 0x1, 0x6, 0x100000000, 0x3, 0x5, {0x3, 0x9, 0x1, 0x7, 0xe35f, 0x4, 0x5, 0xd, 0x5, 0x6000, 0x9, r4, r5, 0x4, 0x7}}, {0x0, 0x4}}}, &(0x7f0000004d80)={0x20, 0xfffffffffffffff5, 0x4, {0xfffffff1, 0x0, 0xffff, 0x4}}, &(0x7f0000006e40)={0x130, 0x0, 0x70, {0x5, 0x7, 0x0, '\x00', {0x4, 0x6, 0x8000, 0x4a2, r8, r7, 0x2000, '\x00', 0xfffffffffffffff8, 0x80000000, 0xffffffffffff4d7c, 0xfffffffffffff801, {0x8, 0x3}, {0x7ff, 0xfffeffff}, {0x8000000000000001, 0x7}, {0x1a7, 0x3}, 0x7730, 0x7fff, 0xd878, 0x401}}}}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 2m42.062226887s ago: executing program 4 (id=4630): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x40, 0x440, 0xc, 0x41, 0xffffffffffffffff, 0x9}, 0x50) clock_settime(0x2, &(0x7f0000000080)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4107, 0x100b) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./cgroup/file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x44, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00', 0xe, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], "a1b1d0901383c30bb8f1cc716726"}}}}}, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) 2m39.405159133s ago: executing program 4 (id=4647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000500)={0x81, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/208, 0xd0}, {0x0}], 0x0, 0x2}, 0x20) 2m38.372061682s ago: executing program 4 (id=4660): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2m38.299875366s ago: executing program 4 (id=4662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000480)={0x37e, 0x8000000000000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x50, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x100, 0x0, 0x80}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xe, 0xfffe}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0xfe}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r3, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000280)=@ethtool_test={0x4e, 0x0, 0x4000, 0x9, [0x4, 0x4, 0x4, 0x4, 0x7, 0x9fa, 0x10000, 0x100000000, 0xfffffffffffffff8]}}) syz_emit_ethernet(0xf8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000005c40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m34.624236539s ago: executing program 4 (id=4688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0x9, 0x0, 0x3}, {0x568, 0x27, 0x0, 0x7ffffcb4}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) socket(0x2, 0xa, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) wait4(r2, &(0x7f00000000c0), 0x4, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2, 0x6, 0x9, 0x3, 0x7, r2}) 2m34.484146487s ago: executing program 4 (id=4689): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r0, 0x0, 0xef, 0x84, &(0x7f0000000500)="958270cda6a78bd08918a7992bf5b227495ce7922332cd5b398ffc35915e97c8fd7754cb8ff576c4fba03258d0f3f38fba8ae72ee674ba30ac9dd88608dd58a4ed1a08e6f7f79c803810ec2f01bc6fbba3254ece3f799182bc3c3b6ebe7d208dc779a893b5c5b57c89d0b2a7f778fc2b7d7ddaa00e0ae0ec44865ffb0ec43876faf617328ce619543fe864b2de357bf88b28ee36ca60ed3c496f5ff2e73562560470d18659978a7317badd30c867a7d87ce5fdc2e9c91a0c94a56b40c05ea75652b3aa1f962bb4a8fd534707dca8c728785543307129deeb1febe5789927e709a013f65f50607c88326a60e40f1813", &(0x7f0000000600)=""/132, 0x6, 0x0, 0xb1, 0x85, &(0x7f00000006c0)="be7175032863762023af56d6bc4f2bdb16a8b3ded20cbc9474741341f2217757d837d8dfddc033b0574ed5d9c536ffea4cd81daba085e05113d789e1c156c1576f4fc892d02b7812a36646649a4a6903bd0afa61b028ac2fcc2102e28b2daafc4a5fb0edcb748e3f602cda7c6a441268f9f94dd95e15b66e1d26d29af4bb5009542058bc7745f411468d25e283fa82c47094e3a4c5e015e7e4945a02ea5bc1c782391c61e311fa16cc16b72ed117840259", &(0x7f0000000c00)="cf971ccf400041ff2d0a2a381cdb3f0f6140a26edaceada294c386851513ea8dbdd174ba3f125cab37c074b949e3329627f89fb939b3725b26a7370405a671ef67b780cd953827829b44331ef399403ae5cceebdfefc2f6936439370ba4a6f90f1bf31b856f64fbdd095253882cbe49d3d740f0200892d9d2a567900e0a1ac1838f3fe74de", 0x1, 0x0, 0x5}, 0x50) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) accept$inet6(r3, 0x0, &(0x7f0000000080)) 2m34.422277279s ago: executing program 49 (id=4689): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r0, 0x0, 0xef, 0x84, &(0x7f0000000500)="958270cda6a78bd08918a7992bf5b227495ce7922332cd5b398ffc35915e97c8fd7754cb8ff576c4fba03258d0f3f38fba8ae72ee674ba30ac9dd88608dd58a4ed1a08e6f7f79c803810ec2f01bc6fbba3254ece3f799182bc3c3b6ebe7d208dc779a893b5c5b57c89d0b2a7f778fc2b7d7ddaa00e0ae0ec44865ffb0ec43876faf617328ce619543fe864b2de357bf88b28ee36ca60ed3c496f5ff2e73562560470d18659978a7317badd30c867a7d87ce5fdc2e9c91a0c94a56b40c05ea75652b3aa1f962bb4a8fd534707dca8c728785543307129deeb1febe5789927e709a013f65f50607c88326a60e40f1813", &(0x7f0000000600)=""/132, 0x6, 0x0, 0xb1, 0x85, &(0x7f00000006c0)="be7175032863762023af56d6bc4f2bdb16a8b3ded20cbc9474741341f2217757d837d8dfddc033b0574ed5d9c536ffea4cd81daba085e05113d789e1c156c1576f4fc892d02b7812a36646649a4a6903bd0afa61b028ac2fcc2102e28b2daafc4a5fb0edcb748e3f602cda7c6a441268f9f94dd95e15b66e1d26d29af4bb5009542058bc7745f411468d25e283fa82c47094e3a4c5e015e7e4945a02ea5bc1c782391c61e311fa16cc16b72ed117840259", &(0x7f0000000c00)="cf971ccf400041ff2d0a2a381cdb3f0f6140a26edaceada294c386851513ea8dbdd174ba3f125cab37c074b949e3329627f89fb939b3725b26a7370405a671ef67b780cd953827829b44331ef399403ae5cceebdfefc2f6936439370ba4a6f90f1bf31b856f64fbdd095253882cbe49d3d740f0200892d9d2a567900e0a1ac1838f3fe74de", 0x1, 0x0, 0x5}, 0x50) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) accept$inet6(r3, 0x0, &(0x7f0000000080)) 13.953004769s ago: executing program 3 (id=5639): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa0000000000006110200000f5ff009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x20b6}], 0x1, 0x76) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x10, 0x1, 0xffffffff, 0x6, {{0x1b, 0x4, 0x0, 0x14, 0x6c, 0x68, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x9e, [@loopback, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x4, [{@loopback, 0xa0}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@remote, 0x6}]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0x9, "7c7e53a039166a"}, {0x5, 0xf, "1bd99ee89e5d6a6dff5e0bed44"}, {0x2, 0xc, "9e124013d541f1e5563f"}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000840)={0x1, 0x4, 0x3, 0x2, @vifc_lcl_ifindex=r4, @loopback}, 0x10) syz_emit_ethernet(0x156, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0x0, 0x4, [0x2db, 0x623, 0xbd6, 0xfad]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000001cc0), 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r5, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x1, 0x605, 0x4, 0x20000, r0, 0x6, '\x00', 0x0, r0, 0x5, 0x10000005, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 13.541459389s ago: executing program 3 (id=5643): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 12.273307559s ago: executing program 3 (id=5651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa00000000000061102000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 12.103816657s ago: executing program 3 (id=5653): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa0000000000006110200000f5ff009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x20b6}], 0x1, 0x76) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x10, 0x1, 0xffffffff, 0x6, {{0x1b, 0x4, 0x0, 0x14, 0x6c, 0x68, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x9e, [@loopback, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x4, [{@loopback, 0xa0}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@remote, 0x6}]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0x9, "7c7e53a039166a"}, {0x5, 0xf, "1bd99ee89e5d6a6dff5e0bed44"}, {0x2, 0xc, "9e124013d541f1e5563f"}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000840)={0x1, 0x4, 0x3, 0x2, @vifc_lcl_ifindex=r4, @loopback}, 0x10) syz_emit_ethernet(0x156, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa8cafb9f1655088a80e00810039000800431601400064000081069078ac14141fe0000001444c19030a01010100000f6ee00000020000042b0a0101000000088eac1414aa00000009000000000000008993f6058618fe6504ac1e000100008001e000000200000000ac1414330000000a442c05530000000000000005ac1e00010000673be000000100000002ac1414aa000000c900000000000000000000000000000000000000000000000300004e2000004e20000000000000000000000000000000000000004e000000250000000700000010000003ff00000843000000600000004bfffffffa000000050000000e000000030000393900000030000003ff00000002000000080000000400000fff0000008000000010000000050000000200000009000000090000003a00000fff00000080000000040000000700000006000002000000000500000009000000e0"], &(0x7f0000000a00)={0x0, 0x4, [0x2db, 0x623, 0xbd6, 0xfad]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000001cc0), 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r5, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x1, 0x605, 0x4, 0x20000, r0, 0x6, '\x00', 0x0, r0, 0x5, 0x10000005, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 11.628069129s ago: executing program 3 (id=5658): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r4, 0x1) flock(r3, 0x1) flock(r2, 0x5) 11.372175071s ago: executing program 3 (id=5661): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e20, 0x4, 0x4e22, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0x5, 0x5, 0x1ff, 0x3, 0x8}, {0x200, 0x6, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x20000401, &(0x7f0000000080)={0xa, 0x4e28, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x5}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x841e, 0xa04f, 0x90, 0x4, 0x8, 0x1, 0x9, 0x9, 0x6, 0x9, 0x10, 0x3, 0x0, 0x2, 0x6, 0x101, 0x7, 0x401, 0x180000, 0x6, 0x282, 0xffffffff}}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') close(0x3) 11.277988636s ago: executing program 50 (id=5661): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e20, 0x4, 0x4e22, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0x5, 0x5, 0x1ff, 0x3, 0x8}, {0x200, 0x6, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x20000401, &(0x7f0000000080)={0xa, 0x4e28, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x5}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x841e, 0xa04f, 0x90, 0x4, 0x8, 0x1, 0x9, 0x9, 0x6, 0x9, 0x10, 0x3, 0x0, 0x2, 0x6, 0x101, 0x7, 0x401, 0x180000, 0x6, 0x282, 0xffffffff}}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') close(0x3) 7.734147694s ago: executing program 9 (id=5680): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @fwd={0x6}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x0, 0x61]}}, 0x0, 0x38}, 0x28) 6.76695304s ago: executing program 9 (id=5690): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80c42, 0x4) 6.228172885s ago: executing program 9 (id=5692): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) userfaultfd(0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0), 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d80300001200c2f22cbd7000fedbdf251a0808064e244e230600000008000000060000000500000009000000fdffffff0300000001000000", @ANYRES32, @ANYBLOB="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"], 0x3d8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xffff, 0x1}, {0x1}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.919498867s ago: executing program 9 (id=5704): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa0000000000006110200000f5ff0095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x20b6}], 0x1, 0x76) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x10, 0x1, 0xffffffff, 0x6, {{0x1b, 0x4, 0x0, 0x14, 0x6c, 0x68, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x9e, [@loopback, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x4, [{@loopback, 0xa0}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@remote, 0x6}]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0x9, "7c7e53a039166a"}, {0x5, 0xf, "1bd99ee89e5d6a6dff5e0bed44"}, {0x2, 0xc, "9e124013d541f1e5563f"}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000840)={0x1, 0x4, 0x3, 0x2, @vifc_lcl_ifindex=r4, @loopback}, 0x10) syz_emit_ethernet(0x156, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0x0, 0x4, [0x2db, 0x623, 0xbd6, 0xfad]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000001cc0), 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r5, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x1, 0x605, 0x4, 0x20000, r0, 0x6, '\x00', 0x0, r0, 0x5, 0x10000005, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 4.534953185s ago: executing program 9 (id=5708): setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast, @broadcast}, 0xc) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000040)="f20f3365f2a72e0fc7b2000000000f015a10c510c4e2fd307c0800f30f09f20f10a95d4e00006466f30fbcb30f000000b9800000c00f3235002000000f308ed0", 0x40}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.029065399s ago: executing program 6 (id=5709): r0 = socket(0x8, 0x6, 0x3) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x1, 0x4000000a}) sched_setscheduler(0x0, 0x1, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6erspan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, r1, 0x1, 0x0, 0x5}, 0x50) syz_usb_connect(0x2, 0x2d, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000410000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x9e, &(0x7f00000016c0)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x2c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) write(r5, &(0x7f0000000180)='hist:keys=common_pid\x00', 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a02000000000018010000a020782500000000002020207b1a20fe00000000bf0700000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3.176410979s ago: executing program 1 (id=5710): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102cace00000000000000040a0000013c"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x850) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 3.110977892s ago: executing program 9 (id=5712): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102cace00000000000000040a0000013c"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x850) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 2.991697578s ago: executing program 51 (id=5712): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102cace00000000000000040a0000013c"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x850) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 2.989261888s ago: executing program 1 (id=5714): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc01000020000000180000000000000000000000000000009500"], 0x0, 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x20008000) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 2.444347634s ago: executing program 6 (id=5719): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa0000000000006110200000f5ff0095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x20b6}], 0x1, 0x76) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x10, 0x1, 0xffffffff, 0x6, {{0x1b, 0x4, 0x0, 0x14, 0x6c, 0x68, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x9e, [@loopback, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x4, [{@loopback, 0xa0}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@remote, 0x6}]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0x9, "7c7e53a039166a"}, {0x5, 0xf, "1bd99ee89e5d6a6dff5e0bed44"}, {0x2, 0xc, "9e124013d541f1e5563f"}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000840)={0x1, 0x4, 0x3, 0x2, @vifc_lcl_ifindex=r4, @loopback}, 0x10) syz_emit_ethernet(0x156, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0x0, 0x4, [0x2db, 0x623, 0xbd6, 0xfad]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000001cc0), 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r5, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x1, 0x605, 0x4, 0x20000, r0, 0x6, '\x00', 0x0, r0, 0x5, 0x10000005, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 1.822779843s ago: executing program 6 (id=5721): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) userfaultfd(0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0), 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d80300001200c2f22cbd7000fedbdf251a0808064e244e230600000008000000060000000500000009000000fdffffff0300000001000000", @ANYRES32, @ANYBLOB="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"], 0x3d8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xffff, 0x1}, {0x1}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.69339748s ago: executing program 5 (id=5713): socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa57f3b17b3c508ee) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 1.323503787s ago: executing program 5 (id=5722): setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast, @broadcast}, 0xc) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000040)="f20f3365f2a72e0fc7b2000000000f015a10c510c4e2fd307c0800f30f09f20f10a95d4e00006466f30fbcb30f000000b9800000c00f3235002000000f308ed0", 0x40}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.232022541s ago: executing program 5 (id=5723): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x600, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) 1.196189003s ago: executing program 8 (id=5724): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000240)=[{0x30, 0x1, 0x0, 0x8000}, {0x28, 0x1, 0x0, 0xfefff034}]}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102cace00000000000000040a0000013c"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x850) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 1.169014614s ago: executing program 8 (id=5725): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000f03c0)={0x8000000000000001, [], 0x71, "01671453c56956"}) 1.120259807s ago: executing program 8 (id=5726): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680000000000000000109022200010100803209040000010300000009211101000122"], 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0) 1.118854617s ago: executing program 0 (id=5727): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='hist:keys=common_pi', 0x13) 1.107099987s ago: executing program 0 (id=5728): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80c42, 0x4) 995.917372ms ago: executing program 0 (id=5729): r0 = socket(0x8, 0x6, 0x3) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x1, 0x4000000a}) sched_setscheduler(0x0, 0x1, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6erspan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r3, r1, 0x1, 0x0, 0x5}, 0x50) syz_usb_connect(0x2, 0x2d, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000410000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x9e, &(0x7f00000016c0)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x2c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) write(r4, &(0x7f0000000180)='hist:keys=common_pid\x00', 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a02000000000018010000a020782500000000002020207b1a20fe00000000bf0700000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 857.019499ms ago: executing program 6 (id=5730): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa0000000000006110200000f5ff0095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x20b6}], 0x1, 0x76) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x10, 0x1, 0xffffffff, 0x6, {{0x1b, 0x4, 0x0, 0x14, 0x6c, 0x68, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x9e, [@loopback, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x4, [{@loopback, 0xa0}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@remote, 0x6}]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0x9, "7c7e53a039166a"}, {0x5, 0xf, "1bd99ee89e5d6a6dff5e0bed44"}, {0x2, 0xc, "9e124013d541f1e5563f"}]}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000840)={0x1, 0x4, 0x3, 0x2, @vifc_lcl_ifindex=r4, @loopback}, 0x10) syz_emit_ethernet(0x156, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0x0, 0x4, [0x2db, 0x623, 0xbd6, 0xfad]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000001cc0), 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r5, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x1, 0x605, 0x4, 0x20000, r0, 0x6, '\x00', 0x0, r0, 0x5, 0x10000005, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 749.969594ms ago: executing program 1 (id=5731): mlockall(0x3) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) write$char_usb(r1, &(0x7f0000000040)="aedea7485e", 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, 0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) close(r4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 562.069893ms ago: executing program 8 (id=5732): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000240)=[{0x30, 0x1, 0x0, 0x8000}, {0x28, 0x1, 0x0, 0xfefff034}, {0x6, 0xfd, 0x0, 0x1579}]}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102cace00000000000000040a0000013c"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x850) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 561.562943ms ago: executing program 8 (id=5733): setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast, @broadcast}, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, 0x0, 0x0, 0xb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 504.060756ms ago: executing program 8 (id=5734): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @fwd={0x6}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x0, 0x61]}}, 0x0, 0x38}, 0x28) 450.220828ms ago: executing program 6 (id=5735): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000240)=[{0x30, 0x1, 0x0, 0x8000}, {0x28, 0x1, 0x0, 0xfefff034}]}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102cace00000000000000040a0000013c"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x850) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 400.793731ms ago: executing program 1 (id=5736): socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa57f3b17b3c508ee) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 385.899701ms ago: executing program 0 (id=5737): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000f03c0)={0x8000000000000001, [], 0x71, "01671453c56956"}) 288.093736ms ago: executing program 0 (id=5738): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='hist:keys=common_pid', 0x14) 267.826267ms ago: executing program 5 (id=5739): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x3, 0xa2, &(0x7f0000000080)=ANY=[@ANYBLOB="120100030000002035121000400001020301090290000301000002080b0101010a20020904000000010120000924010700063000b2092407030300027f950b240606030900020004000c24030304040606038100801e240802", @ANYRES64=r0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 199.75188ms ago: executing program 1 (id=5740): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80c42, 0x4) 168.534872ms ago: executing program 6 (id=5741): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc01000020000000180000000000000000000000000000009500"], 0x0, 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x20008000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 107.618075ms ago: executing program 0 (id=5742): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680000000000000000109022200010100803209040000010300000009211101000122"], 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0) 0s ago: executing program 1 (id=5743): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) userfaultfd(0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0), 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d80300001200c2f22cbd7000fedbdf251a0808064e244e230600000008000000060000000500000009000000fdffffff0300000001000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3d8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xffff, 0x1}, {0x1}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): 95.257882][T15145] ? proc_sys_open+0x280/0x280 [ 895.262647][T15145] ? selinux_file_permission+0x2a5/0x510 [ 895.268295][T15145] ? security_file_permission+0x8a/0xb0 [ 895.273867][T15145] proc_sys_write+0x22/0x30 [ 895.278389][T15145] vfs_write+0x5ef/0xd00 [ 895.282638][T15145] ? __cfi_vfs_write+0x10/0x10 [ 895.287400][T15145] ? __cfi_mutex_lock+0x10/0x10 [ 895.292250][T15145] ? __fdget_pos+0x2cd/0x380 [ 895.296839][T15145] ? ksys_write+0x70/0x260 [ 895.301260][T15145] ksys_write+0x14a/0x260 [ 895.305608][T15145] ? __cfi_ksys_write+0x10/0x10 [ 895.310462][T15145] ? debug_smp_processor_id+0x17/0x20 [ 895.315836][T15145] __x64_sys_write+0x7b/0x90 [ 895.320422][T15145] x64_sys_call+0x27b/0x9a0 [ 895.324926][T15145] do_syscall_64+0x4c/0xa0 [ 895.329349][T15145] ? clear_bhb_loop+0x30/0x80 [ 895.334026][T15145] ? clear_bhb_loop+0x30/0x80 [ 895.338702][T15145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.344612][T15145] RIP: 0033:0x7fb67ff9e159 [ 895.349026][T15145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.368654][T15145] RSP: 002b:00007fb680e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 895.377071][T15145] RAX: ffffffffffffffda RBX: 00007fb680225fa0 RCX: 00007fb67ff9e159 [ 895.385043][T15145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 895.393016][T15145] RBP: 00007fb680e12090 R08: 0000000000000000 R09: 0000000000000000 [ 895.401072][T15145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.409124][T15145] R13: 00007fb680226038 R14: 00007fb680225fa0 R15: 00007ffdd70300f8 [ 895.417100][T15145] [ 895.649600][T15162] overlayfs: failed to clone upperpath [ 895.940856][ T28] audit: type=1400 audit(1789188013.854:865): avc: denied { bind } for pid=15171 comm="syz.0.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 895.979223][ T28] audit: type=1400 audit(1789188013.882:866): avc: denied { write } for pid=15171 comm="syz.0.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 896.205444][ T1226] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 896.303467][ T2372] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 896.412485][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.442978][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.457447][ T1226] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 896.470634][ T1226] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 896.479920][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.500317][ T1226] usb 4-1: config 0 descriptor?? [ 896.530388][ T2372] usb 1-1: Using ep0 maxpacket: 8 [ 896.542476][ T2372] usb 1-1: unable to get BOS descriptor or descriptor too short [ 896.567401][ T2372] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.585694][ T2372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.593866][ T2372] usb 1-1: Product: syz [ 896.606202][ T2372] usb 1-1: Manufacturer: syz [ 896.610835][ T2372] usb 1-1: SerialNumber: syz [ 896.729689][T15170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1005 sclass=netlink_tcpdiag_socket pid=15170 comm=syz.3.5011 [ 896.848456][T15178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.865661][T15178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.902230][T15178] FAULT_INJECTION: forcing a failure. [ 896.902230][T15178] name failslab, interval 1, probability 0, space 0, times 0 [ 896.904279][T15202] overlayfs: failed to clone upperpath [ 896.937000][T15178] CPU: 1 PID: 15178 Comm: syz.0.5015 Tainted: G W syzkaller #0 [ 896.945996][T15178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 896.956082][T15178] Call Trace: [ 896.959392][T15178] [ 896.962343][T15178] __dump_stack+0x21/0x24 [ 896.966710][T15178] dump_stack_lvl+0x110/0x170 [ 896.971430][T15178] ? __cfi_dump_stack_lvl+0x8/0x8 [ 896.976489][T15178] ? widen_string+0x41/0x2d0 [ 896.981105][T15178] dump_stack+0x15/0x24 [ 896.985295][T15178] should_fail_ex+0x3bf/0x510 [ 896.990000][T15178] ? skb_clone+0x1e8/0x380 [ 896.994450][T15178] __should_failslab+0xac/0xf0 [ 896.999250][T15178] should_failslab+0x9/0x20 [ 897.003969][T15178] kmem_cache_alloc+0x3b/0x320 [ 897.008764][T15178] ? sprintf+0xe4/0x140 [ 897.012954][T15178] skb_clone+0x1e8/0x380 [ 897.017227][T15178] netlink_broadcast+0x698/0x11c0 [ 897.022286][T15178] ? alloc_uevent_skb+0xf7/0x240 [ 897.027251][T15178] kobject_uevent_net_broadcast+0x3cb/0x5b0 [ 897.033174][T15178] kobject_uevent_env+0x541/0x720 [ 897.038231][T15178] kobject_uevent+0x1d/0x30 [ 897.042763][T15178] driver_register+0x3ef/0x440 [ 897.047565][T15178] usb_gadget_register_driver_owner+0xf8/0x270 [ 897.053845][T15178] raw_ioctl+0x112c/0x3180 [ 897.058307][T15178] ? ioctl_has_perm+0x3a6/0x4f0 [ 897.063204][T15178] ? __cfi_raw_ioctl+0x10/0x10 [ 897.068006][T15178] ? has_cap_mac_admin+0x370/0x370 [ 897.073154][T15178] ? ____kasan_slab_free+0x13d/0x180 [ 897.078485][T15178] ? __kasan_slab_free+0x11/0x20 [ 897.083467][T15178] ? selinux_file_ioctl+0x3ad/0x4c0 [ 897.088971][T15178] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 897.094553][T15178] ? __fget_files+0x2d1/0x330 [ 897.099265][T15178] ? security_file_ioctl+0x95/0xc0 [ 897.104429][T15178] ? __cfi_raw_ioctl+0x10/0x10 [ 897.109232][T15178] __se_sys_ioctl+0x12f/0x1b0 [ 897.113938][T15178] __x64_sys_ioctl+0x7b/0x90 [ 897.118558][T15178] x64_sys_call+0x58b/0x9a0 [ 897.123132][T15178] do_syscall_64+0x4c/0xa0 [ 897.127590][T15178] ? clear_bhb_loop+0x30/0x80 [ 897.132301][T15178] ? clear_bhb_loop+0x30/0x80 [ 897.137014][T15178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.142935][T15178] RIP: 0033:0x7f27e3d9ddeb [ 897.147379][T15178] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 897.167185][T15178] RSP: 002b:00007f27e4ceef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.175630][T15178] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f27e3d9ddeb [ 897.183723][T15178] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 897.191723][T15178] RBP: 00007f27e4ceffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 897.199720][T15178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.207729][T15178] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 897.215815][T15178] [ 897.375375][T15178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.403800][T15170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.403918][T15178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.420313][T15170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.465426][ T1226] wacom 0003:056A:002A.000E: ignoring exceeding usage max [ 897.486706][ T1226] wacom 0003:056A:002A.000E: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 897.499569][ T1226] wacom 0003:056A:002A.000E: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0 [ 897.519693][ T1226] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.000E/input/input12 [ 897.547933][ T2372] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 897.556894][ T2372] usb 1-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 897.565447][ T2372] usb 1-1: failed to enable PITCH for EP 0x1 [ 897.572037][ T2372] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 897.582440][ T2372] usb 1-1: USB disconnect, device number 19 [ 897.728397][ T1226] usb 4-1: USB disconnect, device number 19 [ 898.314420][T15227] overlayfs: failed to clone upperpath [ 898.640415][T15233] overlayfs: failed to resolve './file0': -2 [ 898.675993][ T28] audit: type=1400 audit(1789188016.384:867): avc: denied { create } for pid=15230 comm="syz.3.5031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 899.985772][ T2372] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 900.223090][T15286] FAULT_INJECTION: forcing a failure. [ 900.223090][T15286] name failslab, interval 1, probability 0, space 0, times 0 [ 900.261320][T15286] CPU: 0 PID: 15286 Comm: syz.9.5047 Tainted: G W syzkaller #0 [ 900.270316][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.280488][T15286] Call Trace: [ 900.283786][T15286] [ 900.286741][T15286] __dump_stack+0x21/0x24 [ 900.291105][T15286] dump_stack_lvl+0x110/0x170 [ 900.295897][T15286] ? __cfi_dump_stack_lvl+0x8/0x8 [ 900.300969][T15286] ? rwsem_write_trylock+0x136/0x300 [ 900.306339][T15286] ? __cfi_mt_find+0x10/0x10 [ 900.311021][T15286] dump_stack+0x15/0x24 [ 900.315217][T15286] should_fail_ex+0x3bf/0x510 [ 900.319918][T15286] ? vm_area_dup+0x27/0x280 [ 900.324491][T15286] __should_failslab+0xac/0xf0 [ 900.329292][T15286] should_failslab+0x9/0x20 [ 900.333826][T15286] kmem_cache_alloc+0x3b/0x320 [ 900.338623][T15286] vm_area_dup+0x27/0x280 [ 900.342977][T15286] ? __split_vma+0x1b0/0x980 [ 900.347603][T15286] __split_vma+0x1c6/0x980 [ 900.352092][T15286] ? find_vma_prev+0x111/0x190 [ 900.356897][T15286] madvise_update_vma+0x338/0xa20 [ 900.361951][T15286] do_madvise+0xdc1/0x3290 [ 900.366401][T15286] ? _parse_integer_limit+0x18e/0x1d0 [ 900.371805][T15286] ? __cfi_do_madvise+0x10/0x10 [ 900.376689][T15286] ? kstrtouint+0x74/0xe0 [ 900.381151][T15286] ? kstrtouint_from_user+0x113/0x170 [ 900.386570][T15286] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 900.392321][T15286] ? __kasan_check_write+0x14/0x20 [ 900.397462][T15286] ? proc_fail_nth_write+0x180/0x200 [ 900.402777][T15286] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 900.408794][T15286] ? security_file_permission+0x8a/0xb0 [ 900.414398][T15286] ? vfs_write+0xa51/0xd00 [ 900.418857][T15286] ? __cfi_vfs_write+0x10/0x10 [ 900.423691][T15286] ? __kasan_check_write+0x14/0x20 [ 900.428833][T15286] ? mutex_unlock+0x8f/0x230 [ 900.433449][T15286] ? __cfi_mutex_unlock+0x10/0x10 [ 900.438507][T15286] ? __kasan_check_write+0x14/0x20 [ 900.443654][T15286] ? fput+0x154/0x1a0 [ 900.447672][T15286] ? ksys_write+0x1fa/0x260 [ 900.452210][T15286] ? __cfi_ksys_write+0x10/0x10 [ 900.457103][T15286] ? do_user_addr_fault+0x9a5/0x1030 [ 900.462469][T15286] __x64_sys_madvise+0xa9/0xc0 [ 900.467268][T15286] x64_sys_call+0x99e/0x9a0 [ 900.471808][T15286] do_syscall_64+0x4c/0xa0 [ 900.476258][T15286] ? clear_bhb_loop+0x30/0x80 [ 900.480967][T15286] ? clear_bhb_loop+0x30/0x80 [ 900.485707][T15286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.491632][T15286] RIP: 0033:0x7fb67ff9e159 [ 900.496073][T15286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.515714][T15286] RSP: 002b:00007fb680e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 900.524161][T15286] RAX: ffffffffffffffda RBX: 00007fb680225fa0 RCX: 00007fb67ff9e159 [ 900.532195][T15286] RDX: 000000000000000a RSI: 86ac726dff2f4713 RDI: 0000200000bdc000 [ 900.540196][T15286] RBP: 00007fb680e12090 R08: 0000000000000000 R09: 0000000000000000 [ 900.548200][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.556286][T15286] R13: 00007fb680226038 R14: 00007fb680225fa0 R15: 00007ffdd70300f8 [ 900.564392][T15286] [ 900.592402][ T2372] usb 7-1: Using ep0 maxpacket: 32 [ 900.609506][ T2372] usb 7-1: unable to get BOS descriptor or descriptor too short [ 900.631799][ T2372] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.658932][T15293] xt_hashlimit: size too large, truncated to 1048576 [ 900.668327][ T2372] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 900.688876][ T2372] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 900.702817][ T1226] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 900.709904][ T2372] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.723481][ T1226] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 900.729338][ T2372] usb 7-1: Product: syz [ 900.737736][ T2372] usb 7-1: Manufacturer: syz [ 900.755295][T15301] fuse: Unknown parameter 'group]id' [ 900.764436][ T2372] usb 7-1: SerialNumber: syz [ 900.777423][ T8690] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 900.797415][ T2372] usb 7-1: selecting invalid altsetting 1 [ 900.803482][ T8690] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 900.831150][ T28] audit: type=1400 audit(1789188018.378:868): avc: denied { ioctl } for pid=15300 comm="syz.3.5053" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 901.021885][ T2372] usb 7-1: USB disconnect, device number 27 [ 901.289273][T15311] FAULT_INJECTION: forcing a failure. [ 901.289273][T15311] name failslab, interval 1, probability 0, space 0, times 0 [ 901.301916][T15311] CPU: 1 PID: 15311 Comm: syz.3.5055 Tainted: G W syzkaller #0 [ 901.310882][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.320962][T15311] Call Trace: [ 901.324267][T15311] [ 901.327207][T15311] __dump_stack+0x21/0x24 [ 901.331568][T15311] dump_stack_lvl+0x110/0x170 [ 901.336279][T15311] ? __cfi_dump_stack_lvl+0x8/0x8 [ 901.341517][T15311] dump_stack+0x15/0x24 [ 901.345706][T15311] should_fail_ex+0x3bf/0x510 [ 901.350410][T15311] __should_failslab+0xac/0xf0 [ 901.355206][T15311] should_failslab+0x9/0x20 [ 901.359737][T15311] __kmem_cache_alloc_node+0x3d/0x2d0 [ 901.365139][T15311] ? netlink_realloc_groups+0x12c/0x290 [ 901.370720][T15311] ? netlink_realloc_groups+0x12c/0x290 [ 901.376294][T15311] __kmalloc_node_track_caller+0xa1/0x1e0 [ 901.382040][T15311] ? cap_capable+0x1a6/0x230 [ 901.386663][T15311] krealloc+0x6f/0x110 [ 901.390759][T15311] netlink_realloc_groups+0x12c/0x290 [ 901.396158][T15311] netlink_setsockopt+0x307/0x700 [ 901.401210][T15311] ? __cfi_netlink_setsockopt+0x10/0x10 [ 901.406787][T15311] ? security_socket_setsockopt+0x93/0xb0 [ 901.412538][T15311] ? __cfi_netlink_setsockopt+0x10/0x10 [ 901.418108][T15311] __sys_setsockopt+0x2ff/0x4e0 [ 901.422992][T15311] ? __cfi___sys_setsockopt+0x10/0x10 [ 901.428399][T15311] ? ksys_write+0x1fa/0x260 [ 901.432927][T15311] ? __kasan_check_write+0x14/0x20 [ 901.438059][T15311] ? fpregs_restore_userregs+0x128/0x260 [ 901.443728][T15311] __x64_sys_setsockopt+0xbf/0xd0 [ 901.448790][T15311] x64_sys_call+0x124/0x9a0 [ 901.453320][T15311] do_syscall_64+0x4c/0xa0 [ 901.457766][T15311] ? clear_bhb_loop+0x30/0x80 [ 901.462514][T15311] ? clear_bhb_loop+0x30/0x80 [ 901.467251][T15311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.473170][T15311] RIP: 0033:0x7f541979e159 [ 901.477611][T15311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.497269][T15311] RSP: 002b:00007f541a5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 901.505711][T15311] RAX: ffffffffffffffda RBX: 00007f5419a26090 RCX: 00007f541979e159 [ 901.513710][T15311] RDX: 0000000000000001 RSI: 000000000000010e RDI: 0000000000000004 [ 901.521705][T15311] RBP: 00007f541a5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 901.529707][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.537706][T15311] R13: 00007f5419a26128 R14: 00007f5419a26090 R15: 00007fffde7392f8 [ 901.545709][T15311] [ 901.953787][ T28] audit: type=1400 audit(1789188019.403:869): avc: denied { unlink } for pid=15323 comm="syz.3.5060" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 903.361227][T15346] FAULT_INJECTION: forcing a failure. [ 903.361227][T15346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.374408][T15346] CPU: 1 PID: 15346 Comm: syz.9.5067 Tainted: G W syzkaller #0 [ 903.384152][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.394223][T15346] Call Trace: [ 903.397522][T15346] [ 903.400469][T15346] __dump_stack+0x21/0x24 [ 903.404828][T15346] dump_stack_lvl+0x110/0x170 [ 903.409525][T15346] ? __cfi_dump_stack_lvl+0x8/0x8 [ 903.414573][T15346] dump_stack+0x15/0x24 [ 903.418771][T15346] should_fail_ex+0x3bf/0x510 [ 903.423468][T15346] should_fail+0xb/0x10 [ 903.427643][T15346] should_fail_usercopy+0x1a/0x20 [ 903.432684][T15346] _copy_from_user+0x1e/0xc0 [ 903.437391][T15346] ___sys_sendmsg+0x1c3/0x360 [ 903.442093][T15346] ? event_triggers_call+0x29c/0x2c0 [ 903.447458][T15346] ? __sys_sendmsg+0x290/0x290 [ 903.452247][T15346] ? trace_event_raw_event_sched_switch+0x23b/0x480 [ 903.458879][T15346] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 903.465160][T15346] ? __fdget+0x19c/0x220 [ 903.469428][T15346] __sys_sendmmsg+0x2cc/0x4e0 [ 903.474140][T15346] ? __cfi___sys_sendmmsg+0x10/0x10 [ 903.479366][T15346] ? __kasan_check_read+0x11/0x20 [ 903.484410][T15346] ? preempt_schedule_irq+0xca/0x120 [ 903.489715][T15346] ? sysvec_reschedule_ipi+0x78/0x80 [ 903.495033][T15346] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 903.500678][T15346] __x64_sys_sendmmsg+0xa0/0xb0 [ 903.505626][T15346] x64_sys_call+0x3f5/0x9a0 [ 903.510225][T15346] do_syscall_64+0x4c/0xa0 [ 903.514648][T15346] ? clear_bhb_loop+0x30/0x80 [ 903.519425][T15346] ? clear_bhb_loop+0x30/0x80 [ 903.524108][T15346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 903.530003][T15346] RIP: 0033:0x7fb67ff9e159 [ 903.534420][T15346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.554030][T15346] RSP: 002b:00007fb680df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.562445][T15346] RAX: ffffffffffffffda RBX: 00007fb680226090 RCX: 00007fb67ff9e159 [ 903.570422][T15346] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 903.578405][T15346] RBP: 00007fb680df1090 R08: 0000000000000000 R09: 0000000000000000 [ 903.586383][T15346] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 903.594356][T15346] R13: 00007fb680226128 R14: 00007fb680226090 R15: 00007ffdd70300f8 [ 903.602323][T15346] [ 903.618651][ T8690] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 903.643819][ T8690] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 903.995378][T15358] xt_hashlimit: size too large, truncated to 1048576 [ 904.015224][ T8690] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 904.221035][ T8690] usb 4-1: Using ep0 maxpacket: 32 [ 904.228030][ T8690] usb 4-1: unable to get BOS descriptor or descriptor too short [ 904.247527][ T8690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.269087][ T8690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.330705][ T8690] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 904.342886][ T8690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.362350][ T8690] usb 4-1: Product: syz [ 904.366828][ T8690] usb 4-1: Manufacturer: syz [ 904.371448][ T8690] usb 4-1: SerialNumber: syz [ 904.386564][ T8690] usb 4-1: selecting invalid altsetting 1 [ 904.606074][ T8690] usb 4-1: USB disconnect, device number 20 [ 906.506957][T15540] overlayfs: bad mount option "redirect_dir=on\" [ 906.587436][T15542] FAULT_INJECTION: forcing a failure. [ 906.587436][T15542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.644239][T15542] CPU: 0 PID: 15542 Comm: syz.0.5095 Tainted: G W syzkaller #0 [ 906.653314][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.663571][T15542] Call Trace: [ 906.666872][T15542] [ 906.669834][T15542] __dump_stack+0x21/0x24 [ 906.674198][T15542] dump_stack_lvl+0x110/0x170 [ 906.678916][T15542] ? __cfi_dump_stack_lvl+0x8/0x8 [ 906.684017][T15542] ? _parse_integer+0x2a/0x40 [ 906.688730][T15542] dump_stack+0x15/0x24 [ 906.692924][T15542] should_fail_ex+0x3bf/0x510 [ 906.697636][T15542] should_fail+0xb/0x10 [ 906.701821][T15542] should_fail_usercopy+0x1a/0x20 [ 906.706873][T15542] _copy_from_user+0x1e/0xc0 [ 906.711500][T15542] ___sys_sendmsg+0x1c3/0x360 [ 906.716213][T15542] ? __sys_sendmsg+0x290/0x290 [ 906.721017][T15542] ? __kasan_check_write+0x14/0x20 [ 906.726170][T15542] ? proc_fail_nth_write+0x180/0x200 [ 906.731500][T15542] ? vfs_write+0xa51/0xd00 [ 906.735967][T15542] ? __fdget+0x19c/0x220 [ 906.740330][T15542] __x64_sys_sendmsg+0x20d/0x2e0 [ 906.745310][T15542] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 906.750899][T15542] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 906.757000][T15542] x64_sys_call+0x171/0x9a0 [ 906.761534][T15542] do_syscall_64+0x4c/0xa0 [ 906.765985][T15542] ? clear_bhb_loop+0x30/0x80 [ 906.770687][T15542] ? clear_bhb_loop+0x30/0x80 [ 906.775392][T15542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.781310][T15542] RIP: 0033:0x7f27e3d9e159 [ 906.785746][T15542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.805384][T15542] RSP: 002b:00007f27e4cf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.813828][T15542] RAX: ffffffffffffffda RBX: 00007f27e4025fa0 RCX: 00007f27e3d9e159 [ 906.821829][T15542] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 906.829826][T15542] RBP: 00007f27e4cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 906.837821][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.845824][T15542] R13: 00007f27e4026038 R14: 00007f27e4025fa0 R15: 00007fff505cf608 [ 906.853830][T15542] [ 907.016807][ T2372] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 907.221509][ T2372] usb 4-1: Using ep0 maxpacket: 32 [ 907.541169][ T2372] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 907.557367][ T2372] usb 4-1: config 0 has no interface number 0 [ 907.563503][ T2372] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 25087, setting to 1024 [ 907.597079][ T2372] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 907.643900][ T2372] usb 4-1: config 0 interface 184 has no altsetting 0 [ 907.665567][ T2372] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 907.674655][ T2372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.698069][ T2372] usb 4-1: Product: syz [ 907.702307][ T2372] usb 4-1: Manufacturer: syz [ 907.706927][ T2372] usb 4-1: SerialNumber: syz [ 907.734091][ T2372] usb 4-1: config 0 descriptor?? [ 907.737358][T15572] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5104'. [ 907.748405][T15540] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 907.757161][ T2372] smsc75xx v1.0.0 [ 907.975505][T15540] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 908.044758][ T8681] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 908.218015][ T8681] usb 1-1: device descriptor read/64, error -71 [ 908.502307][ T2372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 908.510458][ T8681] usb 1-1: device descriptor read/64, error -71 [ 908.521522][ T2372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 908.765731][ T2372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 908.792114][ T2372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 908.802965][ T8681] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 908.813976][ T2372] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 908.823635][ T2372] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 908.987128][ T8681] usb 1-1: device descriptor read/64, error -71 [ 909.026198][T15718] ./dev/sda1: Can't open blockdev [ 909.279540][ T8681] usb 1-1: device descriptor read/64, error -71 [ 909.411474][ T8681] usb usb1-port1: attempt power cycle [ 909.929470][ T8681] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 909.963050][ T8681] usb 1-1: device descriptor read/8, error -71 [ 910.127570][ T8681] usb 1-1: device descriptor read/8, error -71 [ 910.416913][ T8681] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 910.462349][ T8681] usb 1-1: device descriptor read/8, error -71 [ 910.534377][ T1226] usb 4-1: USB disconnect, device number 21 [ 910.623810][ T8681] usb 1-1: device descriptor read/8, error -71 [ 910.752819][ T8681] usb usb1-port1: unable to enumerate USB device [ 911.108033][ T1226] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 911.316361][ T1226] usb 4-1: Using ep0 maxpacket: 8 [ 911.369780][ T1226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 911.462586][ T1226] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 911.489587][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.507562][ T1226] usb 4-1: Product: syz [ 911.518616][ T1226] usb 4-1: Manufacturer: syz [ 911.528893][ T1226] usb 4-1: SerialNumber: syz [ 911.771629][T15764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.786947][T15764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.821972][T15764] FAULT_INJECTION: forcing a failure. [ 911.821972][T15764] name failslab, interval 1, probability 0, space 0, times 0 [ 911.881331][T15764] CPU: 1 PID: 15764 Comm: syz.3.5125 Tainted: G W syzkaller #0 [ 911.890350][T15764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 911.900460][T15764] Call Trace: [ 911.903765][T15764] [ 911.906710][T15764] __dump_stack+0x21/0x24 [ 911.911073][T15764] dump_stack_lvl+0x110/0x170 [ 911.915774][T15764] ? __cfi_dump_stack_lvl+0x8/0x8 [ 911.920823][T15764] ? format_decode+0xbe2/0x1520 [ 911.925705][T15764] dump_stack+0x15/0x24 [ 911.929891][T15764] should_fail_ex+0x3bf/0x510 [ 911.934676][T15764] __should_failslab+0xac/0xf0 [ 911.939472][T15764] should_failslab+0x9/0x20 [ 911.943993][T15764] kmem_cache_alloc_node+0x42/0x330 [ 911.949226][T15764] ? __alloc_skb+0xe8/0x4a0 [ 911.953750][T15764] __alloc_skb+0xe8/0x4a0 [ 911.958095][T15764] ? mutex_lock+0x93/0x1b0 [ 911.962529][T15764] alloc_uevent_skb+0x85/0x240 [ 911.967312][T15764] kobject_uevent_net_broadcast+0x343/0x5b0 [ 911.973223][T15764] kobject_uevent_env+0x541/0x720 [ 911.978270][T15764] kobject_uevent+0x1d/0x30 [ 911.982795][T15764] driver_register+0x3ef/0x440 [ 911.987583][T15764] usb_gadget_register_driver_owner+0xf8/0x270 [ 911.993760][T15764] raw_ioctl+0x112c/0x3180 [ 911.998201][T15764] ? ioctl_has_perm+0x3a6/0x4f0 [ 912.003079][T15764] ? __cfi_raw_ioctl+0x10/0x10 [ 912.007870][T15764] ? has_cap_mac_admin+0x370/0x370 [ 912.013011][T15764] ? ____kasan_slab_free+0x13d/0x180 [ 912.018332][T15764] ? __kasan_slab_free+0x11/0x20 [ 912.023297][T15764] ? selinux_file_ioctl+0x3ad/0x4c0 [ 912.028521][T15764] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 912.034099][T15764] ? __fget_files+0x2d1/0x330 [ 912.038794][T15764] ? security_file_ioctl+0x95/0xc0 [ 912.043930][T15764] ? __cfi_raw_ioctl+0x10/0x10 [ 912.048721][T15764] __se_sys_ioctl+0x12f/0x1b0 [ 912.053455][T15764] __x64_sys_ioctl+0x7b/0x90 [ 912.058071][T15764] x64_sys_call+0x58b/0x9a0 [ 912.062597][T15764] do_syscall_64+0x4c/0xa0 [ 912.067125][T15764] ? clear_bhb_loop+0x30/0x80 [ 912.071830][T15764] ? clear_bhb_loop+0x30/0x80 [ 912.076615][T15764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.082529][T15764] RIP: 0033:0x7f541979ddeb [ 912.086967][T15764] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 912.106595][T15764] RSP: 002b:00007f541a5e7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.115039][T15764] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f541979ddeb [ 912.123220][T15764] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 912.131216][T15764] RBP: 00007f541a5e8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 912.139207][T15764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.147206][T15764] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 912.155206][T15764] [ 912.803873][T15764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.844682][T15764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.893927][ T1226] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 912.922484][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5136'. [ 912.938349][ T1226] usb 4-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 912.957516][ T1226] usb 4-1: failed to enable PITCH for EP 0x1 [ 912.973395][ T1226] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 913.007488][ T1226] usb 4-1: USB disconnect, device number 22 [ 913.272159][T15810] overlayfs: failed to clone upperpath [ 913.362091][ T8681] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 913.601436][ T8681] usb 10-1: Using ep0 maxpacket: 32 [ 913.613439][ T8681] usb 10-1: config 0 has no interfaces? [ 913.627363][ T8681] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 913.647147][ T8681] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.663169][ T8681] usb 10-1: Product: syz [ 913.672685][ T8681] usb 10-1: Manufacturer: syz [ 913.685212][ T8681] usb 10-1: SerialNumber: syz [ 913.734678][ T8681] usb 10-1: config 0 descriptor?? [ 914.971066][T15798] FAULT_INJECTION: forcing a failure. [ 914.971066][T15798] name failslab, interval 1, probability 0, space 0, times 0 [ 915.044406][T15798] CPU: 0 PID: 15798 Comm: syz.9.5137 Tainted: G W syzkaller #0 [ 915.053409][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 915.063721][T15798] Call Trace: [ 915.067035][T15798] [ 915.069997][T15798] __dump_stack+0x21/0x24 [ 915.074382][T15798] dump_stack_lvl+0x110/0x170 [ 915.079105][T15798] ? __cfi_dump_stack_lvl+0x8/0x8 [ 915.084178][T15798] dump_stack+0x15/0x24 [ 915.088376][T15798] should_fail_ex+0x3bf/0x510 [ 915.093183][T15798] __should_failslab+0xac/0xf0 [ 915.097991][T15798] should_failslab+0x9/0x20 [ 915.102534][T15798] __kmem_cache_alloc_node+0x3d/0x2d0 [ 915.107955][T15798] ? kobject_get_path+0xbf/0x200 [ 915.112945][T15798] ? kobject_get_path+0xbf/0x200 [ 915.117915][T15798] __kmalloc+0xa4/0x1e0 [ 915.122104][T15798] kobject_get_path+0xbf/0x200 [ 915.126899][T15798] kobject_uevent_env+0x29f/0x720 [ 915.131962][T15798] kobject_uevent+0x1d/0x30 [ 915.136498][T15798] driver_register+0x3ef/0x440 [ 915.141395][T15798] usb_gadget_register_driver_owner+0xf8/0x270 [ 915.147580][T15798] raw_ioctl+0x112c/0x3180 [ 915.152037][T15798] ? ioctl_has_perm+0x3a6/0x4f0 [ 915.157009][T15798] ? __cfi_raw_ioctl+0x10/0x10 [ 915.161817][T15798] ? has_cap_mac_admin+0x370/0x370 [ 915.166969][T15798] ? handle_mm_fault+0x18d8/0x26b0 [ 915.172120][T15798] ? selinux_file_ioctl+0x3ad/0x4c0 [ 915.177364][T15798] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 915.182951][T15798] ? __fget_files+0x2d1/0x330 [ 915.187670][T15798] ? security_file_ioctl+0x95/0xc0 [ 915.192822][T15798] ? __cfi_raw_ioctl+0x10/0x10 [ 915.197616][T15798] __se_sys_ioctl+0x12f/0x1b0 [ 915.202411][T15798] __x64_sys_ioctl+0x7b/0x90 [ 915.207040][T15798] x64_sys_call+0x58b/0x9a0 [ 915.211574][T15798] do_syscall_64+0x4c/0xa0 [ 915.216020][T15798] ? clear_bhb_loop+0x30/0x80 [ 915.220718][T15798] ? clear_bhb_loop+0x30/0x80 [ 915.225420][T15798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.231508][T15798] RIP: 0033:0x7fb67ff9ddeb [ 915.236011][T15798] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 915.255655][T15798] RSP: 002b:00007fb680e0ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.264100][T15798] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fb67ff9ddeb [ 915.272098][T15798] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 915.280109][T15798] RBP: 00007fb680e10fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 915.288108][T15798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.296105][T15798] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000868 [ 915.304198][T15798] [ 915.317768][T15798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.345447][T15798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.405563][ T8681] usb 10-1: USB disconnect, device number 7 [ 915.441712][T15835] overlayfs: failed to clone upperpath [ 915.702737][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5151'. [ 916.016958][ T8681] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 916.244454][ T8681] usb 4-1: Using ep0 maxpacket: 8 [ 916.251097][ T8681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 916.268474][ T8681] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.311398][ T8681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.331126][ T8681] usb 4-1: Product: syz [ 916.335401][ T8681] usb 4-1: Manufacturer: syz [ 916.340062][ T8681] usb 4-1: SerialNumber: syz [ 916.450950][T15867] FAULT_INJECTION: forcing a failure. [ 916.450950][T15867] name failslab, interval 1, probability 0, space 0, times 0 [ 916.478413][T15867] CPU: 1 PID: 15867 Comm: syz.6.5158 Tainted: G W syzkaller #0 [ 916.487425][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.497512][T15867] Call Trace: [ 916.500819][T15867] [ 916.503778][T15867] __dump_stack+0x21/0x24 [ 916.508144][T15867] dump_stack_lvl+0x110/0x170 [ 916.512860][T15867] ? __cfi_dump_stack_lvl+0x8/0x8 [ 916.517920][T15867] ? __cfi_avc_has_perm+0x10/0x10 [ 916.522979][T15867] dump_stack+0x15/0x24 [ 916.527169][T15867] should_fail_ex+0x3bf/0x510 [ 916.531870][T15867] ? jbd2__journal_start+0x13d/0x6e0 [ 916.537232][T15867] __should_failslab+0xac/0xf0 [ 916.542089][T15867] should_failslab+0x9/0x20 [ 916.546613][T15867] kmem_cache_alloc+0x3b/0x320 [ 916.551391][T15867] jbd2__journal_start+0x13d/0x6e0 [ 916.557316][T15867] __ext4_journal_start_sb+0x242/0x4a0 [ 916.562781][T15867] ext4_dirty_inode+0x8f/0x100 [ 916.567547][T15867] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 916.573033][T15867] __mark_inode_dirty+0x1fd/0x9c0 [ 916.578097][T15867] ? memcpy+0x56/0x70 [ 916.582084][T15867] __file_update_time+0x245/0x270 [ 916.587121][T15867] file_modified_flags+0x390/0x440 [ 916.592260][T15867] ? file_modified+0x20/0x20 [ 916.596862][T15867] file_modified+0x17/0x20 [ 916.601310][T15867] ext4_buffered_write_iter+0x337/0x690 [ 916.606896][T15867] ext4_file_write_iter+0x4b2/0x1540 [ 916.612199][T15867] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 916.618202][T15867] ? avc_policy_seqno+0x1b/0x70 [ 916.623232][T15867] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 916.628966][T15867] ? fsnotify_perm+0x67/0x5b0 [ 916.633651][T15867] ? security_file_permission+0x8a/0xb0 [ 916.639205][T15867] vfs_write+0x5ef/0xd00 [ 916.643449][T15867] ? __cfi_vfs_write+0x10/0x10 [ 916.648210][T15867] ? __cfi_mutex_lock+0x10/0x10 [ 916.653780][T15867] ? __fdget_pos+0x2cd/0x380 [ 916.658541][T15867] ? ksys_write+0x70/0x260 [ 916.662962][T15867] ksys_write+0x14a/0x260 [ 916.667290][T15867] ? __cfi_ksys_write+0x10/0x10 [ 916.672169][T15867] ? debug_smp_processor_id+0x17/0x20 [ 916.677631][T15867] __x64_sys_write+0x7b/0x90 [ 916.682226][T15867] x64_sys_call+0x27b/0x9a0 [ 916.686730][T15867] do_syscall_64+0x4c/0xa0 [ 916.691154][T15867] ? clear_bhb_loop+0x30/0x80 [ 916.695836][T15867] ? clear_bhb_loop+0x30/0x80 [ 916.700774][T15867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.706791][T15867] RIP: 0033:0x7f899559e159 [ 916.711219][T15867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.730827][T15867] RSP: 002b:00007f89963ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 916.739240][T15867] RAX: ffffffffffffffda RBX: 00007f8995825fa0 RCX: 00007f899559e159 [ 916.747214][T15867] RDX: 000000000001000a RSI: 0000200000012640 RDI: 0000000000000003 [ 916.755190][T15867] RBP: 00007f89963ee090 R08: 0000000000000000 R09: 0000000000000000 [ 916.763156][T15867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.771126][T15867] R13: 00007f8995826038 R14: 00007f8995825fa0 R15: 00007fff1c5a38d8 [ 916.779113][T15867] [ 916.784721][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.795646][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.807098][T15840] FAULT_INJECTION: forcing a failure. [ 916.807098][T15840] name failslab, interval 1, probability 0, space 0, times 0 [ 916.819998][T15840] CPU: 0 PID: 15840 Comm: syz.3.5152 Tainted: G W syzkaller #0 [ 916.828970][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.839257][T15840] Call Trace: [ 916.842575][T15840] [ 916.845538][T15840] __dump_stack+0x21/0x24 [ 916.849936][T15840] dump_stack_lvl+0x110/0x170 [ 916.854679][T15840] ? __cfi_dump_stack_lvl+0x8/0x8 [ 916.859757][T15840] ? format_decode+0xbe2/0x1520 [ 916.864660][T15840] dump_stack+0x15/0x24 [ 916.868855][T15840] should_fail_ex+0x3bf/0x510 [ 916.873577][T15840] __should_failslab+0xac/0xf0 [ 916.878377][T15840] should_failslab+0x9/0x20 [ 916.882916][T15840] kmem_cache_alloc_node+0x42/0x330 [ 916.888164][T15840] ? __alloc_skb+0xe8/0x4a0 [ 916.892731][T15840] __alloc_skb+0xe8/0x4a0 [ 916.897116][T15840] ? mutex_lock+0x93/0x1b0 [ 916.901575][T15840] alloc_uevent_skb+0x85/0x240 [ 916.906383][T15840] kobject_uevent_net_broadcast+0x343/0x5b0 [ 916.912312][T15840] kobject_uevent_env+0x541/0x720 [ 916.917368][T15840] kobject_uevent+0x1d/0x30 [ 916.921911][T15840] driver_register+0x3ef/0x440 [ 916.926710][T15840] usb_gadget_register_driver_owner+0xf8/0x270 [ 916.932896][T15840] raw_ioctl+0x112c/0x3180 [ 916.937351][T15840] ? ioctl_has_perm+0x3a6/0x4f0 [ 916.942246][T15840] ? __cfi_raw_ioctl+0x10/0x10 [ 916.947060][T15840] ? has_cap_mac_admin+0x370/0x370 [ 916.952554][T15840] ? ____kasan_slab_free+0x13d/0x180 [ 916.957896][T15840] ? __kasan_slab_free+0x11/0x20 [ 916.963149][T15840] ? selinux_file_ioctl+0x3ad/0x4c0 [ 916.968393][T15840] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 916.973986][T15840] ? __fget_files+0x2d1/0x330 [ 916.978699][T15840] ? security_file_ioctl+0x95/0xc0 [ 916.983859][T15840] ? __cfi_raw_ioctl+0x10/0x10 [ 916.988663][T15840] __se_sys_ioctl+0x12f/0x1b0 [ 916.993380][T15840] __x64_sys_ioctl+0x7b/0x90 [ 916.998006][T15840] x64_sys_call+0x58b/0x9a0 [ 917.002546][T15840] do_syscall_64+0x4c/0xa0 [ 917.007010][T15840] ? clear_bhb_loop+0x30/0x80 [ 917.011721][T15840] ? clear_bhb_loop+0x30/0x80 [ 917.016539][T15840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.022475][T15840] RIP: 0033:0x7f541979ddeb [ 917.026928][T15840] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 917.046583][T15840] RSP: 002b:00007f541a5e7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.055114][T15840] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f541979ddeb [ 917.063143][T15840] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 917.071161][T15840] RBP: 00007f541a5e8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 917.079141][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.087120][T15840] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 917.095099][T15840] [ 917.138079][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.186298][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.246579][T15877] tipc: Can't bind to reserved service type 0 [ 917.265238][T15877] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5162'. [ 917.266165][ T8681] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 917.283036][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5162'. [ 917.293913][ T8681] usb 4-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 917.301605][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5162'. [ 917.322964][ T8681] usb 4-1: failed to enable PITCH for EP 0x1 [ 917.333497][ T8681] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 917.354349][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5164'. [ 917.356003][ T8681] usb 4-1: USB disconnect, device number 23 [ 918.394268][T15911] overlayfs: failed to clone upperpath [ 918.798772][T15914] FAULT_INJECTION: forcing a failure. [ 918.798772][T15914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.853544][T15914] CPU: 1 PID: 15914 Comm: syz.6.5174 Tainted: G W syzkaller #0 [ 918.862548][T15914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.872737][T15914] Call Trace: [ 918.876040][T15914] [ 918.878989][T15914] __dump_stack+0x21/0x24 [ 918.883361][T15914] dump_stack_lvl+0x110/0x170 [ 918.888098][T15914] ? __cfi_dump_stack_lvl+0x8/0x8 [ 918.893163][T15914] dump_stack+0x15/0x24 [ 918.897354][T15914] should_fail_ex+0x3bf/0x510 [ 918.902062][T15914] should_fail+0xb/0x10 [ 918.906240][T15914] should_fail_usercopy+0x1a/0x20 [ 918.911302][T15914] _copy_from_iter+0x18a/0xfe0 [ 918.916106][T15914] ? __kernel_text_address+0xd/0x30 [ 918.921334][T15914] ? __cfi__copy_from_iter+0x10/0x10 [ 918.926665][T15914] ? stack_trace_save+0xa6/0xf0 [ 918.931639][T15914] copy_page_from_iter+0x1de/0x2c0 [ 918.936782][T15914] ? skb_page_frag_refill+0x89/0x3a0 [ 918.942103][T15914] tun_get_user+0x6f5/0x32f0 [ 918.946845][T15914] ? tun_do_read+0x1d70/0x1d70 [ 918.951649][T15914] ? __kasan_check_write+0x14/0x20 [ 918.956785][T15914] ? ref_tracker_alloc+0x319/0x4a0 [ 918.961925][T15914] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 918.967407][T15914] ? avc_policy_seqno+0x1b/0x70 [ 918.968997][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5177'. [ 918.972390][T15914] ? selinux_file_permission+0x2a5/0x510 [ 918.986889][T15914] tun_chr_write_iter+0x1f9/0x300 [ 918.991952][T15914] vfs_write+0x5ef/0xd00 [ 918.996236][T15914] ? __cfi_vfs_write+0x10/0x10 [ 919.001031][T15914] ? __fget_files+0x2d1/0x330 [ 919.005738][T15914] ? __fdget_pos+0x1f2/0x380 [ 919.010444][T15914] ? ksys_write+0x70/0x260 [ 919.014895][T15914] ksys_write+0x14a/0x260 [ 919.019264][T15914] ? __cfi_ksys_write+0x10/0x10 [ 919.024136][T15914] ? debug_smp_processor_id+0x17/0x20 [ 919.029542][T15914] __x64_sys_write+0x7b/0x90 [ 919.034165][T15914] x64_sys_call+0x27b/0x9a0 [ 919.038700][T15914] do_syscall_64+0x4c/0xa0 [ 919.043151][T15914] ? clear_bhb_loop+0x30/0x80 [ 919.047870][T15914] ? clear_bhb_loop+0x30/0x80 [ 919.052580][T15914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.058502][T15914] RIP: 0033:0x7f899555e98e [ 919.062948][T15914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 919.082585][T15914] RSP: 002b:00007f89963edfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 919.091036][T15914] RAX: ffffffffffffffda RBX: 00007f89963ee6c0 RCX: 00007f899555e98e [ 919.099054][T15914] RDX: 0000000000000062 RSI: 0000200000000a00 RDI: 00000000000000c8 [ 919.107058][T15914] RBP: 00007f89963ee090 R08: 0000000000000000 R09: 0000000000000000 [ 919.115058][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.123062][T15914] R13: 00007f8995826038 R14: 00007f8995825fa0 R15: 00007fff1c5a38d8 [ 919.131173][T15914] [ 920.067183][T15950] overlayfs: failed to clone upperpath [ 921.243578][T15973] FAULT_INJECTION: forcing a failure. [ 921.243578][T15973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.290239][T15973] CPU: 1 PID: 15973 Comm: syz.3.5191 Tainted: G W syzkaller #0 [ 921.299231][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.309311][T15973] Call Trace: [ 921.312599][T15973] [ 921.315531][T15973] __dump_stack+0x21/0x24 [ 921.319873][T15973] dump_stack_lvl+0x110/0x170 [ 921.324560][T15973] ? __cfi_dump_stack_lvl+0x8/0x8 [ 921.329593][T15973] dump_stack+0x15/0x24 [ 921.333751][T15973] should_fail_ex+0x3bf/0x510 [ 921.338434][T15973] should_fail+0xb/0x10 [ 921.342600][T15973] should_fail_usercopy+0x1a/0x20 [ 921.347623][T15973] _copy_from_user+0x1e/0xc0 [ 921.352222][T15973] __sys_bpf+0x2a0/0x850 [ 921.356474][T15973] ? bpf_link_show_fdinfo+0x330/0x330 [ 921.361847][T15973] ? __cfi_ksys_write+0x10/0x10 [ 921.366705][T15973] ? debug_smp_processor_id+0x17/0x20 [ 921.372080][T15973] __x64_sys_bpf+0x7c/0x90 [ 921.376516][T15973] x64_sys_call+0x488/0x9a0 [ 921.381022][T15973] do_syscall_64+0x4c/0xa0 [ 921.385443][T15973] ? clear_bhb_loop+0x30/0x80 [ 921.390130][T15973] ? clear_bhb_loop+0x30/0x80 [ 921.394812][T15973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.400703][T15973] RIP: 0033:0x7f541979e159 [ 921.405121][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.424905][T15973] RSP: 002b:00007f541a5ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 921.433409][T15973] RAX: ffffffffffffffda RBX: 00007f5419a25fa0 RCX: 00007f541979e159 [ 921.441393][T15973] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 921.449368][T15973] RBP: 00007f541a5ea090 R08: 0000000000000000 R09: 0000000000000000 [ 921.457338][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.465394][T15973] R13: 00007f5419a26038 R14: 00007f5419a25fa0 R15: 00007fffde7392f8 [ 921.473386][T15973] [ 921.617339][T15978] xt_hashlimit: size too large, truncated to 1048576 [ 922.069547][T15991] overlayfs: failed to clone upperpath [ 922.899211][ T5668] Bluetooth: hci0: Frame reassembly failed (-84) [ 923.700588][T16019] xt_hashlimit: size too large, truncated to 1048576 [ 925.072428][T11066] Bluetooth: hci0: command 0x1003 tx timeout [ 925.078517][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 925.084780][T16000] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 925.136286][T16055] FAULT_INJECTION: forcing a failure. [ 925.136286][T16055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.169907][ T8681] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 925.181511][T16055] CPU: 0 PID: 16055 Comm: syz.0.5218 Tainted: G W syzkaller #0 [ 925.190486][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 925.200565][T16055] Call Trace: [ 925.203870][T16055] [ 925.206824][T16055] __dump_stack+0x21/0x24 [ 925.211185][T16055] dump_stack_lvl+0x110/0x170 [ 925.215898][T16055] ? __cfi_dump_stack_lvl+0x8/0x8 [ 925.220953][T16055] dump_stack+0x15/0x24 [ 925.225138][T16055] should_fail_ex+0x3bf/0x510 [ 925.230026][T16055] should_fail+0xb/0x10 [ 925.234195][T16055] should_fail_usercopy+0x1a/0x20 [ 925.239238][T16055] _copy_from_user+0x1e/0xc0 [ 925.243861][T16055] __sys_bpf+0x2a0/0x850 [ 925.248123][T16055] ? bpf_link_show_fdinfo+0x330/0x330 [ 925.253515][T16055] ? __cfi_ksys_write+0x10/0x10 [ 925.258387][T16055] ? debug_smp_processor_id+0x17/0x20 [ 925.263781][T16055] __x64_sys_bpf+0x7c/0x90 [ 925.268212][T16055] x64_sys_call+0x488/0x9a0 [ 925.272739][T16055] do_syscall_64+0x4c/0xa0 [ 925.277176][T16055] ? clear_bhb_loop+0x30/0x80 [ 925.281866][T16055] ? clear_bhb_loop+0x30/0x80 [ 925.286542][T16055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.292432][T16055] RIP: 0033:0x7f27e3d9e159 [ 925.296883][T16055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.316513][T16055] RSP: 002b:00007f27e4cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.324986][T16055] RAX: ffffffffffffffda RBX: 00007f27e4025fa0 RCX: 00007f27e3d9e159 [ 925.332956][T16055] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 925.340929][T16055] RBP: 00007f27e4cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 925.348902][T16055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.356875][T16055] R13: 00007f27e4026038 R14: 00007f27e4025fa0 R15: 00007fff505cf608 [ 925.364856][T16055] [ 925.443025][ T8681] usb 7-1: Using ep0 maxpacket: 32 [ 925.451103][ T8681] usb 7-1: unable to get BOS descriptor or descriptor too short [ 925.468410][ T8681] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.490064][ T8681] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.516077][ T8681] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 925.599425][ T8681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.795061][ T8681] usb 7-1: Product: syz [ 925.830498][ T8681] usb 7-1: Manufacturer: syz [ 925.907174][ T8681] usb 7-1: SerialNumber: syz [ 925.914001][ T8681] usb 7-1: selecting invalid altsetting 1 [ 926.122370][T16069] overlayfs: failed to clone upperpath [ 926.227144][ T8681] usb 7-1: 6:0: failed to get current value for ch 0 (-71) [ 926.305093][ T8681] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 926.367065][ T8681] usb 7-1: USB disconnect, device number 28 [ 926.955429][T16093] xt_hashlimit: size too large, truncated to 1048576 [ 927.985820][T16099] overlayfs: failed to clone upperpath [ 928.302022][T16105] FAULT_INJECTION: forcing a failure. [ 928.302022][T16105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 928.343727][T16105] CPU: 0 PID: 16105 Comm: syz.9.5233 Tainted: G W syzkaller #0 [ 928.352900][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.362989][T16105] Call Trace: [ 928.366290][T16105] [ 928.369250][T16105] __dump_stack+0x21/0x24 [ 928.373623][T16105] dump_stack_lvl+0x110/0x170 [ 928.378420][T16105] ? __cfi_dump_stack_lvl+0x8/0x8 [ 928.383487][T16105] ? page_add_file_rmap+0x49f/0x650 [ 928.388719][T16105] ? next_uptodate_page+0x89e/0x8d0 [ 928.393976][T16105] dump_stack+0x15/0x24 [ 928.398170][T16105] should_fail_ex+0x3bf/0x510 [ 928.402873][T16105] should_fail_alloc_page+0x61/0x90 [ 928.408101][T16105] prepare_alloc_pages+0x131/0x570 [ 928.413269][T16105] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 928.418508][T16105] ? __cfi_filemap_map_pages+0x10/0x10 [ 928.424002][T16105] __alloc_pages+0x15b/0x610 [ 928.428628][T16105] ? __cfi___alloc_pages+0x10/0x10 [ 928.433773][T16105] ? do_fault+0x1b23/0x1e30 [ 928.438288][T16105] ? memcg_rstat_updated+0x56/0x110 [ 928.443502][T16105] __folio_alloc+0x12/0x40 [ 928.447924][T16105] handle_mm_fault+0x1989/0x26b0 [ 928.452860][T16105] ? __cfi_handle_mm_fault+0x10/0x10 [ 928.458143][T16105] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 928.463358][T16105] ? fput+0x154/0x1a0 [ 928.467348][T16105] do_user_addr_fault+0x900/0x1030 [ 928.472465][T16105] ? debug_smp_processor_id+0x17/0x20 [ 928.477843][T16105] exc_page_fault+0x51/0xb0 [ 928.482359][T16105] asm_exc_page_fault+0x27/0x30 [ 928.487209][T16105] RIP: 0033:0x7fb67fe5c4aa [ 928.491621][T16105] Code: 48 83 c4 08 5b 5d e9 c5 fa ff ff 0f 1f 44 00 00 41 57 45 31 ff 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 38 1b 00 00 <48> 89 bc 24 a8 00 00 00 4c 8d ac 24 20 07 00 00 48 89 b4 24 a0 00 [ 928.511224][T16105] RSP: 002b:00007fb680e104b0 EFLAGS: 00010202 [ 928.517292][T16105] RAX: 00007fb67fe5c490 RBX: 00007fb680225fa0 RCX: 0000000000000000 [ 928.525269][T16105] RDX: 0000200000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 928.533340][T16105] RBP: 00007fb680e12090 R08: 0000000000000000 R09: 0000000000000064 [ 928.541399][T16105] R10: ffffffffffffffff R11: 0000200000000000 R12: 00000000fec00000 [ 928.549372][T16105] R13: 00007fb680226038 R14: 00007fb680225fa0 R15: 0000000000000000 [ 928.557357][T16105] [ 928.614583][T16105] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 928.638066][T16113] FAULT_INJECTION: forcing a failure. [ 928.638066][T16113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.668222][T16113] CPU: 0 PID: 16113 Comm: syz.0.5235 Tainted: G W syzkaller #0 [ 928.677301][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.687389][T16113] Call Trace: [ 928.690695][T16113] [ 928.693646][T16113] __dump_stack+0x21/0x24 [ 928.698011][T16113] dump_stack_lvl+0x110/0x170 [ 928.702725][T16113] ? __cfi_dump_stack_lvl+0x8/0x8 [ 928.707786][T16113] ? _parse_integer+0x2a/0x40 [ 928.712489][T16113] dump_stack+0x15/0x24 [ 928.716742][T16113] should_fail_ex+0x3bf/0x510 [ 928.721450][T16113] should_fail+0xb/0x10 [ 928.725635][T16113] should_fail_usercopy+0x1a/0x20 [ 928.730689][T16113] _copy_from_user+0x1e/0xc0 [ 928.735308][T16113] ___sys_sendmsg+0x1c3/0x360 [ 928.740058][T16113] ? __sys_sendmsg+0x290/0x290 [ 928.744855][T16113] ? __kasan_check_write+0x14/0x20 [ 928.750085][T16113] ? proc_fail_nth_write+0x180/0x200 [ 928.755572][T16113] ? vfs_write+0xa51/0xd00 [ 928.760015][T16113] ? __fdget+0x19c/0x220 [ 928.764289][T16113] __x64_sys_sendmsg+0x20d/0x2e0 [ 928.769273][T16113] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 928.774862][T16113] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 928.780942][T16113] x64_sys_call+0x171/0x9a0 [ 928.785477][T16113] do_syscall_64+0x4c/0xa0 [ 928.789898][T16113] ? clear_bhb_loop+0x30/0x80 [ 928.794665][T16113] ? clear_bhb_loop+0x30/0x80 [ 928.799348][T16113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.805252][T16113] RIP: 0033:0x7f27e3d9e159 [ 928.809685][T16113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.829324][T16113] RSP: 002b:00007f27e4cf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.837746][T16113] RAX: ffffffffffffffda RBX: 00007f27e4025fa0 RCX: 00007f27e3d9e159 [ 928.845722][T16113] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 928.853703][T16113] RBP: 00007f27e4cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 928.861685][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.869660][T16113] R13: 00007f27e4026038 R14: 00007f27e4025fa0 R15: 00007fff505cf608 [ 928.877640][T16113] [ 928.984830][ T28] audit: type=1400 audit(1789188044.366:870): avc: denied { ioctl } for pid=16123 comm="syz.8.5240" path="socket:[86001]" dev="sockfs" ino=86001 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 928.986267][T16127] x_tables: duplicate underflow at hook 3 [ 929.036992][ T8690] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 929.362025][ T1226] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 929.549086][ T1226] usb 1-1: device descriptor read/64, error -71 [ 929.570372][ T8690] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 929.579868][ T8690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.588024][ T8690] usb 10-1: Product: syz [ 929.592793][ T8690] usb 10-1: Manufacturer: syz [ 929.597568][ T8690] usb 10-1: SerialNumber: syz [ 929.822462][ T8690] usb 10-1: invalid MIDI in EP 0 [ 929.836104][ T8690] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 929.838492][ T1226] usb 1-1: device descriptor read/64, error -71 [ 929.844013][ T8690] usb 10-1: USB disconnect, device number 8 [ 929.849682][ T37] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 929.939409][T16143] FAULT_INJECTION: forcing a failure. [ 929.939409][T16143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.952597][T16143] CPU: 0 PID: 16143 Comm: syz.3.5246 Tainted: G W syzkaller #0 [ 929.961560][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.971642][T16143] Call Trace: [ 929.974948][T16143] [ 929.977897][T16143] __dump_stack+0x21/0x24 [ 929.982273][T16143] dump_stack_lvl+0x110/0x170 [ 929.986985][T16143] ? __cfi_dump_stack_lvl+0x8/0x8 [ 929.992047][T16143] dump_stack+0x15/0x24 [ 929.996239][T16143] should_fail_ex+0x3bf/0x510 [ 930.000943][T16143] should_fail+0xb/0x10 [ 930.005123][T16143] should_fail_usercopy+0x1a/0x20 [ 930.010172][T16143] _copy_to_user+0x1e/0x90 [ 930.014617][T16143] simple_read_from_buffer+0xe9/0x160 [ 930.020021][T16143] proc_fail_nth_read+0x1a6/0x220 [ 930.025067][T16143] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 930.030645][T16143] ? security_file_permission+0x94/0xb0 [ 930.036198][T16143] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 930.041750][T16143] vfs_read+0x286/0x930 [ 930.045914][T16143] ? __cfi_vfs_read+0x10/0x10 [ 930.050588][T16143] ? __kasan_check_write+0x14/0x20 [ 930.055701][T16143] ? mutex_lock+0x93/0x1b0 [ 930.060117][T16143] ? __cfi_mutex_lock+0x10/0x10 [ 930.064970][T16143] ? __fdget_pos+0x2cd/0x380 [ 930.069555][T16143] ? ksys_read+0x70/0x260 [ 930.073980][T16143] ksys_read+0x14a/0x260 [ 930.078223][T16143] ? __cfi_ksys_read+0x10/0x10 [ 930.083011][T16143] ? fput+0x154/0x1a0 [ 930.087019][T16143] ? debug_smp_processor_id+0x17/0x20 [ 930.092405][T16143] __x64_sys_read+0x7b/0x90 [ 930.096921][T16143] x64_sys_call+0x2f/0x9a0 [ 930.101365][T16143] do_syscall_64+0x4c/0xa0 [ 930.105823][T16143] ? clear_bhb_loop+0x30/0x80 [ 930.110528][T16143] ? clear_bhb_loop+0x30/0x80 [ 930.115214][T16143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.121105][T16143] RIP: 0033:0x7f541975e98e [ 930.125521][T16143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 930.145127][T16143] RSP: 002b:00007f541a5e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 930.153546][T16143] RAX: ffffffffffffffda RBX: 00007f541a5ea6c0 RCX: 00007f541975e98e [ 930.161604][T16143] RDX: 000000000000000f RSI: 00007f541a5ea0a0 RDI: 0000000000000004 [ 930.169574][T16143] RBP: 00007f541a5ea090 R08: 0000000000000000 R09: 0000000000000000 [ 930.177549][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.185527][T16143] R13: 00007f5419a26038 R14: 00007f5419a25fa0 R15: 00007fffde7392f8 [ 930.193504][T16143] [ 930.293525][ T1226] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 930.309904][ T37] usb 7-1: unable to get BOS descriptor or descriptor too short [ 930.318749][ T37] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 930.331360][ T37] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 930.340501][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.348624][ T37] usb 7-1: Product: syz [ 930.352813][ T37] usb 7-1: Manufacturer: syz [ 930.357516][ T37] usb 7-1: SerialNumber: syz [ 930.423114][T16150] overlayfs: failed to clone upperpath [ 930.477703][ T1226] usb 1-1: device descriptor read/64, error -71 [ 930.590818][ T37] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 930.770085][ T1226] usb 1-1: device descriptor read/64, error -71 [ 930.900492][ T1226] usb usb1-port1: attempt power cycle [ 931.484906][ T8690] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 931.517408][ T1226] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 931.589072][ T1226] usb 1-1: device descriptor read/8, error -71 [ 931.610828][T16137] device syzkaller0 entered promiscuous mode [ 931.620686][T11909] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 931.671962][ T37] usb 7-1: failed to enable PITCH for EP 0x82 [ 931.689183][ T37] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 931.692183][ T8690] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 931.698154][ T37] usb 7-1: clock source 0 is not valid, cannot use [ 931.723285][ T8690] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 931.730633][ T37] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 931.732493][ T8690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.744902][ T37] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 931.756914][ T1226] usb 1-1: device descriptor read/8, error -71 [ 931.768334][ T8690] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 931.798379][ T37] usb 7-1: USB disconnect, device number 29 [ 932.051827][ T1226] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 932.093241][ T1226] usb 1-1: device descriptor read/8, error -71 [ 932.301504][ T2372] usb 4-1: USB disconnect, device number 24 [ 932.303320][ T1226] usb 1-1: device descriptor read/8, error -71 [ 932.438321][ T1226] usb usb1-port1: unable to enumerate USB device [ 932.927415][T16191] netlink: 'syz.6.5261': attribute type 30 has an invalid length. [ 934.047914][T16214] FAULT_INJECTION: forcing a failure. [ 934.047914][T16214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.062924][T16214] CPU: 0 PID: 16214 Comm: syz.0.5270 Tainted: G W syzkaller #0 [ 934.071906][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.081993][T16214] Call Trace: [ 934.085302][T16214] [ 934.088251][T16214] __dump_stack+0x21/0x24 [ 934.092614][T16214] dump_stack_lvl+0x110/0x170 [ 934.097330][T16214] ? __cfi_dump_stack_lvl+0x8/0x8 [ 934.102396][T16214] ? vfs_write+0xa51/0xd00 [ 934.106853][T16214] dump_stack+0x15/0x24 [ 934.111046][T16214] should_fail_ex+0x3bf/0x510 [ 934.115755][T16214] should_fail+0xb/0x10 [ 934.119950][T16214] should_fail_usercopy+0x1a/0x20 [ 934.125016][T16214] _copy_from_user+0x1e/0xc0 [ 934.129645][T16214] __x64_sys_io_uring_setup+0x10a/0x230 [ 934.135234][T16214] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 934.141382][T16214] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 934.147486][T16214] x64_sys_call+0x4ab/0x9a0 [ 934.152053][T16214] do_syscall_64+0x4c/0xa0 [ 934.156561][T16214] ? clear_bhb_loop+0x30/0x80 [ 934.161263][T16214] ? clear_bhb_loop+0x30/0x80 [ 934.165975][T16214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 934.171900][T16214] RIP: 0033:0x7f27e3d9e159 [ 934.176344][T16214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.196061][T16214] RSP: 002b:00007f27e4cf0ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 934.204505][T16214] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f27e3d9e159 [ 934.212507][T16214] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 934.220505][T16214] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 934.228509][T16214] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 934.236508][T16214] R13: 0000200000000b10 R14: 00007f27e4cf0fd8 R15: 0000000000000000 [ 934.244512][T16214] [ 934.341708][T16224] overlayfs: failed to clone upperpath [ 934.373135][ T37] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 934.658649][ T37] usb 4-1: device descriptor read/64, error -71 [ 935.070452][ T37] usb 4-1: device descriptor read/64, error -71 [ 935.373545][ T37] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 935.501510][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5282'. [ 935.546842][ T37] usb 4-1: device descriptor read/64, error -71 [ 935.724194][T16261] FAULT_INJECTION: forcing a failure. [ 935.724194][T16261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.837841][T16261] CPU: 0 PID: 16261 Comm: syz.9.5286 Tainted: G W syzkaller #0 [ 935.846847][T16261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.856928][T16261] Call Trace: [ 935.860229][T16261] [ 935.863182][T16261] __dump_stack+0x21/0x24 [ 935.867540][T16261] dump_stack_lvl+0x110/0x170 [ 935.872242][T16261] ? __cfi_dump_stack_lvl+0x8/0x8 [ 935.877296][T16261] dump_stack+0x15/0x24 [ 935.881480][T16261] should_fail_ex+0x3bf/0x510 [ 935.886179][T16261] should_fail+0xb/0x10 [ 935.890362][T16261] should_fail_usercopy+0x1a/0x20 [ 935.893606][ T37] usb 4-1: device descriptor read/64, error -71 [ 935.895411][T16261] _copy_from_user+0x1e/0xc0 [ 935.906243][T16261] ___sys_sendmsg+0x1c3/0x360 [ 935.910962][T16261] ? __sys_sendmsg+0x290/0x290 [ 935.915760][T16261] ? kstrtouint+0x74/0xe0 [ 935.920138][T16261] ? __fdget+0x19c/0x220 [ 935.924418][T16261] __sys_sendmmsg+0x2cc/0x4e0 [ 935.929126][T16261] ? __cfi___sys_sendmmsg+0x10/0x10 [ 935.934360][T16261] ? __cfi_ksys_write+0x10/0x10 [ 935.939240][T16261] __x64_sys_sendmmsg+0xa0/0xb0 [ 935.944132][T16261] x64_sys_call+0x3f5/0x9a0 [ 935.948667][T16261] do_syscall_64+0x4c/0xa0 [ 935.953200][T16261] ? clear_bhb_loop+0x30/0x80 [ 935.957902][T16261] ? clear_bhb_loop+0x30/0x80 [ 935.962604][T16261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.968526][T16261] RIP: 0033:0x7fb67ff9e159 [ 935.972969][T16261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.992609][T16261] RSP: 002b:00007fb680df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 936.001058][T16261] RAX: ffffffffffffffda RBX: 00007fb680226090 RCX: 00007fb67ff9e159 [ 936.009066][T16261] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 936.017063][T16261] RBP: 00007fb680df1090 R08: 0000000000000000 R09: 0000000000000000 [ 936.025058][T16261] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 936.033054][T16261] R13: 00007fb680226128 R14: 00007fb680226090 R15: 00007ffdd70300f8 [ 936.041054][T16261] [ 936.046197][ T37] usb usb4-port1: attempt power cycle [ 936.565130][ T37] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 936.963283][ T37] usb 4-1: device descriptor read/8, error -71 [ 937.141104][ T37] usb 4-1: device descriptor read/8, error -71 [ 937.453293][ T37] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 937.602409][T16282] event trace: Could not enable event p [ 938.316918][ T37] usb 4-1: device not accepting address 28, error -71 [ 938.383230][ T37] usb usb4-port1: unable to enumerate USB device [ 938.591679][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 938.634751][T16322] event trace: Could not enable event p [ 938.763915][ T8681] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 938.959249][ T8681] usb 10-1: device descriptor read/64, error -71 [ 939.257536][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5323'. [ 939.327181][ T8681] usb 10-1: device descriptor read/64, error -71 [ 939.723288][ T8681] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 939.870007][T16370] event trace: Could not enable event p [ 939.912146][ T8681] usb 10-1: device descriptor read/64, error -71 [ 940.227935][ T8681] usb 10-1: device descriptor read/64, error -71 [ 940.407990][ T8681] usb usb10-port1: attempt power cycle [ 940.540516][T16406] overlayfs: failed to resolve './bus': -2 [ 940.897927][ T8681] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 940.942938][ T8681] usb 10-1: device descriptor read/8, error -71 [ 941.139581][ T8681] usb 10-1: device descriptor read/8, error -71 [ 943.323672][T16453] xt_hashlimit: size too large, truncated to 1048576 [ 943.925300][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'. [ 944.288237][ T8681] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 944.508993][ T8681] usb 1-1: Using ep0 maxpacket: 8 [ 944.585912][ T8681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 944.671675][ T8681] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.739919][ T8681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.772054][ T8681] usb 1-1: Product: syz [ 944.787639][ T8681] usb 1-1: Manufacturer: syz [ 944.799052][ T8681] usb 1-1: SerialNumber: syz [ 945.047874][T16472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.162071][T16472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.191410][T16472] FAULT_INJECTION: forcing a failure. [ 945.191410][T16472] name failslab, interval 1, probability 0, space 0, times 0 [ 945.208988][T16472] CPU: 1 PID: 16472 Comm: syz.0.5357 Tainted: G W syzkaller #0 [ 945.217985][T16472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.228067][T16472] Call Trace: [ 945.231366][T16472] [ 945.234428][T16472] __dump_stack+0x21/0x24 [ 945.238795][T16472] dump_stack_lvl+0x110/0x170 [ 945.243508][T16472] ? __cfi_dump_stack_lvl+0x8/0x8 [ 945.248566][T16472] ? widen_string+0x41/0x2d0 [ 945.253181][T16472] dump_stack+0x15/0x24 [ 945.257395][T16472] should_fail_ex+0x3bf/0x510 [ 945.262100][T16472] ? skb_clone+0x1e8/0x380 [ 945.266548][T16472] __should_failslab+0xac/0xf0 [ 945.271342][T16472] should_failslab+0x9/0x20 [ 945.275867][T16472] kmem_cache_alloc+0x3b/0x320 [ 945.280674][T16472] ? sprintf+0xe4/0x140 [ 945.284851][T16472] skb_clone+0x1e8/0x380 [ 945.289143][T16472] netlink_broadcast+0x698/0x11c0 [ 945.294192][T16472] ? alloc_uevent_skb+0xf7/0x240 [ 945.299154][T16472] kobject_uevent_net_broadcast+0x3cb/0x5b0 [ 945.305078][T16472] kobject_uevent_env+0x541/0x720 [ 945.310128][T16472] kobject_uevent+0x1d/0x30 [ 945.314659][T16472] driver_register+0x3ef/0x440 [ 945.319458][T16472] usb_gadget_register_driver_owner+0xf8/0x270 [ 945.325746][T16472] raw_ioctl+0x112c/0x3180 [ 945.330202][T16472] ? ioctl_has_perm+0x3a6/0x4f0 [ 945.335091][T16472] ? __cfi_raw_ioctl+0x10/0x10 [ 945.339950][T16472] ? has_cap_mac_admin+0x370/0x370 [ 945.345096][T16472] ? ____kasan_slab_free+0x13d/0x180 [ 945.350414][T16472] ? __kasan_slab_free+0x11/0x20 [ 945.355385][T16472] ? selinux_file_ioctl+0x3ad/0x4c0 [ 945.360619][T16472] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 945.366189][T16472] ? __fget_files+0x2d1/0x330 [ 945.370926][T16472] ? security_file_ioctl+0x95/0xc0 [ 945.376059][T16472] ? __cfi_raw_ioctl+0x10/0x10 [ 945.380850][T16472] __se_sys_ioctl+0x12f/0x1b0 [ 945.385556][T16472] __x64_sys_ioctl+0x7b/0x90 [ 945.390177][T16472] x64_sys_call+0x58b/0x9a0 [ 945.394706][T16472] do_syscall_64+0x4c/0xa0 [ 945.399149][T16472] ? clear_bhb_loop+0x30/0x80 [ 945.403854][T16472] ? clear_bhb_loop+0x30/0x80 [ 945.408558][T16472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.414483][T16472] RIP: 0033:0x7f27e3d9ddeb [ 945.418914][T16472] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 945.438544][T16472] RSP: 002b:00007f27e4ceef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.446987][T16472] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f27e3d9ddeb [ 945.454994][T16472] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 945.462995][T16472] RBP: 00007f27e4ceffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 945.470989][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.478984][T16472] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 945.486981][T16472] [ 945.512210][T16472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.531907][T16472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.587642][ T8681] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 945.588338][T16603] xt_hashlimit: size too large, truncated to 1048576 [ 945.605691][ T8681] usb 1-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 945.621705][ T8681] usb 1-1: failed to enable PITCH for EP 0x1 [ 945.631687][ T8681] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 945.646883][ T8681] usb 1-1: USB disconnect, device number 28 [ 945.663844][ T37] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 946.411212][ T37] usb 7-1: Using ep0 maxpacket: 32 [ 946.417888][ T37] usb 7-1: unable to get BOS descriptor or descriptor too short [ 946.433949][ T37] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.444502][ T37] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 946.466368][ T37] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 946.475639][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.508701][ T37] usb 7-1: Product: syz [ 946.512905][ T37] usb 7-1: Manufacturer: syz [ 946.530388][ T37] usb 7-1: SerialNumber: syz [ 946.536846][ T37] usb 7-1: selecting invalid altsetting 1 [ 946.755199][ T37] usb 7-1: 6:0: failed to get current value for ch 0 (-71) [ 946.773655][ T37] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 946.791003][ T37] usb 7-1: USB disconnect, device number 30 [ 947.325566][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'. [ 948.304650][T16660] xt_hashlimit: size too large, truncated to 1048576 [ 948.501571][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5384'. [ 948.524141][T16668] event trace: Could not enable event p [ 948.626596][T16673] xt_hashlimit: size too large, truncated to 1048576 [ 949.785245][T16813] event trace: Could not enable event p [ 949.855777][ T2372] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 950.321571][ T2372] usb 10-1: Using ep0 maxpacket: 8 [ 950.331310][ T2372] usb 10-1: unable to get BOS descriptor or descriptor too short [ 950.343452][ T2372] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.374502][T16830] xt_hashlimit: size too large, truncated to 1048576 [ 950.381757][ T2372] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.390399][ T2372] usb 10-1: Product: syz [ 950.394671][ T2372] usb 10-1: Manufacturer: syz [ 950.408207][ T2372] usb 10-1: SerialNumber: syz [ 950.640872][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.668450][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.704792][T16692] FAULT_INJECTION: forcing a failure. [ 950.704792][T16692] name failslab, interval 1, probability 0, space 0, times 0 [ 950.744063][T16692] CPU: 0 PID: 16692 Comm: syz.9.5390 Tainted: G W syzkaller #0 [ 950.753062][T16692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.763143][T16692] Call Trace: [ 950.766538][T16692] [ 950.769493][T16692] __dump_stack+0x21/0x24 [ 950.773865][T16692] dump_stack_lvl+0x110/0x170 [ 950.778579][T16692] ? __cfi_dump_stack_lvl+0x8/0x8 [ 950.783766][T16692] ? widen_string+0x41/0x2d0 [ 950.788392][T16692] dump_stack+0x15/0x24 [ 950.792667][T16692] should_fail_ex+0x3bf/0x510 [ 950.797368][T16692] ? skb_clone+0x1e8/0x380 [ 950.801818][T16692] __should_failslab+0xac/0xf0 [ 950.806800][T16692] should_failslab+0x9/0x20 [ 950.811362][T16692] kmem_cache_alloc+0x3b/0x320 [ 950.816160][T16692] ? sprintf+0xe4/0x140 [ 950.820355][T16692] skb_clone+0x1e8/0x380 [ 950.824625][T16692] netlink_broadcast+0x698/0x11c0 [ 950.829677][T16692] ? alloc_uevent_skb+0xf7/0x240 [ 950.834638][T16692] kobject_uevent_net_broadcast+0x3cb/0x5b0 [ 950.840563][T16692] kobject_uevent_env+0x541/0x720 [ 950.845711][T16692] kobject_uevent+0x1d/0x30 [ 950.850252][T16692] driver_register+0x3ef/0x440 [ 950.855048][T16692] usb_gadget_register_driver_owner+0xf8/0x270 [ 950.861228][T16692] raw_ioctl+0x112c/0x3180 [ 950.865681][T16692] ? ioctl_has_perm+0x3a6/0x4f0 [ 950.870572][T16692] ? __cfi_raw_ioctl+0x10/0x10 [ 950.875363][T16692] ? has_cap_mac_admin+0x370/0x370 [ 950.880503][T16692] ? ____kasan_slab_free+0x13d/0x180 [ 950.885822][T16692] ? __kasan_slab_free+0x11/0x20 [ 950.890809][T16692] ? selinux_file_ioctl+0x3ad/0x4c0 [ 950.896061][T16692] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 950.901834][T16692] ? __fget_files+0x2d1/0x330 [ 950.906551][T16692] ? security_file_ioctl+0x95/0xc0 [ 950.911709][T16692] ? __cfi_raw_ioctl+0x10/0x10 [ 950.916507][T16692] __se_sys_ioctl+0x12f/0x1b0 [ 950.921394][T16692] __x64_sys_ioctl+0x7b/0x90 [ 950.926019][T16692] x64_sys_call+0x58b/0x9a0 [ 950.930554][T16692] do_syscall_64+0x4c/0xa0 [ 950.935008][T16692] ? clear_bhb_loop+0x30/0x80 [ 950.939713][T16692] ? clear_bhb_loop+0x30/0x80 [ 950.944425][T16692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.950351][T16692] RIP: 0033:0x7fb67ff9ddeb [ 950.954792][T16692] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 950.974428][T16692] RSP: 002b:00007fb680e0ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.982871][T16692] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fb67ff9ddeb [ 950.990875][T16692] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 950.998873][T16692] RBP: 00007fb680e10fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 951.006867][T16692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.014864][T16692] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 951.022874][T16692] [ 951.028901][T16843] xt_hashlimit: size too large, truncated to 1048576 [ 951.258863][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.314693][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.377280][ T2372] usb 10-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 951.411002][ T2372] usb 10-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 951.430626][ T2372] usb 10-1: failed to enable PITCH for EP 0x1 [ 951.500996][ T2372] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 951.570977][T16858] overlayfs: failed to clone upperpath [ 951.798453][ T2372] usb 10-1: USB disconnect, device number 13 [ 955.030415][T16912] overlayfs: failed to clone upperpath [ 958.002304][ T37] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 958.218288][ T37] usb 10-1: Using ep0 maxpacket: 8 [ 958.229845][ T37] usb 10-1: unable to get BOS descriptor or descriptor too short [ 958.383094][ T37] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 958.403754][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.413185][ T37] usb 10-1: Product: syz [ 958.417624][ T37] usb 10-1: Manufacturer: syz [ 958.422577][ T37] usb 10-1: SerialNumber: syz [ 958.656712][T16970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.672476][T16970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.696630][T16970] FAULT_INJECTION: forcing a failure. [ 958.696630][T16970] name failslab, interval 1, probability 0, space 0, times 0 [ 958.720706][T16970] CPU: 1 PID: 16970 Comm: syz.9.5449 Tainted: G W syzkaller #0 [ 958.729698][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.739775][T16970] Call Trace: [ 958.743084][T16970] [ 958.746034][T16970] __dump_stack+0x21/0x24 [ 958.750402][T16970] dump_stack_lvl+0x110/0x170 [ 958.755110][T16970] ? __cfi_dump_stack_lvl+0x8/0x8 [ 958.760184][T16970] ? widen_string+0x41/0x2d0 [ 958.764808][T16970] dump_stack+0x15/0x24 [ 958.769006][T16970] should_fail_ex+0x3bf/0x510 [ 958.773716][T16970] ? skb_clone+0x1e8/0x380 [ 958.778339][T16970] __should_failslab+0xac/0xf0 [ 958.783136][T16970] should_failslab+0x9/0x20 [ 958.787683][T16970] kmem_cache_alloc+0x3b/0x320 [ 958.792477][T16970] ? sprintf+0xe4/0x140 [ 958.796756][T16970] skb_clone+0x1e8/0x380 [ 958.801077][T16970] netlink_broadcast+0x698/0x11c0 [ 958.806435][T16970] ? alloc_uevent_skb+0xf7/0x240 [ 958.811412][T16970] kobject_uevent_net_broadcast+0x3cb/0x5b0 [ 958.817345][T16970] kobject_uevent_env+0x541/0x720 [ 958.822414][T16970] kobject_uevent+0x1d/0x30 [ 958.826950][T16970] driver_register+0x3ef/0x440 [ 958.831750][T16970] usb_gadget_register_driver_owner+0xf8/0x270 [ 958.837944][T16970] raw_ioctl+0x112c/0x3180 [ 958.842405][T16970] ? ioctl_has_perm+0x3a6/0x4f0 [ 958.847297][T16970] ? __cfi_raw_ioctl+0x10/0x10 [ 958.852097][T16970] ? has_cap_mac_admin+0x370/0x370 [ 958.857333][T16970] ? ____kasan_slab_free+0x13d/0x180 [ 958.862743][T16970] ? __kasan_slab_free+0x11/0x20 [ 958.867723][T16970] ? selinux_file_ioctl+0x3ad/0x4c0 [ 958.872957][T16970] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 958.878540][T16970] ? __fget_files+0x2d1/0x330 [ 958.883249][T16970] ? security_file_ioctl+0x95/0xc0 [ 958.888401][T16970] ? __cfi_raw_ioctl+0x10/0x10 [ 958.893199][T16970] __se_sys_ioctl+0x12f/0x1b0 [ 958.897994][T16970] __x64_sys_ioctl+0x7b/0x90 [ 958.902602][T16970] x64_sys_call+0x58b/0x9a0 [ 958.907134][T16970] do_syscall_64+0x4c/0xa0 [ 958.911588][T16970] ? clear_bhb_loop+0x30/0x80 [ 958.916294][T16970] ? clear_bhb_loop+0x30/0x80 [ 958.920998][T16970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.926919][T16970] RIP: 0033:0x7fb67ff9ddeb [ 958.931359][T16970] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 958.950993][T16970] RSP: 002b:00007fb680e0ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.959439][T16970] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fb67ff9ddeb [ 958.967433][T16970] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 958.975438][T16970] RBP: 00007fb680e10fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 958.983440][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.991446][T16970] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 958.999456][T16970] [ 959.053866][T16970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.062437][T16970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.086859][T17000] xt_hashlimit: size too large, truncated to 1048576 [ 959.113462][ T37] usb 10-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 959.132787][ T37] usb 10-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 959.154421][ T37] usb 10-1: failed to enable PITCH for EP 0x1 [ 959.166615][ T37] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 959.186094][ T37] usb 10-1: USB disconnect, device number 14 [ 960.209091][T17032] xt_hashlimit: size too large, truncated to 1048576 [ 961.515211][T17068] xt_hashlimit: size too large, truncated to 1048576 [ 961.814855][ T1226] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 962.020073][ T1226] usb 7-1: Using ep0 maxpacket: 8 [ 962.027361][ T1226] usb 7-1: unable to get BOS descriptor or descriptor too short [ 962.053625][ T1226] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.087682][ T1226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.108662][ T1226] usb 7-1: Product: syz [ 962.124756][ T1226] usb 7-1: Manufacturer: syz [ 962.137610][ T1226] usb 7-1: SerialNumber: syz [ 962.323313][ T37] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 962.376751][T17070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.393342][T17084] xt_hashlimit: size too large, truncated to 1048576 [ 962.397855][T17070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.430583][T17070] FAULT_INJECTION: forcing a failure. [ 962.430583][T17070] name failslab, interval 1, probability 0, space 0, times 0 [ 962.485768][T17070] CPU: 0 PID: 17070 Comm: syz.6.5482 Tainted: G W syzkaller #0 [ 962.494764][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.504843][T17070] Call Trace: [ 962.508146][T17070] [ 962.511098][T17070] __dump_stack+0x21/0x24 [ 962.515461][T17070] dump_stack_lvl+0x110/0x170 [ 962.520174][T17070] ? __cfi_dump_stack_lvl+0x8/0x8 [ 962.525244][T17070] ? widen_string+0x41/0x2d0 [ 962.529870][T17070] dump_stack+0x15/0x24 [ 962.534069][T17070] should_fail_ex+0x3bf/0x510 [ 962.538789][T17070] ? skb_clone+0x1e8/0x380 [ 962.543267][T17070] __should_failslab+0xac/0xf0 [ 962.548062][T17070] should_failslab+0x9/0x20 [ 962.550813][ T37] usb 1-1: device descriptor read/64, error -71 [ 962.552589][T17070] kmem_cache_alloc+0x3b/0x320 [ 962.563591][T17070] ? sprintf+0xe4/0x140 [ 962.567786][T17070] skb_clone+0x1e8/0x380 [ 962.572049][T17070] netlink_broadcast+0x698/0x11c0 [ 962.577191][T17070] ? alloc_uevent_skb+0xf7/0x240 [ 962.582158][T17070] kobject_uevent_net_broadcast+0x3cb/0x5b0 [ 962.588085][T17070] kobject_uevent_env+0x541/0x720 [ 962.593135][T17070] kobject_uevent+0x1d/0x30 [ 962.597669][T17070] driver_register+0x3ef/0x440 [ 962.602464][T17070] usb_gadget_register_driver_owner+0xf8/0x270 [ 962.608649][T17070] raw_ioctl+0x112c/0x3180 [ 962.613128][T17070] ? ioctl_has_perm+0x3a6/0x4f0 [ 962.618103][T17070] ? __cfi_raw_ioctl+0x10/0x10 [ 962.622913][T17070] ? has_cap_mac_admin+0x370/0x370 [ 962.628065][T17070] ? ____kasan_slab_free+0x13d/0x180 [ 962.633377][T17070] ? __kasan_slab_free+0x11/0x20 [ 962.638342][T17070] ? selinux_file_ioctl+0x3ad/0x4c0 [ 962.643700][T17070] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 962.649286][T17070] ? __fget_files+0x2d1/0x330 [ 962.653986][T17070] ? security_file_ioctl+0x95/0xc0 [ 962.659127][T17070] ? __cfi_raw_ioctl+0x10/0x10 [ 962.663922][T17070] __se_sys_ioctl+0x12f/0x1b0 [ 962.668630][T17070] __x64_sys_ioctl+0x7b/0x90 [ 962.673248][T17070] x64_sys_call+0x58b/0x9a0 [ 962.677771][T17070] do_syscall_64+0x4c/0xa0 [ 962.682212][T17070] ? clear_bhb_loop+0x30/0x80 [ 962.686907][T17070] ? clear_bhb_loop+0x30/0x80 [ 962.691613][T17070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.697534][T17070] RIP: 0033:0x7f899559ddeb [ 962.701997][T17070] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 962.721717][T17070] RSP: 002b:00007f89963ebf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.730171][T17070] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f899559ddeb [ 962.738171][T17070] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 962.746165][T17070] RBP: 00007f89963ecfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 962.754160][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.762154][T17070] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 962.770155][T17070] [ 962.776674][T17089] xt_hashlimit: size too large, truncated to 1048576 [ 962.875728][ T37] usb 1-1: device descriptor read/64, error -71 [ 962.911194][T17070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.925722][T17070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.971108][ T1226] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 962.984011][ T1226] usb 7-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 963.002066][ T1226] usb 7-1: failed to enable PITCH for EP 0x1 [ 963.027574][ T1226] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 963.048387][ T1226] usb 7-1: USB disconnect, device number 31 [ 963.179077][ T37] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 963.373988][ T37] usb 1-1: device descriptor read/64, error -71 [ 963.666500][ T37] usb 1-1: device descriptor read/64, error -71 [ 963.907878][ T37] usb usb1-port1: attempt power cycle [ 964.099719][ T1226] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 964.147074][T17117] xt_hashlimit: size too large, truncated to 1048576 [ 964.294654][ T1226] usb 10-1: Using ep0 maxpacket: 32 [ 964.301552][ T1226] usb 10-1: unable to get BOS descriptor or descriptor too short [ 964.319086][ T1226] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.330686][ T1226] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.347614][ T1226] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 964.365097][ T1226] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.373530][ T37] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 964.389276][ T1226] usb 10-1: Product: syz [ 964.393836][ T1226] usb 10-1: Manufacturer: syz [ 964.398698][ T1226] usb 10-1: SerialNumber: syz [ 964.405851][ T1226] usb 10-1: selecting invalid altsetting 1 [ 964.415013][ T37] usb 1-1: device descriptor read/8, error -71 [ 964.428866][ T1226] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 964.578008][ T37] usb 1-1: device descriptor read/8, error -71 [ 964.625181][ T1226] usb 10-1: USB disconnect, device number 15 [ 964.835059][T17136] overlayfs: failed to clone upperpath [ 964.879673][ T37] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 964.947190][ T37] usb 1-1: device descriptor read/8, error -71 [ 965.183975][ T37] usb 1-1: device descriptor read/8, error -71 [ 965.323840][ T37] usb usb1-port1: unable to enumerate USB device [ 965.604277][ T1226] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 965.908681][ T1226] usb 10-1: Using ep0 maxpacket: 8 [ 965.917165][ T1226] usb 10-1: unable to get BOS descriptor or descriptor too short [ 965.960109][ T1226] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 965.998396][T17152] overlayfs: failed to clone upperpath [ 966.110472][ T1226] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.157910][ T1226] usb 10-1: Product: syz [ 966.224551][ T1226] usb 10-1: Manufacturer: syz [ 966.232267][T17156] xt_hashlimit: size too large, truncated to 1048576 [ 966.239538][ T1226] usb 10-1: SerialNumber: syz [ 966.480533][T17140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.503910][T17140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.524769][T17140] FAULT_INJECTION: forcing a failure. [ 966.524769][T17140] name failslab, interval 1, probability 0, space 0, times 0 [ 966.547062][T17140] CPU: 1 PID: 17140 Comm: syz.9.5505 Tainted: G W syzkaller #0 [ 966.556054][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 966.566232][T17140] Call Trace: [ 966.569535][T17140] [ 966.572487][T17140] __dump_stack+0x21/0x24 [ 966.576859][T17140] dump_stack_lvl+0x110/0x170 [ 966.581572][T17140] ? __cfi_dump_stack_lvl+0x8/0x8 [ 966.586626][T17140] ? widen_string+0x41/0x2d0 [ 966.591263][T17140] dump_stack+0x15/0x24 [ 966.595468][T17140] should_fail_ex+0x3bf/0x510 [ 966.600170][T17140] ? skb_clone+0x1e8/0x380 [ 966.604615][T17140] __should_failslab+0xac/0xf0 [ 966.609422][T17140] should_failslab+0x9/0x20 [ 966.613954][T17140] kmem_cache_alloc+0x3b/0x320 [ 966.618783][T17140] ? sprintf+0xe4/0x140 [ 966.622973][T17140] skb_clone+0x1e8/0x380 [ 966.627248][T17140] netlink_broadcast+0x698/0x11c0 [ 966.632302][T17140] ? alloc_uevent_skb+0xf7/0x240 [ 966.637273][T17140] kobject_uevent_net_broadcast+0x3cb/0x5b0 [ 966.643199][T17140] kobject_uevent_env+0x541/0x720 [ 966.648264][T17140] kobject_uevent+0x1d/0x30 [ 966.652806][T17140] driver_register+0x3ef/0x440 [ 966.657651][T17140] usb_gadget_register_driver_owner+0xf8/0x270 [ 966.663856][T17140] raw_ioctl+0x112c/0x3180 [ 966.668317][T17140] ? ioctl_has_perm+0x3a6/0x4f0 [ 966.673211][T17140] ? __cfi_raw_ioctl+0x10/0x10 [ 966.678007][T17140] ? has_cap_mac_admin+0x370/0x370 [ 966.683142][T17140] ? ____kasan_slab_free+0x13d/0x180 [ 966.688435][T17140] ? __kasan_slab_free+0x11/0x20 [ 966.693474][T17140] ? selinux_file_ioctl+0x3ad/0x4c0 [ 966.698686][T17140] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 966.704241][T17140] ? __fget_files+0x2d1/0x330 [ 966.708922][T17140] ? security_file_ioctl+0x95/0xc0 [ 966.714049][T17140] ? __cfi_raw_ioctl+0x10/0x10 [ 966.718826][T17140] __se_sys_ioctl+0x12f/0x1b0 [ 966.723505][T17140] __x64_sys_ioctl+0x7b/0x90 [ 966.728097][T17140] x64_sys_call+0x58b/0x9a0 [ 966.732604][T17140] do_syscall_64+0x4c/0xa0 [ 966.737030][T17140] ? clear_bhb_loop+0x30/0x80 [ 966.741709][T17140] ? clear_bhb_loop+0x30/0x80 [ 966.746390][T17140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.752285][T17140] RIP: 0033:0x7fb67ff9ddeb [ 966.756707][T17140] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 966.776323][T17140] RSP: 002b:00007fb680e0ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.784741][T17140] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fb67ff9ddeb [ 966.792726][T17140] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 966.800698][T17140] RBP: 00007fb680e10fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 966.808932][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.816904][T17140] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 966.824881][T17140] [ 966.905373][T17140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.932149][T17140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.025057][ T1226] usb 10-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 967.044580][ T1226] usb 10-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 967.055934][ T1226] usb 10-1: failed to enable PITCH for EP 0x1 [ 967.067646][ T1226] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 967.125125][ T1226] usb 10-1: USB disconnect, device number 16 [ 967.525820][T17174] xt_hashlimit: size too large, truncated to 1048576 [ 968.487813][T17204] xt_hashlimit: size too large, truncated to 1048576 [ 969.987109][ T1226] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 970.029521][ T37] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 970.252214][ T1226] usb 4-1: Using ep0 maxpacket: 8 [ 970.257352][ T37] usb 10-1: Using ep0 maxpacket: 32 [ 970.268453][ T1226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 970.276369][ T37] usb 10-1: unable to get BOS descriptor or descriptor too short [ 970.303908][ T37] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.315844][ T1226] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 970.338844][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.346899][ T1226] usb 4-1: Product: syz [ 970.351318][ T37] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.375282][ T1226] usb 4-1: Manufacturer: syz [ 970.380919][ T37] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 970.401208][ T1226] usb 4-1: SerialNumber: syz [ 970.406882][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.421894][ T37] usb 10-1: Product: syz [ 970.436468][ T37] usb 10-1: Manufacturer: syz [ 970.452327][ T37] usb 10-1: SerialNumber: syz [ 970.470200][ T37] usb 10-1: selecting invalid altsetting 1 [ 970.489354][ T37] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 970.634604][T17231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.654748][T17231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.696039][ T2372] usb 10-1: USB disconnect, device number 17 [ 970.702670][T17231] FAULT_INJECTION: forcing a failure. [ 970.702670][T17231] name failslab, interval 1, probability 0, space 0, times 0 [ 970.772160][T17231] CPU: 0 PID: 17231 Comm: syz.3.5532 Tainted: G W syzkaller #0 [ 970.781157][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.791245][T17231] Call Trace: [ 970.794563][T17231] [ 970.797521][T17231] __dump_stack+0x21/0x24 [ 970.801894][T17231] dump_stack_lvl+0x110/0x170 [ 970.806610][T17231] ? __cfi_dump_stack_lvl+0x8/0x8 [ 970.811670][T17231] ? format_decode+0xbe2/0x1520 [ 970.816560][T17231] dump_stack+0x15/0x24 [ 970.820759][T17231] should_fail_ex+0x3bf/0x510 [ 970.825461][T17231] __should_failslab+0xac/0xf0 [ 970.830259][T17231] should_failslab+0x9/0x20 [ 970.834790][T17231] kmem_cache_alloc_node+0x42/0x330 [ 970.840001][T17231] ? __alloc_skb+0xe8/0x4a0 [ 970.844507][T17231] __alloc_skb+0xe8/0x4a0 [ 970.848844][T17231] ? mutex_lock+0x93/0x1b0 [ 970.853268][T17231] alloc_uevent_skb+0x85/0x240 [ 970.858037][T17231] kobject_uevent_net_broadcast+0x343/0x5b0 [ 970.863932][T17231] kobject_uevent_env+0x541/0x720 [ 970.868957][T17231] kobject_uevent+0x1d/0x30 [ 970.873460][T17231] driver_register+0x3ef/0x440 [ 970.878245][T17231] usb_gadget_register_driver_owner+0xf8/0x270 [ 970.884401][T17231] raw_ioctl+0x112c/0x3180 [ 970.888824][T17231] ? ioctl_has_perm+0x3a6/0x4f0 [ 970.893685][T17231] ? __cfi_raw_ioctl+0x10/0x10 [ 970.898451][T17231] ? has_cap_mac_admin+0x370/0x370 [ 970.903572][T17231] ? ____kasan_slab_free+0x13d/0x180 [ 970.908889][T17231] ? __kasan_slab_free+0x11/0x20 [ 970.913843][T17231] ? selinux_file_ioctl+0x3ad/0x4c0 [ 970.919054][T17231] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 970.924609][T17231] ? __fget_files+0x2d1/0x330 [ 970.929296][T17231] ? security_file_ioctl+0x95/0xc0 [ 970.934421][T17231] ? __cfi_raw_ioctl+0x10/0x10 [ 970.939190][T17231] __se_sys_ioctl+0x12f/0x1b0 [ 970.943873][T17231] __x64_sys_ioctl+0x7b/0x90 [ 970.948468][T17231] x64_sys_call+0x58b/0x9a0 [ 970.952979][T17231] do_syscall_64+0x4c/0xa0 [ 970.957404][T17231] ? clear_bhb_loop+0x30/0x80 [ 970.962086][T17231] ? clear_bhb_loop+0x30/0x80 [ 970.966767][T17231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.972656][T17231] RIP: 0033:0x7f541979ddeb [ 970.977070][T17231] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 970.996681][T17231] RSP: 002b:00007f541a5e7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.005102][T17231] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f541979ddeb [ 971.013071][T17231] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 971.021042][T17231] RBP: 00007f541a5e8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 971.029015][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.037077][T17231] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 971.045053][T17231] [ 971.509094][T17231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.528621][T17231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.565519][ T1226] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 971.584540][ T1226] usb 4-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 971.595988][ T1226] usb 4-1: failed to enable PITCH for EP 0x1 [ 971.606409][ T1226] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 971.629494][ T1226] usb 4-1: USB disconnect, device number 29 [ 971.735416][T17271] xt_hashlimit: size too large, truncated to 1048576 [ 973.112816][T17308] FAULT_INJECTION: forcing a failure. [ 973.112816][T17308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.175954][T17308] CPU: 1 PID: 17308 Comm: syz.9.5556 Tainted: G W syzkaller #0 [ 973.184967][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 973.195045][T17308] Call Trace: [ 973.198360][T17308] [ 973.201318][T17308] __dump_stack+0x21/0x24 [ 973.205678][T17308] dump_stack_lvl+0x110/0x170 [ 973.210559][T17308] ? __cfi_dump_stack_lvl+0x8/0x8 [ 973.215614][T17308] ? _parse_integer+0x2a/0x40 [ 973.220406][T17308] dump_stack+0x15/0x24 [ 973.224594][T17308] should_fail_ex+0x3bf/0x510 [ 973.229293][T17308] should_fail+0xb/0x10 [ 973.233458][T17308] should_fail_usercopy+0x1a/0x20 [ 973.238486][T17308] _copy_from_user+0x1e/0xc0 [ 973.243087][T17308] ___sys_sendmsg+0x1c3/0x360 [ 973.247767][T17308] ? __sys_sendmsg+0x290/0x290 [ 973.252539][T17308] ? __kasan_check_write+0x14/0x20 [ 973.257650][T17308] ? proc_fail_nth_write+0x180/0x200 [ 973.262940][T17308] ? vfs_write+0xa51/0xd00 [ 973.267355][T17308] ? __fdget+0x19c/0x220 [ 973.271595][T17308] __x64_sys_sendmsg+0x20d/0x2e0 [ 973.276538][T17308] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 973.282001][T17308] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 973.288078][T17308] x64_sys_call+0x171/0x9a0 [ 973.292588][T17308] do_syscall_64+0x4c/0xa0 [ 973.297006][T17308] ? clear_bhb_loop+0x30/0x80 [ 973.301683][T17308] ? clear_bhb_loop+0x30/0x80 [ 973.306366][T17308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.312352][T17308] RIP: 0033:0x7fb67ff9e159 [ 973.316768][T17308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.336371][T17308] RSP: 002b:00007fb680e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.344787][T17308] RAX: ffffffffffffffda RBX: 00007fb680225fa0 RCX: 00007fb67ff9e159 [ 973.353386][T17308] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 973.361545][T17308] RBP: 00007fb680e12090 R08: 0000000000000000 R09: 0000000000000000 [ 973.369529][T17308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.377593][T17308] R13: 00007fb680226038 R14: 00007fb680225fa0 R15: 00007ffdd70300f8 [ 973.385675][T17308] [ 974.021719][T17326] xt_hashlimit: size too large, truncated to 1048576 [ 974.086699][ T8690] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 974.281767][ T8690] usb 4-1: Using ep0 maxpacket: 32 [ 974.291219][ T8690] usb 4-1: unable to get BOS descriptor or descriptor too short [ 974.316117][ T8690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.331360][ T8690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 974.349767][ T8690] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 974.379050][ T8690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.411634][ T8690] usb 4-1: Product: syz [ 974.418763][ T8690] usb 4-1: Manufacturer: syz [ 974.428130][ T8690] usb 4-1: SerialNumber: syz [ 974.442367][ T8690] usb 4-1: selecting invalid altsetting 1 [ 974.835930][ T8690] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 974.846429][ T8690] usb 4-1: USB disconnect, device number 30 [ 975.867720][T17372] FAULT_INJECTION: forcing a failure. [ 975.867720][T17372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.880954][T17372] CPU: 1 PID: 17372 Comm: syz.0.5572 Tainted: G W syzkaller #0 [ 975.889922][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 975.899988][T17372] Call Trace: [ 975.903285][T17372] [ 975.906227][T17372] __dump_stack+0x21/0x24 [ 975.910587][T17372] dump_stack_lvl+0x110/0x170 [ 975.915293][T17372] ? __cfi_dump_stack_lvl+0x8/0x8 [ 975.920347][T17372] dump_stack+0x15/0x24 [ 975.924526][T17372] should_fail_ex+0x3bf/0x510 [ 975.929213][T17372] should_fail+0xb/0x10 [ 975.933379][T17372] should_fail_usercopy+0x1a/0x20 [ 975.938420][T17372] _copy_from_user+0x1e/0xc0 [ 975.943032][T17372] __x64_sys_signalfd+0xef/0x170 [ 975.948056][T17372] ? __cfi___x64_sys_signalfd+0x10/0x10 [ 975.953622][T17372] ? fpregs_restore_userregs+0x128/0x260 [ 975.959281][T17372] ? switch_fpu_return+0xe/0x10 [ 975.964146][T17372] x64_sys_call+0x377/0x9a0 [ 975.968670][T17372] do_syscall_64+0x4c/0xa0 [ 975.973106][T17372] ? clear_bhb_loop+0x30/0x80 [ 975.977794][T17372] ? clear_bhb_loop+0x30/0x80 [ 975.982495][T17372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 975.988401][T17372] RIP: 0033:0x7f27e3d9e159 [ 975.992829][T17372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.012449][T17372] RSP: 002b:00007f27e4caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 976.020885][T17372] RAX: ffffffffffffffda RBX: 00007f27e4026180 RCX: 00007f27e3d9e159 [ 976.028962][T17372] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff [ 976.036952][T17372] RBP: 00007f27e4caf090 R08: 0000000000000000 R09: 0000000000000000 [ 976.044937][T17372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.052920][T17372] R13: 00007f27e4026218 R14: 00007f27e4026180 R15: 00007fff505cf608 [ 976.060932][T17372] [ 978.716215][T17423] overlayfs: failed to clone upperpath [ 979.968475][ T3031] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 980.174231][ T3031] usb 7-1: Using ep0 maxpacket: 8 [ 980.183465][ T3031] usb 7-1: unable to get BOS descriptor or descriptor too short [ 980.203420][ T3031] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 980.219236][ T3031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.235074][ T3031] usb 7-1: Product: syz [ 980.246000][ T3031] usb 7-1: Manufacturer: syz [ 980.250034][ T1226] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 980.255126][ T3031] usb 7-1: SerialNumber: syz [ 980.488323][ T1226] usb 4-1: Using ep0 maxpacket: 32 [ 980.494850][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.515795][ T1226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 980.523403][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.533440][ T1226] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.554535][T17430] FAULT_INJECTION: forcing a failure. [ 980.554535][T17430] name failslab, interval 1, probability 0, space 0, times 0 [ 980.569488][ T1226] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 980.590779][ T1226] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 980.600075][T17430] CPU: 1 PID: 17430 Comm: syz.6.5590 Tainted: G W syzkaller #0 [ 980.609039][T17430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.619117][T17430] Call Trace: [ 980.622416][T17430] [ 980.625371][T17430] __dump_stack+0x21/0x24 [ 980.629735][T17430] dump_stack_lvl+0x110/0x170 [ 980.634528][T17430] ? __cfi_dump_stack_lvl+0x8/0x8 [ 980.639581][T17430] ? widen_string+0x41/0x2d0 [ 980.644189][T17430] dump_stack+0x15/0x24 [ 980.648378][T17430] should_fail_ex+0x3bf/0x510 [ 980.653079][T17430] ? skb_clone+0x1e8/0x380 [ 980.657612][T17430] __should_failslab+0xac/0xf0 [ 980.662402][T17430] should_failslab+0x9/0x20 [ 980.666928][T17430] kmem_cache_alloc+0x3b/0x320 [ 980.671727][T17430] ? sprintf+0xe4/0x140 [ 980.675916][T17430] skb_clone+0x1e8/0x380 [ 980.680184][T17430] netlink_broadcast+0x698/0x11c0 [ 980.685231][T17430] ? alloc_uevent_skb+0xf7/0x240 [ 980.690192][T17430] kobject_uevent_net_broadcast+0x3cb/0x5b0 [ 980.696117][T17430] kobject_uevent_env+0x541/0x720 [ 980.701259][T17430] kobject_uevent+0x1d/0x30 [ 980.705788][T17430] driver_register+0x3ef/0x440 [ 980.710589][T17430] usb_gadget_register_driver_owner+0xf8/0x270 [ 980.716764][T17430] raw_ioctl+0x112c/0x3180 [ 980.721304][T17430] ? ioctl_has_perm+0x3a6/0x4f0 [ 980.726184][T17430] ? __cfi_raw_ioctl+0x10/0x10 [ 980.730982][T17430] ? has_cap_mac_admin+0x370/0x370 [ 980.736126][T17430] ? ____kasan_slab_free+0x13d/0x180 [ 980.741445][T17430] ? __kasan_slab_free+0x11/0x20 [ 980.746453][T17430] ? selinux_file_ioctl+0x3ad/0x4c0 [ 980.751677][T17430] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 980.757262][T17430] ? __fget_files+0x2d1/0x330 [ 980.761970][T17430] ? security_file_ioctl+0x95/0xc0 [ 980.767123][T17430] ? __cfi_raw_ioctl+0x10/0x10 [ 980.771913][T17430] __se_sys_ioctl+0x12f/0x1b0 [ 980.776622][T17430] __x64_sys_ioctl+0x7b/0x90 [ 980.781240][T17430] x64_sys_call+0x58b/0x9a0 [ 980.785773][T17430] do_syscall_64+0x4c/0xa0 [ 980.790208][T17430] ? clear_bhb_loop+0x30/0x80 [ 980.794916][T17430] ? clear_bhb_loop+0x30/0x80 [ 980.799622][T17430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.805540][T17430] RIP: 0033:0x7f899559ddeb [ 980.809982][T17430] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 980.829619][T17430] RSP: 002b:00007f89963ebf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.838060][T17430] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f899559ddeb [ 980.846055][T17430] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 980.854047][T17430] RBP: 00007f89963ecfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 980.862045][T17430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.870228][T17430] R13: 0000200000000000 R14: 0000000000000000 R15: 00000000000010d0 [ 980.878234][T17430] [ 980.884770][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.894187][ T1226] usb 4-1: Product: syz [ 980.898392][ T1226] usb 4-1: Manufacturer: syz [ 980.903255][ T1226] usb 4-1: SerialNumber: syz [ 980.909252][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.919023][ T1226] usb 4-1: selecting invalid altsetting 1 [ 980.927235][ T1226] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 980.934600][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.954840][ T3031] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 980.975792][ T3031] usb 7-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 981.003852][ T3031] usb 7-1: failed to enable PITCH for EP 0x1 [ 981.019341][ T3031] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 981.038857][ T3031] usb 7-1: USB disconnect, device number 32 [ 981.137441][ T8690] usb 4-1: USB disconnect, device number 31 [ 981.637397][ T1226] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 981.774755][T17473] overlayfs: failed to clone upperpath [ 981.799174][ T1226] usb 1-1: device descriptor read/64, error -71 [ 982.113134][ T1226] usb 1-1: device descriptor read/64, error -71 [ 982.427234][ T1226] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 982.600615][ T1226] usb 1-1: device descriptor read/64, error -71 [ 982.903940][ T1226] usb 1-1: device descriptor read/64, error -71 [ 983.045880][ T1226] usb usb1-port1: attempt power cycle [ 983.542931][ T1226] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 983.576600][ T1226] usb 1-1: device descriptor read/8, error -71 [ 983.769822][ T1226] usb 1-1: device descriptor read/8, error -71 [ 984.095447][ T1226] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 984.149436][ T1226] usb 1-1: device descriptor read/8, error -71 [ 984.336851][ T1226] usb 1-1: device descriptor read/8, error -71 [ 984.485428][ T1226] usb usb1-port1: unable to enumerate USB device [ 984.680285][ T37] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 984.877396][ T37] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.943812][ T37] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 985.055048][ T37] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 985.078709][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.098568][ T37] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 985.218960][T17564] xt_hashlimit: size too large, truncated to 1048576 [ 987.563562][ T8690] usb 7-1: USB disconnect, device number 33 [ 987.632854][ T28] audit: type=1400 audit(1789188098.502:871): avc: denied { read } for pid=11367 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 987.693505][ T28] audit: type=1400 audit(1789188098.502:872): avc: denied { open } for pid=11367 comm="syz-executor" path="/320/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 987.745903][ T28] audit: type=1400 audit(1789188098.502:873): avc: denied { write } for pid=11367 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 987.806797][ T28] audit: type=1400 audit(1789188098.502:874): avc: denied { setattr } for pid=11367 comm="syz-executor" path="/320/trace/instances" dev="tracefs" ino=13672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 987.833250][ T37] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 988.059891][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 988.068213][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 988.321254][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.342148][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.365205][ T37] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 988.383349][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.400393][ T37] usb 1-1: Product: syz [ 988.415614][ T37] usb 1-1: Manufacturer: syz [ 988.480208][ T37] usb 1-1: SerialNumber: syz [ 988.500397][ T37] usb 1-1: selecting invalid altsetting 1 [ 988.521763][ T37] usb 1-1: unit 0 not found! [ 988.528355][ T37] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 988.606241][T17644] overlayfs: failed to clone upperpath [ 988.745989][ T37] usb 1-1: USB disconnect, device number 37 [ 988.847970][T17642] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.862444][T17642] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.883370][T17642] device bridge_slave_0 entered promiscuous mode [ 988.890664][T17642] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.915579][T17642] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.923194][T17642] device bridge_slave_1 entered promiscuous mode [ 988.937995][T10389] device bridge_slave_1 left promiscuous mode [ 988.944183][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.980709][T10389] device bridge_slave_0 left promiscuous mode [ 988.986906][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.003367][T10389] device veth1_macvtap left promiscuous mode [ 989.010157][T10389] device veth0_vlan left promiscuous mode [ 989.251440][ T37] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 989.396738][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 989.410477][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 989.442567][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 989.451901][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 989.460883][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.468030][T10388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.476062][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 989.485333][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 989.493971][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.501052][T10388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.511732][ T37] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.528357][ T37] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.541734][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 989.541773][ T37] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 989.550294][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 989.559862][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.582452][ T37] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 989.595450][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 989.614445][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 989.643928][T17642] device veth0_vlan entered promiscuous mode [ 989.650793][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.663265][ T3031] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 989.672067][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.701209][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.725912][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.745617][T17642] device veth1_macvtap entered promiscuous mode [ 989.769039][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.789951][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 989.890517][ T3031] usb 1-1: Using ep0 maxpacket: 32 [ 989.900448][ T3031] usb 1-1: unable to get BOS descriptor or descriptor too short [ 989.918669][ T3031] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 989.957495][ T3031] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 989.988626][ T3031] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 990.021445][ T3031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.029747][ T3031] usb 1-1: Product: syz [ 990.042257][ T3031] usb 1-1: Manufacturer: syz [ 990.053041][ T3031] usb 1-1: SerialNumber: syz [ 990.065863][ T3031] usb 1-1: selecting invalid altsetting 1 [ 990.085001][ T3031] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 990.285129][ T3031] usb 1-1: USB disconnect, device number 38 [ 990.399180][T10389] Bluetooth: hci0: Frame reassembly failed (-84) [ 992.224666][ T1226] usb 7-1: USB disconnect, device number 34 [ 992.576737][T11065] Bluetooth: hci0: command 0x1003 tx timeout [ 992.576796][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 992.590251][T17678] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 992.945019][ T2372] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 993.139963][ T2372] usb 2-1: Using ep0 maxpacket: 32 [ 993.146787][ T2372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 993.166494][ T2372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.203390][ T2372] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.219414][ T2372] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 993.238467][ T2372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.475854][ T1226] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 993.544170][ T2372] usb 2-1: Product: syz [ 993.548457][ T2372] usb 2-1: Manufacturer: syz [ 993.553127][ T2372] usb 2-1: SerialNumber: syz [ 993.574633][ T2372] usb 2-1: selecting invalid altsetting 1 [ 993.736879][ T1226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.753023][ T1226] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 993.782799][ T1226] usb 1-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 993.792786][ T3031] usb 2-1: USB disconnect, device number 3 [ 993.797515][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.819016][ T1226] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 996.281015][T11610] Bluetooth: hci0: Frame reassembly failed (-84) [ 996.386376][ T37] usb 1-1: USB disconnect, device number 39 [ 996.507200][T17796] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.515264][T17796] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.526654][T17796] device bridge_slave_0 entered promiscuous mode [ 996.540362][T17796] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.547641][T17796] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.556351][T17796] device bridge_slave_1 entered promiscuous mode [ 996.663874][T10389] device bridge_slave_1 left promiscuous mode [ 996.670071][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.693253][T10389] device bridge_slave_0 left promiscuous mode [ 996.699433][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.715599][T10389] device veth1_macvtap left promiscuous mode [ 996.736188][T10389] device veth0_vlan left promiscuous mode [ 996.898746][ T37] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 996.931963][T17796] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.939478][T17796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.946812][T17796] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.953878][T17796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.013202][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.029675][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.039788][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.062591][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.074436][T11610] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.081517][T11610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.104924][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 997.108293][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 997.121669][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 997.135847][T11610] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.137864][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.143087][T11610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.223624][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 997.229082][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 997.242536][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 997.250552][ T37] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 997.260176][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 997.268086][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.276103][ T37] usb 1-1: Product: syz [ 997.280656][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 997.295891][T17809] overlayfs: failed to clone upperpath [ 997.308395][T17796] device veth0_vlan entered promiscuous mode [ 997.314519][ T37] usb 1-1: Manufacturer: syz [ 997.319142][ T37] usb 1-1: SerialNumber: syz [ 997.324604][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 997.334163][ T37] usb 1-1: selecting invalid altsetting 1 [ 997.341132][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 997.352597][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 997.360677][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 997.368946][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 997.376484][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 997.392411][T17796] device veth1_macvtap entered promiscuous mode [ 997.405026][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 997.414521][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 997.423005][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 997.438218][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 997.447538][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 997.516815][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 997.534513][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 997.555192][ T3031] usb 1-1: USB disconnect, device number 40 [ 998.480291][T11066] Bluetooth: hci0: command 0x1003 tx timeout [ 998.486372][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 998.494194][T17786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 998.849675][T17850] overlayfs: failed to clone upperpath [ 999.111507][T10388] Bluetooth: hci0: Frame reassembly failed (-84) [ 999.314182][ T8690] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 999.465910][ T37] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 999.601157][ T1226] ================================================================== [ 999.609545][ T1226] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 999.616629][ T1226] Write of size 8 at addr ffff888151d64a00 by task kworker/1:7/1226 [ 999.624625][ T1226] [ 999.627010][ T1226] CPU: 1 PID: 1226 Comm: kworker/1:7 Tainted: G W syzkaller #0 [ 999.635969][ T1226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 999.646049][ T1226] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 999.653375][ T1226] Call Trace: [ 999.656675][ T1226] [ 999.659621][ T1226] __dump_stack+0x21/0x24 [ 999.663981][ T1226] dump_stack_lvl+0x110/0x170 [ 999.668689][ T1226] ? __cfi_dump_stack_lvl+0x8/0x8 [ 999.673744][ T1226] ? __schedule+0xcbb/0x1700 [ 999.678460][ T1226] ? enqueue_timer+0xae/0x480 [ 999.683165][ T1226] print_address_description+0x71/0x200 [ 999.688741][ T1226] print_report+0x4a/0x60 [ 999.693100][ T1226] kasan_report+0x122/0x150 [ 999.697633][ T1226] ? enqueue_timer+0xae/0x480 [ 999.702339][ T1226] __asan_report_store8_noabort+0x17/0x20 [ 999.708092][ T1226] enqueue_timer+0xae/0x480 [ 999.712624][ T1226] ? detach_if_pending+0xf5/0x300 [ 999.717678][ T1226] __mod_timer+0x859/0xc00 [ 999.722120][ T1226] ? wg_noise_handshake_begin_session+0x311/0x770 [ 999.725747][ T8690] usb 6-1: Using ep0 maxpacket: 32 [ 999.728559][ T1226] mod_timer+0x1f/0x30 [ 999.737775][ T1226] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0 [ 999.745175][ T1226] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0 [ 999.752492][ T1226] wg_packet_send_handshake_response+0x14e/0x230 [ 999.758869][ T1226] ? __cfi_wg_packet_send_handshake_response+0x10/0x10 [ 999.765761][ T1226] wg_packet_handshake_receive_worker+0x517/0xa40 [ 999.772214][ T1226] process_one_work+0x717/0xc30 [ 999.777094][ T1226] worker_thread+0xa4d/0x11d0 [ 999.781801][ T1226] kthread+0x281/0x320 [ 999.785890][ T1226] ? __cfi_worker_thread+0x10/0x10 [ 999.791021][ T1226] ? __cfi_kthread+0x10/0x10 [ 999.795633][ T1226] ret_from_fork+0x1f/0x30 [ 999.800080][ T1226] [ 999.803112][ T1226] [ 999.805445][ T1226] Allocated by task 17786: [ 999.809869][ T1226] kasan_set_track+0x4b/0x70 [ 999.814499][ T1226] kasan_save_alloc_info+0x1f/0x30 [ 999.819633][ T1226] __kasan_kmalloc+0x95/0xb0 [ 999.824335][ T1226] __kmalloc+0xb4/0x1e0 [ 999.825633][ T8690] usb 6-1: unable to get BOS descriptor or descriptor too short [ 999.828503][ T1226] hci_alloc_dev_priv+0x27/0x1bd0 [ 999.841254][ T1226] hci_uart_tty_ioctl+0x3c4/0xa70 [ 999.842958][ T8690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.846414][ T1226] tty_ioctl+0x8ef/0xc60 [ 999.860770][ T1226] __se_sys_ioctl+0x12f/0x1b0 [ 999.865501][ T1226] __x64_sys_ioctl+0x7b/0x90 [ 999.870131][ T1226] x64_sys_call+0x58b/0x9a0 [ 999.870617][ T8690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 999.874660][ T1226] do_syscall_64+0x4c/0xa0 [ 999.874692][ T1226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.893898][ T1226] [ 999.896243][ T1226] Freed by task 17786: [ 999.899239][ T8690] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 999.900317][ T1226] kasan_set_track+0x4b/0x70 [ 999.909387][ T8690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.913922][ T1226] kasan_save_free_info+0x2b/0x40 [ 999.913943][ T1226] ____kasan_slab_free+0x132/0x180 [ 999.913965][ T1226] __kasan_slab_free+0x11/0x20 [ 999.935083][ T8690] usb 6-1: Product: syz [ 999.936812][ T1226] slab_free_freelist_hook+0xc2/0x190 [ 999.942167][ T8690] usb 6-1: Manufacturer: syz [ 999.946332][ T1226] __kmem_cache_free+0xb7/0x1b0 [ 999.946360][ T1226] kfree+0x6f/0xf0 [ 999.946377][ T1226] hci_release_dev+0x12a3/0x13b0 [ 999.955805][ T8690] usb 6-1: SerialNumber: syz [ 999.959513][ T1226] bt_host_release+0x82/0x90 [ 999.973633][ T1226] device_release+0xa4/0x1d0 [ 999.978306][ T1226] kobject_put+0x19d/0x280 [ 999.982744][ T1226] put_device+0x1f/0x30 [ 999.986919][ T1226] hci_dev_cmd+0x279/0x740 [ 999.991357][ T1226] hci_sock_ioctl+0x41e/0x7f0 [ 999.996054][ T1226] sock_do_ioctl+0x114/0x330 [ 1000.000665][ T1226] sock_ioctl+0x475/0x700 [ 1000.005013][ T1226] __se_sys_ioctl+0x12f/0x1b0 [ 1000.009710][ T1226] __x64_sys_ioctl+0x7b/0x90 [ 1000.014321][ T1226] x64_sys_call+0x58b/0x9a0 [ 1000.018851][ T1226] do_syscall_64+0x4c/0xa0 [ 1000.023296][ T1226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.029213][ T1226] [ 1000.030267][ T8690] usb 6-1: selecting invalid altsetting 1 [ 1000.031550][ T1226] Last potentially related work creation: [ 1000.031560][ T1226] kasan_save_stack+0x3a/0x60 [ 1000.047669][ T1226] __kasan_record_aux_stack+0xb6/0xc0 [ 1000.053063][ T1226] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1000.058892][ T1226] insert_work+0x51/0x300 [ 1000.063250][ T1226] __queue_work+0x9d0/0xd50 [ 1000.067778][ T1226] queue_work_on+0xde/0x150 [ 1000.072300][ T1226] __hci_cmd_sync_sk+0xaa8/0xd80 [ 1000.077348][ T1226] hci_cmd_sync_status+0x53/0x120 [ 1000.082498][ T1226] hci_dev_cmd+0x357/0x740 [ 1000.086962][ T1226] hci_sock_ioctl+0x41e/0x7f0 [ 1000.091663][ T1226] sock_do_ioctl+0x114/0x330 [ 1000.096279][ T1226] sock_ioctl+0x475/0x700 [ 1000.100646][ T1226] __se_sys_ioctl+0x12f/0x1b0 [ 1000.105353][ T1226] __x64_sys_ioctl+0x7b/0x90 [ 1000.109988][ T1226] x64_sys_call+0x58b/0x9a0 [ 1000.114533][ T1226] do_syscall_64+0x4c/0xa0 [ 1000.119067][ T1226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.124996][ T1226] [ 1000.127336][ T1226] Second to last potentially related work creation: [ 1000.133940][ T1226] kasan_save_stack+0x3a/0x60 [ 1000.138651][ T1226] __kasan_record_aux_stack+0xb6/0xc0 [ 1000.144154][ T1226] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1000.149990][ T1226] insert_work+0x51/0x300 [ 1000.154427][ T1226] __queue_work+0x9d0/0xd50 [ 1000.158956][ T1226] queue_work_on+0xde/0x150 [ 1000.163483][ T1226] hci_cmd_timeout+0x191/0x200 [ 1000.168265][ T1226] process_one_work+0x717/0xc30 [ 1000.173137][ T1226] worker_thread+0xa4d/0x11d0 [ 1000.177836][ T1226] kthread+0x281/0x320 [ 1000.181931][ T1226] ret_from_fork+0x1f/0x30 [ 1000.186367][ T1226] [ 1000.188715][ T1226] The buggy address belongs to the object at ffff888151d64000 [ 1000.188715][ T1226] which belongs to the cache kmalloc-8k of size 8192 [ 1000.202783][ T1226] The buggy address is located 2560 bytes inside of [ 1000.202783][ T1226] 8192-byte region [ffff888151d64000, ffff888151d66000) [ 1000.216255][ T1226] [ 1000.218598][ T1226] The buggy address belongs to the physical page: [ 1000.225100][ T1226] page:ffffea0005475800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888151d60000 pfn:0x151d60 [ 1000.236676][ T1226] head:ffffea0005475800 order:3 compound_mapcount:0 compound_pincount:0 [ 1000.245031][ T1226] flags: 0x4000000000010200(slab|head|zone=1) [ 1000.247801][ T8690] usb 6-1: 6:0: failed to get current value for ch 0 (-71) [ 1000.251126][ T1226] raw: 4000000000010200 ffffea0004622800 dead000000000005 ffff888100043500 [ 1000.251148][ T1226] raw: ffff888151d60000 0000000080020001 00000001ffffffff 0000000000000000 [ 1000.265930][ T8690] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1000.266903][ T1226] page dumped because: kasan: bad access detected [ 1000.266916][ T1226] page_owner tracks the page as allocated [ 1000.266923][ T1226] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 16137, tgid 16136 (syz.6.5243), ts 931606874746, free_ts 756047556805 [ 1000.278425][ T28] audit: type=1400 audit(1789188110.181:875): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1000.282447][ T1226] post_alloc_hook+0x1f5/0x210 [ 1000.288875][ T28] audit: type=1400 audit(1789188110.181:876): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.294576][ T1226] prep_new_page+0x1c/0x110 [ 1000.294600][ T1226] get_page_from_freelist+0x2ca9/0x2d20 [ 1000.294624][ T1226] __alloc_pages+0x1fa/0x610 [ 1000.332400][ T8690] usb 6-1: USB disconnect, device number 4 [ 1000.339203][ T1226] alloc_slab_page+0x6e/0xf0 [ 1000.339233][ T1226] new_slab+0x98/0x3e0 [ 1000.380146][ T28] audit: type=1400 audit(1789188110.181:877): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.385680][ T1226] ___slab_alloc+0x70f/0xb70 [ 1000.400811][ T28] audit: type=1400 audit(1789188110.181:878): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.415584][ T1226] __slab_alloc+0x5e/0xa0 [ 1000.415617][ T1226] __kmem_cache_alloc_node+0x204/0x2d0 [ 1000.441119][ T28] audit: type=1400 audit(1789188110.181:879): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1000.444997][ T1226] __kmalloc_node+0xa2/0x1e0 [ 1000.454005][ T28] audit: type=1400 audit(1789188110.181:880): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1000.470845][ T1226] kvmalloc_node+0x28a/0x460 [ 1000.470872][ T1226] pfifo_fast_init+0x3a9/0x7a0 [ 1000.497922][ T28] audit: type=1400 audit(1789188110.190:881): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1000.498289][ T1226] qdisc_create_dflt+0x150/0x3a0 [ 1000.535041][ T1226] mq_init+0x2c3/0x660 [ 1000.539147][ T1226] qdisc_create_dflt+0x150/0x3a0 [ 1000.544109][ T1226] dev_activate+0x152/0x1110 [ 1000.548724][ T1226] page last free stack trace: [ 1000.553410][ T1226] free_unref_page_prepare+0x81b/0x820 [ 1000.558902][ T1226] free_unref_page+0x93/0x530 [ 1000.563615][ T1226] __free_pages+0x67/0x100 [ 1000.568059][ T1226] __vunmap+0xa3c/0xc00 [ 1000.572234][ T1226] vfree+0x61/0x90 [ 1000.575981][ T1226] bpf_check+0xd729/0x10e90 [ 1000.580511][ T1226] bpf_prog_load+0x10f4/0x1670 [ 1000.585301][ T1226] __sys_bpf+0x57b/0x850 [ 1000.589568][ T1226] __x64_sys_bpf+0x7c/0x90 [ 1000.594006][ T1226] x64_sys_call+0x488/0x9a0 [ 1000.598537][ T1226] do_syscall_64+0x4c/0xa0 [ 1000.602985][ T1226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.608898][ T1226] [ 1000.611242][ T1226] Memory state around the buggy address: [ 1000.616890][ T1226] ffff888151d64900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1000.624979][ T1226] ffff888151d64980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1000.633068][ T1226] >ffff888151d64a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1000.641144][ T1226] ^ [ 1000.645231][ T1226] ffff888151d64a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1000.653313][ T1226] ffff888151d64b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1000.661391][ T1226] ================================================================== [ 1000.669468][ T1226] Disabling lock debugging due to kernel taint [ 1000.722286][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1000.734096][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1000.742566][ C1] CPU: 1 PID: 102 Comm: udevd Tainted: G B W syzkaller #0 [ 1000.750930][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.761010][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 1000.766327][ C1] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 1d bc b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 b8 b7 b9 03 [ 1000.785956][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 1000.792042][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811000e540 [ 1000.800038][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1000.808028][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 1000.816024][ C1] R10: dffffc0000000000 R11: ffffed102a3ac939 R12: ffff888151d649c8 [ 1000.824022][ C1] R13: ffff88813d781800 R14: 0000000000000000 R15: 000000007fffffff [ 1000.832135][ C1] FS: 00007fc643d63880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1000.841063][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1000.847645][ C1] CR2: 000055557fa55948 CR3: 0000000110c82000 CR4: 00000000003526a0 [ 1000.855615][ C1] Call Trace: [ 1000.858891][ C1] [ 1000.861753][ C1] delayed_work_timer_fn+0x61/0x80 [ 1000.866878][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1000.872684][ C1] call_timer_fn+0x46/0x2a0 [ 1000.877190][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 1000.882996][ C1] __run_timers+0x672/0x9b0 [ 1000.887540][ C1] ? calc_index+0x200/0x200 [ 1000.892042][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1000.897245][ C1] run_timer_softirq+0x6a/0xf0 [ 1000.902007][ C1] handle_softirqs+0x1d7/0x600 [ 1000.906769][ C1] __irq_exit_rcu+0x52/0xf0 [ 1000.911267][ C1] irq_exit_rcu+0x9/0x10 [ 1000.915679][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1000.921309][ C1] [ 1000.924244][ C1] [ 1000.927174][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1000.933156][ C1] RIP: 0010:unwind_get_return_address+0x56/0x90 [ 1000.939399][ C1] Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 bb 5d 81 00 48 8b 3b e8 73 25 14 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 a0 5d 81 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f [ 1000.959003][ C1] RSP: 0018:ffffc900009f78a0 EFLAGS: 00000246 [ 1000.965067][ C1] RAX: 0000000000000001 RBX: ffffc900009f7910 RCX: 000000000013ef00 [ 1000.973120][ C1] RDX: ffffc900009f7901 RSI: 1ffff9200013ef1a RDI: ffffffff81b6c8bb [ 1000.981088][ C1] RBP: ffffc900009f78b8 R08: ffffc900009f7990 R09: ffffc900009f7988 [ 1000.989058][ C1] R10: 0000000000000000 R11: fffff5200013ef25 R12: ffff88811000e540 [ 1000.997032][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff9200013ef22 [ 1001.005008][ C1] ? kasan_set_track+0x4b/0x70 [ 1001.009776][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1001.015930][ C1] arch_stack_walk+0xfc/0x150 [ 1001.020619][ C1] ? kasan_set_track+0x4b/0x70 [ 1001.025383][ C1] stack_trace_save+0xa6/0xf0 [ 1001.030056][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 1001.035515][ C1] ? step_into+0x416/0xf00 [ 1001.039936][ C1] ? memset+0x35/0x40 [ 1001.043914][ C1] kasan_set_track+0x4b/0x70 [ 1001.048514][ C1] kasan_save_alloc_info+0x1f/0x30 [ 1001.053622][ C1] __kasan_slab_alloc+0x72/0x80 [ 1001.058472][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 1001.063583][ C1] ? slab_pre_alloc_hook+0x30/0x1d0 [ 1001.068786][ C1] kmem_cache_alloc_lru+0x104/0x280 [ 1001.073993][ C1] ? __d_alloc+0x34/0x6d0 [ 1001.078324][ C1] __d_alloc+0x34/0x6d0 [ 1001.082485][ C1] d_alloc+0x48/0x260 [ 1001.086467][ C1] ? lookup_one_qstr_excl+0xb6/0x270 [ 1001.091747][ C1] lookup_one_qstr_excl+0xcb/0x270 [ 1001.096861][ C1] do_unlinkat+0x194/0x6c0 [ 1001.101280][ C1] ? __cfi_do_unlinkat+0x10/0x10 [ 1001.106220][ C1] ? getname_flags+0x205/0x510 [ 1001.110985][ C1] __x64_sys_unlink+0x49/0x50 [ 1001.115664][ C1] x64_sys_call+0x958/0x9a0 [ 1001.120179][ C1] do_syscall_64+0x4c/0xa0 [ 1001.124616][ C1] ? clear_bhb_loop+0x30/0x80 [ 1001.129325][ C1] ? clear_bhb_loop+0x30/0x80 [ 1001.134008][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.139902][ C1] RIP: 0033:0x7fc643715937 [ 1001.144313][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1001.163918][ C1] RSP: 002b:00007ffcfa371518 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1001.172505][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007fc643715937 [ 1001.180473][ C1] RDX: 0000000000000000 RSI: 000000003740e5c0 RDI: 000055621dea202e [ 1001.188460][ C1] RBP: 0000000000000000 R08: 00000000374be22c R09: 002a1da1815373dd [ 1001.196431][ C1] R10: 0000020307ab299c R11: 0000000000000202 R12: 0000000000000000 [ 1001.204397][ C1] R13: 000055621debd100 R14: 0000000000000001 R15: 0000000000000000 [ 1001.212368][ C1] [ 1001.215384][ C1] Modules linked in: [ 1001.219274][ C1] ---[ end trace 0000000000000000 ]--- [ 1001.224724][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 1001.230016][ C1] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 1d bc b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 b8 b7 b9 03 [ 1001.249707][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 1001.255772][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811000e540 [ 1001.263752][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 1001.271723][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 1001.279697][ C1] R10: dffffc0000000000 R11: ffffed102a3ac939 R12: ffff888151d649c8 [ 1001.287670][ C1] R13: ffff88813d781800 R14: 0000000000000000 R15: 000000007fffffff [ 1001.295641][ C1] FS: 00007fc643d63880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1001.304575][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1001.311157][ C1] CR2: 000055557fa55948 CR3: 0000000110c82000 CR4: 00000000003526a0 [ 1001.319133][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1001.326667][ C1] Kernel Offset: disabled [ 1001.331003][ C1] Rebooting in 86400 seconds..