Extracting prog: 9m32.629745925s
Minimizing prog: 19m42.46398628s
Simplifying prog options: 0s
Extracting C: 24.706313931s
Simplifying C: 3m52.572708014s


extracting reproducer from 28 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-openat$ptmx-ioctl$TCSETAF-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setaffinity-faccessat-madvise-socket$inet6-sendto$inet6-ptrace$ARCH_SHSTK_UNLOCK-socket-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000440)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-fsconfig$FSCONFIG_CMD_CREATE-fsmount-bpf$BPF_LINK_CREATE-socketpair$unix-syz_init_net_socket$802154_dgram-epoll_create-bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH-epoll_create1-epoll_create-epoll_ctl$EPOLL_CTL_ADD-mount-getegid-getsockopt$sock_cred-getgroups-setresgid-epoll_ctl$EPOLL_CTL_ADD-socketpair$unix-epoll_ctl$EPOLL_CTL_ADD-setsockopt$WPAN_SECURITY-timer_create-fcntl$lock-mprotect-timer_settime-mmap-userfaultfd-ioctl$UFFDIO_API-readv-sendmsg$TIPC_NL_BEARER_ENABLE-syz_open_dev$tty1
detailed listing:
executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0xc)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, r1, 0x16, 0x0, @void}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = epoll_create(0x7)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f0000000100)="108e7a61eb7cbe25f8cc98411e8bcef30be64efc1b200bfc585809c3587ea20c1559404a708d98761196714b55bb0528c60d868e507611683d72873560754dd6e24d207ccfbb49a72357086908d0c09a766237e76692ad0e51917ea95d6a99e669a240d6aa4456a9e640bbe2c752cc1677db81bb4cbfcb3ddb126eeaadd0653900922e6ca80d66", &(0x7f00000001c0)=""/96, &(0x7f0000000240)="96a3d7fe8dba035c3044afebe572c5fb2b1e0c443651ac0347c29169ff4a", &(0x7f0000000280)="d36a32f987837703e06eae750801cc36b3f67e54a027f6e14c9d4b8a7d9fd20a2b31cc7e6a94f7316ee401172be2f9fb5357d4be5635960499896cf70293b531b2816993b1378081b48d0ada8e88ededacc630507f962235b1aab7a9141b449cc846bea6e0056831b4efddaafc9532326292649caf859b42bee517fad99fdfa8", 0xd, r1}, 0x38)
r4 = epoll_create1(0x0)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x6})
mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='xfs\x00', 0xc8, 0x0)
r6 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r7=>0x0}, &(0x7f00000008c0)=0xfffffffffffffe00)
getgroups(0x7, &(0x7f0000000600)=[0x0, 0xee00, 0xee00, 0x0, 0x0, 0xee00, <r8=>0xee00])
setresgid(r6, r7, r8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f00000000c0)={0x2010})
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000005f80), 0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000680)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r10, 0x1, &(0x7f0000000700)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r11 = userfaultfd(0x1)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x100})
readv(r11, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/114, 0x72}], 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x40004)
syz_open_dev$tty1(0xc, 0x4, 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$inet-openat$ptmx-ioctl$TCSETS-syz_open_pts-ioctl$TCSETSW2-write-ioctl$KDENABIO
detailed listing:
executing program 0:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="1891e2e56071cb9c0c435f9075da915bb49ba7256947ea258c420ce0aaafccbdea56b7a9ef95c340e51341803e4ef340dd6c0344f3f5ec21ec2b22a755dc3827f671d569c0c17465e57764acf35543d02ea71792029db7abd488f98c24159c417f5d9979c92193de6a65b02fa230e46eb231170792a76e264280e3000cb427b27c9ae981be86623414709b0d3f9475e3d0ff4a08a32ad05d1621344610e38426548f71ab31d5cf256ca47f34ea4f8720efb5a45a76e50e5d8d1489fcb38ab1f70e05ea8de6721d816ec631f7e18ec85f0799a23618529d503c24ad44de3bba4b678494b92e3622e77e66edc275553b2d75f5a0d7e3190345ba4571cecca83f7d064f84214fee25f1d21b3c3d3796d25fd02f28ae0155db4afc7ddffc3c73789ba65c75101a7e5fbb3a14a8d3fcb3742186d17101ec0753650d3dac2afa38d63a39a52f9b058b5ae5e7aca9fd026d9f53644b766a09"], 0x128}, 0x4004040)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x8840, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000005c0)={0x0, 0x5, 0x1, 0x3, 0x7, "ff00f70000e102005200002000"})
r1 = syz_open_pts(r0, 0x141601)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000600)={0x6, 0x7fffffff, 0x0, 0x3, 0x14, "802499266727e8f583430e2da1bf3a0ae404d1", 0x3, 0x7})
write(r1, &(0x7f0000000640)="d5", 0xfffffedf)
ioctl$KDENABIO(r1, 0x4b36)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ashmem-ioctl$ASHMEM_SET_SIZE-mmap-mmap-syz_mount_image$exfat-geteuid-mmap$IORING_OFF_SQ_RING-prlimit64-sched_setscheduler-getpid-sched_setaffinity-syz_open_dev$tty1-write$UHID_INPUT-sched_setscheduler-socket$nl_generic-mmap-socketpair$unix-syz_mount_image$ext4-syz_mount_image$fuse-mount$overlay-chdir-syz_mount_image$vfat-openat-connect$unix-sendmmsg$unix-recvmmsg-syz_mount_image$vfat-syz_genetlink_get_family_id$tipc2-socket$inet6_tcp-socket$nl_netfilter
detailed listing:
executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000)
mmap(&(0x7f0000080000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x89287000)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32877000)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus/file0\x00', 0x831010, &(0x7f0000000880)=ANY=[], 0xfd, 0x150a, &(0x7f00000015c0)="$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")
geteuid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x2200000, &(0x7f0000000940)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@acl}, {@acl}, {@debug}, {@delalloc}, {@nogrpid}, {@noblock_validity}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000009c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000f40)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000f80)='./bus\x00', &(0x7f0000000fc0), 0x8, &(0x7f0000001000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000001040)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000001080), &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000011c0)=ANY=[], 0x1, 0x291, &(0x7f0000001200)="$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")
openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101a42, 0x34)
connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000002c0), 0x4000087, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYRESOCT=r3, @ANYBLOB="6bd5a993ee18fe95829b1e2a311af412f9f741f1299a78a5a718dcf0219b66dbd561182d7ccf11abcda726a4f6e5ee6147cf878820c458ea67a20174f7c0b81ec3e0630da12d2ed83e7c2602d4972b314102d77a041bf848c8b8d8ac4629d6dc", @ANYRES64=0x0, @ANYRES64, @ANYRESHEX=r3, @ANYBLOB="add9edd5a7c734e34d1ccc322f579fbf23b36fe21280391863915fdfc31c57aa3726e065eb622be2b47a77897f6b8f9ab3de8647c283d296330ec5853ca7ec937fcbc77af988973fe34aa9fe10a8804cf5e226132f6ac56362d704e12097685b0fe8ec61e12bd07fc7ef96bf7be3d5dd21644241071dade8257f2f8645cf4489e8d46e", @ANYRES8=r1], 0x1, 0x313, &(0x7f00000004c0)="$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")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_JOIN_MESH-mkdirat-mkdirat-socket$netlink-dup-ioctl$TIOCL_SETVESABLANK-syz_open_dev$tty1-ioctl$TIOCL_BLANKSCREEN-socket$inet_icmp-syz_mount_image$ext4-openat-getdents64-bind$inet-mount$overlay-syz_mount_image$fuse-openat-read$FUSE-syz_usb_connect$printer
detailed listing:
executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x3200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c80)={0x280, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xe18, 0x0, 0x3, 0xc, 0xb, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x2}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x7}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x0, 0x2, 0x0, 0x7, 0x8902, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x81, 0x4, 0x7, 0x8, 0xff80, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x7, 0xfff, 0x2, 0x7f, 0x6, 0x0, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x3ba3, 0x2473, 0xfff, 0x9, 0x2, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x1, 0x5, 0x6, 0x0, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x5, 0x4, 0x43, 0xa, 0xffff, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x6}, {0x1, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0x1}, {}, {0x6, 0x5}, {0x1, 0x5}, {0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x6, 0xa7862797c5a00d34, 0x18, 0x12, 0x6, 0x6c, 0xb, 0xb, 0x36, 0x1, 0x1b, 0x30, 0xc, 0x24, 0x4, 0x16, 0x48, 0x69, 0x2, 0x36, 0x1b, 0x2, 0x6c, 0x60, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x8}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {}, {0x3, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbb, 0x8, 0x0, 0xb, 0x3, 0x6, 0x40, 0x2]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x5, 0x7}, {0x5, 0x5}, {0x4}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xafd, 0x8, 0x9, 0xcb7b, 0x2, 0x100, 0xfff9, 0x3]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x7fff, 0x7f, 0x40, 0x9, 0x627b, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77, 0x1, 0x5, 0xfff9, 0x5, 0x7a24, 0x8, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0xd51c5b9b9dee022b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x187)
socket$netlink(0x10, 0x3, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETVESABLANK(r1, 0x560e, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200))
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x22000011, &(0x7f0000000340)={[{@commit}, {@sb={'sb', 0x3d, 0x2}}, {@abort}]}, 0x86, 0x48e, &(0x7f0000000780)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x60840, 0x8)
read$FUSE(r5, 0x0, 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000008f003040540000102030109022400010101d00909040007020701030709050102ff0309a6"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

program did not crash
single: failed to extract reproducer
bisect: bisecting 28 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 30, 1, 11, 11, 26, 13, 21, 20, 30, 27, 4, 19, 30, 20, 21, 29, 23, 30, 7, 30, 30, 30, 30, 4, 22, 21]
detailed listing:
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='tracefs\x00', 0xc000, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000101010100000000000000000200ffed240002800c00028004000100010000001400018008000100e000000208000200e00000010c001980080002001b"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
executing program 3:
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth1_macvtap\x00'})
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000000000113aed86dd6745208e00383afffc010000000000000000000000004f00ff020000000000000000000000000001010190786000000067cadaf700002ffffc020000000000000000000000000001fe880000000000000000000000000001b300040004"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000140)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000180), 0x4e, 0x14322, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000002000000000020002000850000006c0000009500000000000800"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x808000, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x50, 0x0, 0x1, {0x7, 0x29, 0xffff4ff1, 0x508101, 0xc0f7, 0x2, 0x8, 0xa7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000014940)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000014980)=0xc)
r4 = syz_mount_image$exfat(&(0x7f00000149c0), &(0x7f0000014a00)='./file0\x00', 0x2000084c, &(0x7f0000014a40)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000014b00)="$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")
r5 = getuid()
r6 = getgid()
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000016000)={0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000016040)=0xc)
syz_mount_image$exfat(&(0x7f0000016080), &(0x7f00000160c0)='./file0\x00', 0x2000084c, &(0x7f0000016100)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r8, @ANYRES32=0x0, @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESOCT=r9, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0xc1, 0x14fd, &(0x7f0000004c40)="$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")
read$FUSE(r0, &(0x7f0000017700)={0x2020, 0x0, 0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000019740)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000019840)=0xe8)
r13 = getgid()
r14 = openat(0xffffffffffffff9c, &(0x7f0000019e00)='./file1\x00', 0x42, 0x98)
write$P9_RREADLINK(r14, &(0x7f0000019e40)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000019e80)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000044c0)=0xe8)
lstat(&(0x7f0000019fc0)='./file0\x00', &(0x7f000001a000)={0x0, 0x0, 0x0, 0x0, <r16=>0x0, <r17=>0x0})
stat(&(0x7f000001a080)='./file0\x00', &(0x7f000001a0c0)={0x0, 0x0, 0x0, 0x0, <r18=>0x0, <r19=>0x0})
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f000001a140), &(0x7f000001a180)=0xc)
mount$9p_virtio(&(0x7f000001a1c0), &(0x7f000001a200)='./file1\x00', &(0x7f000001a240), 0x200080, &(0x7f000001a280)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r15}}, {@access_uid={'access', 0x3d, r16}}, {@access_any}]}})
stat(&(0x7f000001a340)='./file0\x00', &(0x7f000001a380)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f000001a540)={&(0x7f000000a180)={0x50, 0x0, 0xdf66, {0x7, 0x2d, 0x1, 0xcd10, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x100, 0xa76}}, &(0x7f000000a200)={0x18, 0x0, 0x1, {0x7}}, &(0x7f000000a240)={0x18, 0x0, 0xd, {0x2800000000}}, &(0x7f000000a280)={0x18, 0x0, 0x3, {0x12ed}}, &(0x7f000000a2c0)={0x18, 0x0, 0x7, {0x7}}, &(0x7f000000a380)={0x28, 0xfffffffffffffffe, 0x6, {{0x5, 0x6, 0x2}}}, &(0x7f000000a3c0)={0x60, 0x0, 0x0, {{0xfffffffffffffff8, 0x2, 0x2, 0x88000, 0xd, 0x1, 0x7fff, 0x8}}}, &(0x7f000000a440)={0x18, 0x0, 0x1, {0x3}}, &(0x7f000000a480)={0x18, 0xfffffffffffffff5, 0x4, {'rootmode'}}, &(0x7f000000a4c0)={0x20, 0x0, 0x3ab8, {0x0, 0x1b}}, &(0x7f000000bc80)={0x78, 0x0, 0x3ff, {0x8, 0x7, 0x0, {0x2, 0xffffffffffffffff, 0x8, 0x8000000000000001, 0x1, 0x1, 0x5, 0x3, 0x8001, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x2}}}, &(0x7f0000014300)={0x90, 0xfffffffffffffff5, 0x401, {0x0, 0x3, 0xc2, 0x401, 0x0, 0x7, {0x5, 0x4, 0x7, 0xffffffffffffffff, 0x80, 0x7, 0x6, 0x5, 0x7fff, 0x6000, 0x6, 0x0, 0x0, 0x8, 0x2}}}, &(0x7f00000143c0)={0xb8, 0xffffffffffffffda, 0x4, [{0x2, 0x36, 0x1, 0x4, '*'}, {0x0, 0x6, 0x2, 0xebf, 'fd'}, {0x3, 0xcb, 0x1, 0x2, '\x00'}, {0x3, 0x7, 0xa, 0x1, '.-&!&%\x8e:)\xb6'}, {0x0, 0x7, 0x8, 0x6, 'group_id'}]}, &(0x7f0000019880)={0x468, 0x0, 0x81, [{{0x4, 0x3, 0x3, 0x400, 0x2, 0x22, {0x6, 0x8000000000000001, 0x1, 0x6, 0x713b1c78, 0x100000000, 0xfffffffb, 0xe2a, 0x9, 0x2000, 0x2, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x2}}, {0x1, 0x5, 0x8, 0x401, 'rootmode'}}, {{0x0, 0x3, 0x8, 0x101, 0x52, 0x6, {0x2, 0x6, 0x7f, 0x3a, 0x240000000000, 0x2, 0x5, 0x1c, 0x4, 0x6000, 0xfffffff8, 0x0, 0xffffffffffffffff, 0x401, 0x4}}, {0x6, 0x8, 0x8, 0x1, 'rootmode'}}, {{0x5, 0x0, 0x200, 0x401, 0x0, 0x1, {0x6, 0x6, 0x4, 0xfffffffffffffffb, 0xfc, 0x82c, 0x7, 0x8, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x9a80}}, {0x0, 0x8000, 0x0, 0x8}}, {{0x4, 0x2, 0x9, 0x6, 0x200006, 0x8, {0x3, 0x2, 0x6, 0x9, 0x2, 0x2, 0x6e37, 0x7f, 0xa3, 0x8000, 0x2, 0x0, r3, 0x3, 0x7ff}}, {0x1, 0x0, 0x5, 0x1, 'fuse\x00'}}, {{0x6, 0x2, 0x8000000000000001, 0xe, 0x7, 0x6c12, {0x6, 0x9, 0x7, 0x100000000, 0x1, 0x5, 0x2, 0x3, 0xffffff6a, 0xa000, 0x8, r5, r6, 0x0, 0x1}}, {0x5, 0x4, 0x2, 0x7fffffff, '}('}}, {{0x4, 0x0, 0x401, 0x6, 0x1, 0x6, {0x4, 0x6, 0x4, 0x3, 0x4, 0x1, 0x2, 0x8, 0xfc, 0xa000, 0x0, r8, r11, 0x7, 0x3ff}}, {0x0, 0x1, 0x8, 0x4, 'rootmode'}}, {{0x6, 0x0, 0x8, 0x5, 0x4, 0x2, {0x3, 0x9, 0x6, 0xffffffffffffff33, 0x70000000000000, 0x3, 0x4000005, 0x6, 0x10, 0x8000, 0x1, r12, r13, 0xe8a8}}, {0x5, 0x2, 0x1, 0x6, '('}}]}, &(0x7f0000019d00)={0xa0, 0x0, 0x2, {{0x2, 0x0, 0x3, 0x0, 0x8000, 0x6, {0x6, 0x76, 0x5, 0x800, 0x8000, 0x3, 0x200, 0x0, 0x7, 0x8000, 0x7, 0x0, 0xee00, 0xfffffffd, 0x2}}}}, &(0x7f0000019dc0)={0x20, 0x0, 0x3, {0xf1, 0x4, 0x1000}}, &(0x7f000001a400)={0x130, 0x0, 0x9, {0x8000000000000001, 0x3, 0x0, '\x00', {0x2000, 0x2, 0x1, 0x401, r15, r20, 0x2000, '\x00', 0x5, 0x8000, 0xdbc, 0x9, {0x66fb1507, 0x3c61}, {0x80000001, 0x40}, {0x8, 0x2}, {0x7fff, 0x4}, 0x9, 0x7ff, 0x97b, 0x4}}}})
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0)
r21 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000002100)='./file0\x00', &(0x7f0000002280), 0xb0004, &(0x7f0000004600)=ANY=[@ANYRESDEC=r9, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES32=r4, @ANYRES16=r19, @ANYRESOCT=r10, @ANYRES64=r17, @ANYRESDEC=r18])
read$FUSE(r21, &(0x7f0000002380)={0x2020, 0x0, <r22=>0x0}, 0xfffffe14)
write$FUSE_INIT(r21, &(0x7f00000043c0)={0x50, 0x0, r22, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50)
write$FUSE_INIT(r0, &(0x7f0000004440)={0x50, 0xffffffffffffffda, r22, {0x7, 0x2d, 0x5, 0x4400, 0xffff, 0x8000, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x9}}, 0x50)
executing program 3:
syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413b88400819151300000000190109022d000000000009040000026bb22b000904fffffd0000000009a39bb4cb890afd370864e4aca17d5b8803e1d95827ba66114ed1337323"], 0x0)
executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ptype\x00')
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/106, 0x6a}], 0x1, 0x45, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x240088c1}, 0x1)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000001600)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000003640)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000036c0)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f0000003700)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000319b16c25215896300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000005700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000057c0)={0x20, 0x0, 0x1ffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000005800)="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", 0x2000, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000078c0)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffff913f3eaf20000000000100000000000000040000000000000008000000000000000300000009000000040000000000000005000000000000000200000000000000060000000000000003000000000000002e010000000000000700000008000000fafffff700c0000004000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="060000000800000000000000ffffffffffdfffff010400000000000006000000080010089eaf82a713260000"], 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000007980)={0x2f, 0x6, 0x0, {0x1, 0x20000003, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f0000000240), 0x1, 0x773, &(0x7f0000000e80)="$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")
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x1afe})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x0, &(0x7f00000001c0)})
r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x4206, r3)
ptrace(0x4208, r3)
wait4(r3, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
socketpair(0x1e, 0x801, 0x1, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x7ff, 0x0, 0x7fffffffffffffff, 0x8, 0x8, 0x9, 0x81, 0xfffffffffffff8aa, 0xfffffffffffffff7, 0x14, 0x101, 0x4, 0x8, 0xfffffffffffffffc, 0x3], 0xc000, 0x100500})
ioctl$KVM_NMI(r2, 0xae9a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000000240)={0x14}, 0x14)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDSETMODE(r6, 0x560b, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x200007, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc4001}]})
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="09000000ad0000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000380), 0x0}, 0x20)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x7}, 0x4)
close(0x3)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x10000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)
pipe(&(0x7f00000001c0))
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYBLOB="d2d49e216be4a217729e660842531035edd0400b5f722780156f37c7e5f059d55ac5910cab21acff209463084778ed4a4dfd3fdd9724297b4df49e3be7a16e1daa915d9c036ece01f675100f42f592778c9425fc3f98b4dc3075490a8cd9e0685e1cf1e2572d7c45e7753be09298463726d45944bd345ed5daf83ccc9d3f", @ANYRESOCT=r2, @ANYRESDEC=0x0], 0x64}}, 0x4)
executing program 1:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x6000) (async)
setresgid(0x0, 0x0, 0xee00) (async, rerun: 32)
r1 = getpid() (rerun: 32)
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000140)={0x29, 0x3, 0x0, {0x3, 0x8, 0x0, 'fuseblk\x00'}}, 0x29) (async, rerun: 32)
socket$inet6(0xa, 0x2, 0x11) (async, rerun: 32)
syz_ublk_setup_io_uring(0x64df, &(0x7f00000001c0)={0x0, 0xd143, 0x200, 0x1, 0x26, 0x0, r5}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300))
executing program 1:
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x80803, 0x84)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003e00)={0x3, 0x4, &(0x7f0000003ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0xf}]}, &(0x7f0000003f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES32=r6, @ANYRES16=r5], 0x0)
ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000140))
r7 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRESDEC=r0], 0x1, 0x304, &(0x7f0000000680)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f00000009c0)={@desc={0x1, 0x0, @desc3}})
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000003f40)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x7, 0x80000, 0x1, 0x6, 0xd, 0x2}, {0x9, 0xb, 0x3, 0x5, 0x7fffffff, 0x9}], ['\x00', '\x00']})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000041c0)={r4, &(0x7f0000004080)="7ff2ab159d3f3bf0d419c28e720f7f491fb8f874059fa7e9b9689b01d8edb8ab9c952b48f2607487d5755581bcd8a369de0b9dee74fbe1ac759c001358f1da5a9e43a0f56f36bbccbd6fd9ad1dae7f63a0ff770dac104239c40e9b3b29a47ce58512977caa6a65f22cebd567531bfe176a0cb798e9fcd5ca6be34d3f9808a498ca058bd83a9e5c5505da170845672a90a51546323b0624fd24d6fb4b29700e32aa60f4e7df36597373f20eeb66602406e630f46ece579160696e07b5bc1d11ddf616452c46403b44b0305fb2962e798ec2cc1381a3f8bf9c740ee40565db7f5af3a5311dfe", &(0x7f0000004180)=""/10}, 0x20)
clock_gettime(0x0, &(0x7f0000003d80)={<r8=>0x0, <r9=>0x0})
recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/132, 0x84}], 0x3, &(0x7f0000000a00)=""/4096, 0x1000}, 0xfffffffc}, {{&(0x7f0000001a00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/152, 0x98}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000002c00)=""/243, 0xf3}, 0xb}, {{&(0x7f0000002d00)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f0000002d80)=""/143, 0x8f}], 0x1, &(0x7f0000002e80)=""/30, 0x1e}, 0x7ff}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002ec0)=""/241, 0xf1}, {&(0x7f0000002fc0)=""/37, 0x25}], 0x2, &(0x7f0000003040)=""/29, 0x1d}, 0x6}, {{&(0x7f0000003080)=@ieee802154, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003100)=""/159, 0x9f}], 0x1}, 0x40}, {{&(0x7f0000003200)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003280)=""/190, 0xbe}, {&(0x7f0000003340)=""/43, 0x2b}, {&(0x7f0000003380)=""/74, 0x4a}, {&(0x7f0000003400)=""/170, 0xaa}, {&(0x7f00000034c0)=""/27, 0x1b}, {&(0x7f0000003500)=""/55, 0x37}, {&(0x7f0000003540)=""/255, 0xff}, {&(0x7f0000003640)=""/105, 0x69}, {&(0x7f00000036c0)=""/255, 0xff}], 0x9}, 0x7}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003880)=""/219, 0xdb}, {&(0x7f0000003980)=""/210, 0xd2}], 0x2, &(0x7f0000003ac0)=""/217, 0xd9}, 0x800}], 0x7, 0x40000010, &(0x7f0000003dc0)={r8, r9+60000000})
executing program 3:
setpriority(0x0, 0x0, 0x2a14b58) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="3000000001000000312d00000900054000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x0, 0x802, 0x0, 0x0, 0x0, 0xf45, 0x3, 0x800000000000}, {0x0, 0x0, 0x100000001, 0x200000000002}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@rand_addr=0x64010100, 0x0, 0x33}, 0xa, @in=@loopback, 0x3fff, 0x0, 0x1, 0x4, 0x0, 0x0, 0x100}}, 0xe8) (async)
connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f0000000500), 0x0}, 0x20) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000440)=@filename='./dev/sda1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x0, 0x0) (async, rerun: 64)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x149000, 0x19a) (rerun: 64)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000580)=0x40000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async)
mkdir(&(0x7f0000000200)='./mysys\x00', 0x1ff)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) (async)
mount(0x0, &(0x7f00000003c0)='./mysys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) (async, rerun: 64)
ioprio_get$pid(0x1, 0x0) (rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0xfd, 0x2, 0x400000}})
executing program 3:
openat$dm_control(0xffffffffffffff9c, &(0x7f0000005800), 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = socket(0x10, 0x0, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5)
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x80}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000200), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffff, 0x0, @remote, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(0xffffffffffffffff, r1, 0x80000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f0000001440)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000014c0)=0x40)
syz_usb_connect(0x2, 0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001af4800000904e7000229feac00"], 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001500)=0x655e, 0x4)
r6 = dup2(r0, r0)
write$tun(r6, &(0x7f0000001540)=ANY=[], 0x46)
recvmmsg(r6, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0)
executing program 0:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000b00)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_winnt}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000c00)="$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")
r0 = creat(&(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x182)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x202000, 0x8a16d550d4cf54cc)
executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x3200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c80)={0x280, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xe18, 0x0, 0x3, 0xc, 0xb, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x2}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x7}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x0, 0x2, 0x0, 0x7, 0x8902, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x81, 0x4, 0x7, 0x8, 0xff80, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x7, 0xfff, 0x2, 0x7f, 0x6, 0x0, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x3ba3, 0x2473, 0xfff, 0x9, 0x2, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x1, 0x5, 0x6, 0x0, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x5, 0x4, 0x43, 0xa, 0xffff, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x6}, {0x1, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0x1}, {}, {0x6, 0x5}, {0x1, 0x5}, {0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x6, 0xa7862797c5a00d34, 0x18, 0x12, 0x6, 0x6c, 0xb, 0xb, 0x36, 0x1, 0x1b, 0x30, 0xc, 0x24, 0x4, 0x16, 0x48, 0x69, 0x2, 0x36, 0x1b, 0x2, 0x6c, 0x60, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x8}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {}, {0x3, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbb, 0x8, 0x0, 0xb, 0x3, 0x6, 0x40, 0x2]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x5, 0x7}, {0x5, 0x5}, {0x4}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xafd, 0x8, 0x9, 0xcb7b, 0x2, 0x100, 0xfff9, 0x3]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x7fff, 0x7f, 0x40, 0x9, 0x627b, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77, 0x1, 0x5, 0xfff9, 0x5, 0x7a24, 0x8, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0xd51c5b9b9dee022b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x187)
socket$netlink(0x10, 0x3, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETVESABLANK(r1, 0x560e, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200))
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x22000011, &(0x7f0000000340)={[{@commit}, {@sb={'sb', 0x3d, 0x2}}, {@abort}]}, 0x86, 0x48e, &(0x7f0000000780)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x60840, 0x8)
read$FUSE(r5, 0x0, 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000008f003040540000102030109022400010101d00909040007020701030709050102ff0309a6"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
executing program 4:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) (async, rerun: 64)
listen(0xffffffffffffffff, 0x6) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r5 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000400)=0xe9, 0x4) (async, rerun: 64)
sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="3b8408ddd5"], 0xdd12}], 0x1}, 0x20040890) (async)
read$char_usb(r3, &(0x7f0000000180)=""/120, 0x78) (async)
sendfile(r4, r3, 0x0, 0x1c) (async)
creat(&(0x7f0000000f40)='./file0\x00', 0x0) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000200)={0x3}, 0x4)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
sendfile(r7, r7, &(0x7f0000000280)=0x2eb4, 0x2000007ff) (async)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x200800, &(0x7f0000001040)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x2000}})
executing program 4:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x44, &(0x7f0000000100), 0x1, 0x777, &(0x7f0000000140)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3018449, 0x0, 0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x101, 0x0, 0x30a30b41, 0x6, 0x1000, 0x2, 0x208000000001002, 0xfffffffffffffffc, 0x4, 0x80, 0x9, 0x10000, 0x8bd6, 0x4, 0x7f, 0x6], 0x26000, 0x216146})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mount$overlay(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900), 0x8, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x44, &(0x7f0000000100), 0x1, 0x777, &(0x7f0000000140)="$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") (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3018449, 0x0, 0x1, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x101, 0x0, 0x30a30b41, 0x6, 0x1000, 0x2, 0x208000000001002, 0xfffffffffffffffc, 0x4, 0x80, 0x9, 0x10000, 0x8bd6, 0x4, 0x7f, 0x6], 0x26000, 0x216146}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mount$overlay(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900), 0x8, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async)
executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, &(0x7f00000000c0)=""/24, 0x18)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x24}, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x3, 0x2a2, &(0x7f0000000ac0)="$eJzs3M9KG1EUB+Djn2h0E6FdlS4GuukqqG8QxEJpoGDJwq4MVaE4Iowg6KK667t01WfpY/QJshBSkkk0Y9NCW+vE5PtgmMOd/MidWeTO4tzsPT8+2j9ZiFwSixFXX6979XwMR4fm+sdSYewqAIDHZmen3Sh7DvxfWdZoVyJiOaJbvNL6UtacAAAAAAAAAAAA+Dd5///p4e6T71Gt5v3/0YlYG+n/nxuc5/X/A8BU0P8//bKs0V4dvL8V6f8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAytPpdmvd3xxlzw8AuH/WfwCYPdZ/AJg9ncJaPxfWfwCYfu92379pNJvbO0lSjTj+fNY6a+Xn/HrjMD5GGgexHrW4jt77wUBev3rd3F5P+tZi7/hykL88ay0U8xtRi7Xx+Y08nxTzlVgdzW9GLZ6Oz2+OzS/Fyxcj+XrU4tuHOIk09qOXvc1/2kiSrbfNO/nl/ucAAAAAAAAAAAAAAAAAAADgIdSTG2P379frv7qe5//g/wHu7K9fjGeL5d47AAAAAAAAAAAAAAAAAAAATIrT84ujdpoeZIp7KFZKeqqVGB3pRsQkPI3HUazERExj4oqSf5gAAAAAAAAAAAAAAAAAAGAG3W76LXsmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCe0+VhcX5x1E7Tg+ymqP408pfF+G/eqjzkfQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT70cAAAD//wtI4ao=")
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x4}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
openat2(r0, &(0x7f0000000200)='./bus/../file0\x00', &(0x7f0000000380)={0x44000, 0x180, 0x1c}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$tipc(0x1e, 0x5, 0x0)
listen(r3, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ppoll(&(0x7f0000000d80)=[{r4, 0x4}, {r3, 0x2}], 0x2, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004)
syz_emit_ethernet(0xba, &(0x7f0000000e40)={@local, @remote, @void, {@mpls_mc={0x8848, {[{}, {0x2}, {}, {0x9, 0x0, 0x1}], @ipv6=@tipc_packet={0x9, 0x6, "41bd63", 0x74, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@srh={0x87, 0x8, 0x4, 0x3, 0x3, 0x40, 0x36, {@empty, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}}], @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x3, 0x0, 0x2, 0x2, 0x5, 0x2, 0x9, 0x4, 0x1, 0x4e20, 0x4e22}, 0x2, 0x4}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0)
executing program 4:
syz_mount_image$vfat(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x200008, &(0x7f0000000a40)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x1c}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae03, 0xa1) (async)
sysinfo(&(0x7f0000000200)=""/101) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0xf)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x4076cbba9945d516, &(0x7f0000000940)={0x0, 0x14}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000e40)={{r3}, "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"}) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x14c, 0x18, 0x100, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x5c, 0x1, 0x61, 0xff, 0x9, "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", 0x2, "5c8dc9f00000e4ffff004d01ffffff2814edb2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "4f4d5a01d49f9755"}, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async)
getsockname$packet(r4, &(0x7f0000000980)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f40)=0x14)
sendmsg$nl_route(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="3400290b0000390400"/20, @ANYRES32=r9, @ANYBLOB="2188000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000002040)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002080)=0x14) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r13, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x4000) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r14=>r10, 0x29, 0x5, 0xdb, 0xf, 0x8, @rand_addr=' \x01\x00', @loopback, 0x7800, 0x40, 0x9, 0x5}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r11, &(0x7f0000002e40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e00)={&(0x7f0000002280)=ANY=[@ANYBLOB='x\b\x00\x00', @ANYRES16=r13, @ANYBLOB="00042cbd7000fcdbdf250e00000060010280b6000400d0522d2a4f2fd4a3117a7486e2cc5833e14c12ab662f5212479cda0dce8ede3a06f9b038c5da6013a5fd52c58273e920935bf65753a6b129e458c175cd61f2cdd81bc25a968f61325dbbc4be0f0ec28f56770febf9bfb281e043662dd12ff6648728d5ad8e425c9a1f5d0c48d02091fd94f0890b59ca8b8d9d213b876c6588d73aada7eef2ab9bfe6dc7adf9d7a7639cccfafb908b2f272354d10fe3155618d289c868280ef619fea70a5b2bc8d840e99a16000008000200030000000400010004000100040001008b000400236d0ecc30f3b19869d9411d0f4c14e321709794c2bfc1e268edc0c3b7c208ecb9ebd01b9960972a389a5c31f7be7350171aeb063fd59db1c6bd7898dd98db8d58b623baa4f94b6763c7328d98fd7b390a92d481f452f1004d49826c040a04d6ac7e758d2ee9de0f303718c41b10c7e12420f743c7b50d9e2d74e46b970112e115ebc7963fcb4e00040001006003028043000400f439b5a5a70fb538b0a6a0ea09622e7239cfa9fce3cfc742007aa66d1cd6be73448d01a3fbcb6f0405368a04a09b1812f7964175c592fd39e4e9b58ecfe1ee0034000500cc24df5920cf081373da8a55b3bcbde6f3e1bf81bde1794198e977785a68f2891a6c7994456152ef9f62a44522fdd75abc0003800800018004000300440001800d0002002b283a7b245c242d0000000004000300080001000600000007000200407b0000040003000900020076666174000000000900020076666174000000001c00018008000100000018000900020076666174000000000400030038000180160002007dc62c2c5b5e2b2f2c2c162d3a2ca0252c00000008000100ff0f0000080001000010000005000200000000000400030018000180090002007666617400000000080001001a000000b2000500fd724eb2080fe07bc50777020d0f4cc646c540121df867e5e42a528ef9e7bd4a44b973f8aa66916af3e5e8541bc229fa07103c7b61dc0e93b9ceb7d94fe1970be01474c7d3fc063038385d9f702f44bb39ae109ba41ae9d3c08be5b8c21027a4b4fcc4a695fa80abe5b40fcc3ada3c54ed8c442b3f86fd92fd11da73ac46219f0eea95658272bedfcc8413242bfcc31185698b7822cf744fa9f7d973a13b562d11e2710070a12cb50008a0ddc4a50000ea000400ff3d6ab419688bd9838ed1bebc0c3157e93b67355a9671afab88758017ac95adb4abd6dfa74798cda3be9eaaeea032401e9b97da07da650a583059a4e0051db54ca19976f7bf271b62873e8056cd3b32e786149081bee6f48cfbf3bf224200505503db4f80cb3e0207adaa65d83e5c8287e38a641ec813081cc8c8abe5648a270cdb32b54a4c05b85d2f3604855cc4f83947d0ef533b8c9852917a8183596eddb95d1672aacd7ebef25fcea65f7fd10d72fecfec02f9b4bd92f7ffc74523dec20ff0f74b9592c577ca6d090da7ced7bcb83d805264acbe8d6ffea75f6bd9c97fcda67630d274000004000100080002000080000004000100750004002c3880bb58362aba25879c0ddba5828fbf717b7163f86421f7f097e5a377f0d15d798198d50c472194f6f0cd4677fb17956044dad8696cb9e96178d5f19a900da662abb735f903246b5a00501b2a0e848d4314cb0e12131498e99b66d23bbd8a0aeda2b95c6fe42b70635fa914539536200000002800018008000100", @ANYRES32=r10, @ANYBLOB="08000300020000001400020065727370616e300000000000000000006400018008000300000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200697036677265746170300000000000000800030001000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="200001800800030000000000140002006261746164765f736c6176655f310000540001800800030002000000a7fe0200766c616e300000000000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="080003000500000008000100", @ANYRES32=r10, @ANYBLOB="30b37338", @ANYRES32=r9, @ANYBLOB="a4020280b80005004558aa55a02e0598cab5cb39735e2eba4324b1eb3d56f6e33612768e309fdfcccfdd302a88fddace4da1e0ce04375f8beaad0d67b3103961e487e9e006234f4ce549b70532524b0cc8e7c307350db806e670e740ed6440c64301cc4b03abc96e209f4035a4ef78cfd824b5baa5f5c198405ad2593259f9fc0099247ad0ed0b39dd1efdd49311d7b7eee0611db796493b4388ffbb4a56029003b0820ff7e0617395c4d99e0cbf3295b2bc00c9ae4e569c3ba35a76ee000500907ab5c50dfdb9ba6b337084f52de889450c6e57e6302757d4d4c51793b442292939dca381781fb2cd3ab7940afa1f1b52d64e4dc99580c110c8bf795012aeb2c5619f64b3f6612e083671b7b97b6675dc28c5924bc10794b9eb84efd80f122132709c4fcf410d3837e95ce5ff83b61158309c885eab60f76ee2775d8a4447e37c7cb3e2c49beb456af85a6194066dd3907b76bdd69c28a946d1996f920e530f924ede6300daf034ebaad8963ea9dd24c4227f8be42c343ec50df693c978c8024aee62afab9fd2d1f8baa4591f991d8d6c37b6b3267852ed61542e4a8eeaf730fbd29e086bba18719f79000008000200090000000400010008000200030a5822d500040049b91e8906336d699b35e8c87e64a1fa937412a75281abb6c6006e3f54b71b11467287a3cd2ff9a2e228f625100cfe1dc07ca1994fc3cbf93f708700c5b0355df58ae1133833b06a311d15dcec1e95436f5b6790f5bf88fe22239a84154f5ea8e0201c250b09b6ddab4aa24e68e387892144b8cf05a3667803f90570e895975cd89eb87f252dd9b56662ede93a906fcfa0d7d5418351bdf0721bf5d3ffe6ff9e085cc31e4906ac0d1e43ffa1202900cf7a74bb54b3f4c15f58b40a64694e0ad0621619a9d14e25c13a954de038accbddba000000040001000800020006000000"], 0x878}, 0x1, 0x0, 0x0, 0x80}, 0xc831) (async)
sendmsg$nl_route(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x0, 0x7, 0x80, 0x10}, {0x8, 0x6, 0x3, 0xfffffbff}, {0x3ff, 0x1, 0x0, 0x4a6666c5}, {0x5, 0x2, 0x3, 0x5}, {0x3, 0xfe, 0x1, 0x1ff}, {0x9, 0x8, 0x9}, {0x4, 0x2, 0x3, 0x8}]})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f00000000c0)=""/120, 0x78)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x200000000006, 0xfe, 0x7, 0x7ffc1ffb}]})
select(0x40, &(0x7f0000000880)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000008c0)={0x4}, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4050000000000007910ec20d4b1fd9ae4ebcf101e17b1f186b0490000000000"], &(0x7f0000000480)='GPL\x00', 0x5, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x22e, 0x10, &(0x7f0000000600), 0x1dd}, 0x48)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000740)=0x80000000001, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x181643, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000007c0)={0x66666666666689b})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x95)
r4 = socket(0x8, 0xa, 0x0)
listen(r4, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3}, @sadb_address={0x5, 0x5, 0x19, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffd, @private0, 0xfffffffe}}]}, 0x70}, 0x1, 0x7}, 0x400c010)
pselect6(0x40, &(0x7f0000000640)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000680)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f00000006c0)={0x0, 0x3938700}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0xfffffffffffffffd, 0x0)
socket$packet(0x11, 0x3, 0x300)
executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000)
mmap(&(0x7f0000080000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x89287000)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32877000)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus/file0\x00', 0x831010, &(0x7f0000000880)=ANY=[], 0xfd, 0x150a, &(0x7f00000015c0)="$eJzs3AuYzdX6OPD3XWt9GZq0m+QyrLXeLzsNlkmSXBJySZIkSXJLSJokSXRhyD0NSch1Qi5DSC7TmDTu90vuSZMjTZKEhIT1f3Q6P+eczu/nf/7nnL/zO/N+nmc91uu733e/33n3s/f+7mfPfNdjRN3m9Wo1JSL4h+Af/0kGgBgAGAwA1wFAAAAV4yrGXTqeT2LyP3Yn7J/r4bSr3QG7mnj+uRvPP3fj+eduPP/cjeefu/H8czeef+7G82csN9s2u+j1vP69V/K/sDZ//p+b8ev/f5CcchO/2lDuxp5/RwrPP3fj+eduPP/cjeefu/H8czee/3++mv/DMZ5/7sbzZyw324YK4N/gM25eV2dd7ccfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLHc4ay/TAHAn/ZXuy/GGGOMMcYYY4z98/i8V7sDxhhjjDHGGGOM/eshCJCgIIA8kBdiIB/kh2sgFq6FAnAdROB6iIMboCDcCIWgMBSBohAPxaA4aDBggSCEElASonATlIKbIQFKQxkoCw7KQSLcAuXhVqgAt0FFuB0qwR1QGapAVagGd0J1uAtqQE2oBXdDbagDdaEe3AP14V5oAPdBQ7gfGsED0BgehCbwEDSFh6EZPALN4VFoAY9BS2gFraENtP1/yn8ZXoFXoTf0gWToC/3gNegPA2AgDILBMASGwuswDN6AFBgOI+BNGAlvwSh4G0bDGBgL78A4GA8TYCJMgsmQCu/CFJgK0+A9mA4zYCbMgjSYDXPgfZgL82A+fAAL4ENYCItgMSyBdPgIMmApZMLHsAw+gSxYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNvgUtsMO2Am7YDfsgb3wGeyDz2E/fAHZ8OXfmX/mr/J7IiCgQIEKFebBPBiDMZgf82MsxmIBLIARjGAcxmFBLIiFsBAWwSIYj/FYHIujQYOEhCWwBEYxiqWwFCZgApbBMujQYSImYnm8FStgBayIFbESVsLKWAWrYDWshtWxOtbAGlgLa2FtrI11sS7eg/fgvdgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZNsfm2AJbYEtsia2xNbbFttgO22F7bI8dsSN2wk7YGTtjEiZhF+yCXbErdsNu2B27Yw/sgT2xF/bCl/FlfBVfxT5YW/TFftgP+2N/HIiDcBAOwaH4Or6Ob2AKDscR+Ca+iW/hKDyNo3EMjsWxWF2Mxwk4EUlMxlRMxSk4BafhNJyOM3AGzsI0nI1zcA7OxXk4Dz/ABfghfoiLcBEuwXRMxwxcipmYicvwDGbhclyBK3EVrsZVuBbX4VrcgBtxA27GzbgVt+Kn+CnuwB24C3fhHtyDn+Fn+Dl+jimYjdl4AA/gQTyIh/AQ5mAOHsbDeASP4FE8isfwGB7HE3gST+ApPIWn8QyexbN4Ds/heXwh/ptme0qvTwFxiRJK5BF5RIyIEflFfhErYkUBUUBERETEiThRUBQUhUQhUUQUEfEiXhQXxYURRpAIRQlRQkRFVJQSpUSCSBBlRBnhhBOJIlGUF+VFBVFBVBS3i0riDlFZVBEdXDVRTVQXHV0NUVPUErVEbVFH1BX1RD1RX9QXDUQD0VA0FI1EI9FYPCiaiL44EB8WlybTXAzHFmIEthStRGvRRryFj4t2YhS2Fx1ER/GkGIOjsbNo55LEM6KLmIBdxXNiIj4vuovJ2EO8KHqKXuIl8bJ4RbR3vUUfMR37in5iFvYXA8RAMUjMxTri0sTqijdEihguRog3xRJ8S4wSb4vRYowYK94R48R4MUFMFJPEZJEq3hVTxFQxTbwnposZYqaYJdLEbDFHvC/minlivvhALBAfioVikVgsloh08ZHIEEtFpvhYLBOfiCyxXKwQK8UqsVqsEWvFOrFebBAbxSaxWWwRW8U28anYLnaInWKX2C32iL3iM7FPfC72iy9EtvhSHBB/EAfFV+KQ+FrkiG/EYfGtOCK+E0fF9+KY+EEcFyfESfGjOCV+EqfFGXFW/CzOiV/EeXFBXBRegEQppJRKBjKPzCtjZD6ZX14jY+W1soC8Tkbk9TJO3iALyhtlIVlYFpFFZbwsJotLLY20kmT42zfG+shS8maZIEvLMrKsdLKcTJS3yPLyVllB3iYryttlJXmHrCyryKqymrxTVpd3yRqypqwl75a1ZR1ZV9aT98j68l7ZQN4nG8r7ZSP5gGwsH5RN5EOyqXxYNpOPyObyUdlCPiZbylaytWwj28rHZTv5hGwvO8iO8knZST4lO8unZZJ8RnaRz8qu8jnZTT4vu8sXZA/5ouwpe8mX5AV5UXrZW/aRybKv7Cdfk/3lADlQDpKD5RA5VL4uh8k3ZIocLkfIN+VI+ZYcJd+Wo+UYOVa+I8fJ8XKCnCgnyckyVb4rp8ipcpp8T06XM+RMOUumydly4G+V5v9f5E/9G/nDfr33rXKb/FRulzvkTrlL7pZ75F65V+6T++R+uV9my2x5QB6QB+VBeUgekjkyRx6Wh+UReUQelUflMXlMHpcn5M/yR3lK/iRPyzPyjPxZnpPn5PnffgagUAkllVKByqPyqhiVT+VX16hYda0qoK5TEXW9ilM3qILqRlVIFVZFVFEVr4qp4koro6wiFaoSqqSKqpvUn743WEaVVU6VU4nqlr8rv5S6WSWo0urP86/UX1vVVrVT7VR71V51VB1VJ9VJdVadVZJKUl1UF9VVdVXdVDfVXXVXPVQP1VP1VC+pl9Qr6hXVW/VWySpZ9VOvqf5qgBqoBqnBaogaqoaqYWqYSlEpaoQaoUaqkWqUGqVGq9FqrBqrxqlxaoKaoCapSSpVpaopaoqapqap6Wq6mqlmqjSVpuaoOWqumqvmq/lqgVqgFqqFarFarNJVuspQGSpTZaplapnKUsvVcrVSrVSr1Wq1Vq1V69V6tVFtVJvVZpWltqltarvarnaqnWq32q32qr1qn9qn9qv9KltlqwPqgDqoDqpD6pDKUTnqsDqsjqgj6qg6qo6pY+q4Oq5OqpPqlDqlTqvT6qw6q86pc+q8Oq8uqouX3vYFIhCBClSQJ8gTxAQxQf4gfxAbxAYFggJBJIgEcUFcUDC4MSgUFA6KBEWD+KBYUDzQgQlsQEEYlAhKBtHgpqBUcHOQEJQOygRlAxeUCxKDW4Lywa1BheC2oGJwe1ApuCOonA+CqkG14M6genBXUCOoGdQK7g5qB3WCukG94J6gfnBv0CC4L2gY3B80Ch4IGgcPBk2Ch4KmwcNBs+CRoHnwaNAieCxoGbQKWgdtgrZ/XT+o8g/U9/504Xu79y956VHcV/fTr+n+eoAeqAfpwXqIHqpf18P0GzpFD9cj9Jt6pH5Lj9Jv69F6jB6r39Hj9Hg9QU/Uk/Rknarf1VP0VD1Nv6en6xl6pp6l0/RsPUe/r+fqeXq+/kAv0B/qhXqRXqyX6HT9kc7QS3Wm/lgv05/oLL1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Tb9qQK9Q+/Uu/RuvUfv1Z/pffpzvV9/obP1l/qA/oM+qL/Sh/TXOkd/ow/rb/UR/Z0+qr/Xx/QP+rg+oU/qH/Up/ZM+rc/os/pnfU7/os/rC/qi9pfe3F96eTfKKJPH5DExJsYgAMSaWFPAFDAREzFxJs4UNAVNIVPIFDFFTLwZElPcFDeXkCFTwpQwURM1pUwpk2ASTBlTxjjjTKJJNOVNeVPBVDAVTUVTyVQylU1lU9VUNXeaO81d5i5T09Q0d5u7TR1Tx9Qz9Ux9U980MA1MQ9PQNDKNTGPT2DQxTUxT09Q0M81Mc9PctDAtTEvT0rQ2rU1b09a0M+1Me9PedDQdTSfTyXQ2nU2SSTJdTBfT1XQ13Uw30910Nz1MD9PT9Hzrtwsi09v0Nskm2fQz/Ux/098MNAPNYDPYDDVDzTAzzKSYFDPCjDAjzUgzyowyo80YM9a8Y8aZ8WaCmWgmmckm1aSaKWaKmWammelmuplpZpo0k2bmmDlmrplr5pv5ZoFZYBaahWaxWWzSTbrJMBkm02SaZWaZyTJZZoVZYVaZVWaNWWPWmXVmg9lgNplNZovZYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbbZJsD5oA5aA6aQ+aQyTE55rA5bI6YI+aoOWqOmWPmuDluTpqT5pQ5ZU6b0+asOWvOmV/MeXPBXDTexFgB+e01NtZeawvY62yMzWf/PC5ii9p4W8wWt9oWsoX/IjbW2gRb2paxZa2z5WyiveV3cWVbxVa11eydtrq9y9b4XVzf3msb2PtsQ3u/rWfv+Yu4kX3ANraP2ib2MdvUtrLNbBvb3D5qW9jHbEvbyra2bWwn+5TtbJ+2SfYZ28U++7s4wy616+x6u8FutPvs5/as/dkesd/Zc/YX29v2sYPtEDvUvm6H2Tdsih3+u3isfceOs+PtBDvRTrKTfxfPtLNsmp1t59j37Vw773dxuv3ILrCZdqFdZBfbJb/Gl3rKtB/bZfYTm2WX2xV2pV1lV9s1du1/9brSbrZb7Fa7135mt9sddqfdZXfbPb/Gl85jv/3CZtsv7WH7rT1ov7KH7FGbY7/5Nb50fkft9/aY/cEetyfsSfujPWV/sqftmV/P/9K5/2gv2IvWWyAkQZIUBZSH8lIM5aP8dA3F0rVUgK6jCF1PcXQDFaQbqRAVpiJUlOKpGBUnTYYsEYVUgkpSlG6iUnQzJVBpKkNlyVE5SqRbqDzdShXoNqpIt1MluoMqUxWqStXoTqpOd1ENqkm16G6qTXWoLtWje6g+3UsN6D5qSPdTI3qAGtOD1IQeoqb0MDWjR6g5PUot6DFqSa2oNbWhtvQ4taMnqD11oI70JHWip6gzPU1J9Ax1oWepKz1H3eh56k4vUA96kXpSL3qJXqZX6FXqTX0omfpSP3qN+tMAGkiDaDANoaH0Og2jNyiFhsvfnitoFL1No2kMjaV3aByNpwk0kSbRZEqld2kKTaVp9B5Npxk0k2ZRGs2mOfQ+zaV5NJ8+oAX0IS2kRbSYllA6fUQZtJQy6WNaRp9QFi2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbfUrbaQftpF20m/bQXvqM9tHntJ++oGz6kg7QH+ggfUWH6GvKoW/oMH1LR+g7Okrf0zH6gY7TCTpJP9Ip+olO0xk6Sz/TOfqFztMFukieIMRQhDJUYRDmCfOGMWG+MH94TRgbXhsWCK8LI+H1YVx4Q1gwvDEsFBYOi4RFw/iwWFg81KEJbUhhGJYIS4bR8KawVHhzmBCWDsuEZUMXlgsTw1vC8uGtYYXwtrBieHtYKbwjrBxWCR+9v1p4Z1g9vCusEdYMa4V3h7XDOmHdsF54T1g/vDdsEN4XNgzvDyuED4SNwwfDJuFDYdPw4bBZ+EjYPHw0bBE+FrYMW4WtwzZh2/DxsF34RNg+7BB2DJ8MO4VPhZ3Dp8Ok8JmwS/jsFY8nh33DfuFr4Wuh9/fJxdEl0fToR9GM6NJoZvTj6LLoJ9Gs6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18oJDJ5x0ygUuj8vrYlw+l99d42Ldta6Au85F3PUuzt3gCrobXSFX2BVxRV28K+aKO+2Ms45c6Eq4ki7qbnKl3M0uwZV2ZVxZ51w5l+jauLaurWvnnnDtXQfX0T3pnnRPuafc0+5p94zr4p51Xd1zrpt73nV3L7gX3Iuup+vlXnIvu1fcq6636+OSXbLr5/q5/q6/G+gGusFusBvqhrphbphLcSluhBvhRrqRbpQb5Ua70W6sG+vGuXFugpvgJrlJLtWluiluipvmprnpbrqb6Wa6NJfm5rg5bq6b6+a7+W5BwgK30C10i91il+7SXYbLcJku0y1zy1yWy3Ir3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1z2912t9PtdLvdbrfX7XX73D633+132S7bHXAH3EF30B1yX7sc94077L51R9x37qj73h1zP7jj7oQ76X50p9xP7rQ74866n90594s77y64i8671Mi7kSmRqZFpkfci0yMzIjMjsyJpkdmROZH3I3Mj8yLzIx9EFkQ+jCyMLIosjiyJpEc+imRElkYyIx9HlkU+iWRFlkdWRFZGVkVWR7wvtj30JXxJH/U3+VL+Zp/gS/syvqx3vpxP9Lf48v5WX8Hf5iv6230lf4ev7Kv4qv4x39K38q19G9/WP+7b+Sd8e9/Bd/RP+k7+Kd/ZP+2T/DO+i3/Wd/XP+W7+ed/dv+B7+Bd9T9/Lv+Rf9q/4V31v38cn+76+n3/N9/cD/EA/yA/2Q/xQ/7of5t/wKX64H+Hf9CP9W36Uf9uP9mP8WP+OH+fH+wl+op/kJ/tU/66f4qf6af49P93P8DP9LJ/mZ/s5/n0/18/z8/0HfoH/0C/0i/xiv8Sn+498hl/qM/3Hfpn/xGf55X6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+q3+U/9dr/D7/S7/G6/x+/1n/l9/nO/33/hs/2X/oD/gz/ov/KH/Nc+x3/jD/tv/RH/nT/qv/fH/A/+uD/hT/of/Sn/kz/tz/iz/md/zv/iz/sL/uIVfmct+Fd/jM4YY4wx9r+EvMLxvn/j/8Rv65J+AHDtjqI5f11zU6E/7geI+E4RAHimT4+H/7Rq105OTv7ttlkSgpKLACByOT8PXI6XQ0d4CpKgA5T/m/0NEL3O0RXqR28HyP9fnQPEwJ/iP69/639T//Enx2ZUCs/G/Q/1FwEklLyckw8ux5frV/hv6hdud4X+832VCtD+z3Ji4XJ8uX4iPAHPQtJf3JIxxhhjjDHGGPujAaJqtytdP1+6Po9Xl3PywuX4StfnjDHGGGOMMcYYu/qe7/XS048nJXXoxhve8ObfZTP16rdxtZ+ZGGOMMcYYY/9sl9/0X+1OGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx3Ov/x58Tu9rnyBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjF1t/ycAAP//YuU99w==")
geteuid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x2200000, &(0x7f0000000940)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@acl}, {@acl}, {@debug}, {@delalloc}, {@nogrpid}, {@noblock_validity}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000009c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000f40)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000f80)='./bus\x00', &(0x7f0000000fc0), 0x8, &(0x7f0000001000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000001040)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000001080), &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000011c0)=ANY=[], 0x1, 0x291, &(0x7f0000001200)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg")
openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101a42, 0x34)
connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000002c0), 0x4000087, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYRESOCT=r3, @ANYBLOB="6bd5a993ee18fe95829b1e2a311af412f9f741f1299a78a5a718dcf0219b66dbd561182d7ccf11abcda726a4f6e5ee6147cf878820c458ea67a20174f7c0b81ec3e0630da12d2ed83e7c2602d4972b314102d77a041bf848c8b8d8ac4629d6dc", @ANYRES64=0x0, @ANYRES64, @ANYRESHEX=r3, @ANYBLOB="add9edd5a7c734e34d1ccc322f579fbf23b36fe21280391863915fdfc31c57aa3726e065eb622be2b47a77897f6b8f9ab3de8647c283d296330ec5853ca7ec937fcbc77af988973fe34aa9fe10a8804cf5e226132f6ac56362d704e12097685b0fe8ec61e12bd07fc7ef96bf7be3d5dd21644241071dade8257f2f8645cf4489e8d46e", @ANYRES8=r1], 0x1, 0x313, &(0x7f00000004c0)="$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")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 1:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x4004040)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x8840, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000005c0)={0x0, 0x5, 0x1, 0x3, 0x7, "ff00f70000e102005200002000"})
r1 = syz_open_pts(r0, 0x141601)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000600)={0x6, 0x7fffffff, 0x0, 0x3, 0x14, "802499266727e8f583430e2da1bf3a0ae404d1", 0x3, 0x7})
write(r1, &(0x7f0000000640)="d5", 0xfffffedf)
ioctl$KDENABIO(r1, 0x4b36)
executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0xc)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, r1, 0x16, 0x0, @void}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = epoll_create(0x7)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f0000000100)="108e7a61eb7cbe25f8cc98411e8bcef30be64efc1b200bfc585809c3587ea20c1559404a708d98761196714b55bb0528c60d868e507611683d72873560754dd6e24d207ccfbb49a72357086908d0c09a766237e76692ad0e51917ea95d6a99e669a240d6aa4456a9e640bbe2c752cc1677db81bb4cbfcb3ddb126eeaadd0653900922e6ca80d66", &(0x7f00000001c0)=""/96, &(0x7f0000000240)="96a3d7fe8dba035c3044afebe572c5fb2b1e0c443651ac0347c29169ff4a", &(0x7f0000000280)="d36a32f987837703e06eae750801cc36b3f67e54a027f6e14c9d4b8a7d9fd20a2b31cc7e6a94f7316ee401172be2f9fb5357d4be5635960499896cf70293b531b2816993b1378081b48d0ada8e88ededacc630507f962235b1aab7a9141b449cc846bea6e0056831b4efddaafc9532326292649caf859b42bee517fad99fdfa8", 0xd, r1}, 0x38)
r4 = epoll_create1(0x0)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x6})
mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='xfs\x00', 0xc8, 0x0)
r6 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r7=>0x0}, &(0x7f00000008c0)=0xfffffffffffffe00)
getgroups(0x7, &(0x7f0000000600)=[0x0, 0xee00, 0xee00, 0x0, 0x0, 0xee00, <r8=>0xee00])
setresgid(r6, r7, r8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f00000000c0)={0x2010})
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000005f80), 0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000680)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r10, 0x1, &(0x7f0000000700)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r11 = userfaultfd(0x1)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x100})
readv(r11, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/114, 0x72}], 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x40004)
syz_open_dev$tty1(0xc, 0x4, 0x1)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffbd3, 0x57}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0x14)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x800)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x3, 0x4, 0x1000, 0x8, 0x800, 0x15, 0x87c9}, 0x1c)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2b0, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="52ae912f4cdc4149c0220e1a9d5cc370"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4c7e05ef975a48ac41628eafd7ea37d763440955517aa2bf998e0080d133445b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b8c2aca32bfaf568b0d43ac90f748af2993106f460e05ecb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d28d126452ed094c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c0cf4b174927d4d3df9411f5d488f82d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="26126bf5be3fb4c0fd36f8096ad6a985"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "af4b681a30ecfa82"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "833f38300e8638ee"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fe2e137d1d5f43cddde75f524737b49e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4c7d6eba5687b91f8d8e3436ef1c6b13"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b0d16c64f67380d2eb7eb88afc5e7ac1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1df664200333a9fab8e284fee436f9820cd4c9b843f8a7ee"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e1998c61b863fbb9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "feafd433e8d6eff2"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f236943b25b14b2ef55c450c3497be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c782f78a5a3a8032"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x452}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b26d3c59966737a47ded14daeaa0360c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf9243207ea9e1ee"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40000000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3a1aa66af87f9b9"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d5dbbcb81aacfb7c4ad62df9140f8b91"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "46d3eb85947761c8"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9a0bdd1bb9a2a66e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x87}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b4bf175d3e9a3149b7b53530410a8020"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2a4e68bb93dcff3cc0d321beefd1449a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9f37cb7f712af1d09e77f6c9d5893666ccc08a158ae838514faaedb92163cc52"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8e5f421ce7245df4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bed305bad478bdd50ed3286688fc0469"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="838acf239ed8a6f13090618e37c8d0b5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fd713403228a5088ca7f363468c92cae9e354886e119f256"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14b4e3bc195fabcd"}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000580)={<r4=>0x0, "b6a43869c9721c8ab8a6c6d71aeced52"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001580)={r4, 0x7, 0x2, 0x1})
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x18, 0x3f9, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001a80)={0x0, 0x40, 0x7})
r6 = openat(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', 0x4000, 0x40)
ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000001ec0)={0x1, 0xd})
r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000002180)='bpf_lsm_dentry_init_security\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_lsm={0x1d, 0x25, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@x}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x1, 0x6, 0x2, 0x6, 0x0, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x81, 0xb3, &(0x7f0000002040)=""/179, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000002100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002140)={0x0, 0x6, 0xd, 0x73c1}, 0x10, r7, 0x0, 0x0, &(0x7f00000021c0)=[r6], 0x0, 0x10, 0xb6af}, 0x94)
sync_file_range(r5, 0x0, 0x7b1, 0x7)
listen(0xffffffffffffffff, 0x1)
fcntl$setpipe(r0, 0x407, 0x7f)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000022c0)={{&(0x7f0000ff6000/0xa000)=nil, 0xa000}, 0x1})
clock_getres(0x1, &(0x7f0000002300))
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000002340))
ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000002480)={<r9=>r6, &(0x7f0000002380)='${+(}', 0x200, &(0x7f00000023c0)={@_ha_fsid={[0x9, 0x1e68d6f4]}, {0x0, 0x200, 0x9, 0x5}}, 0x5, &(0x7f0000002400), &(0x7f0000002440)})
ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f00000024c0)={0x7, 0x10})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002840)={r8, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000025c0)=[0x0, 0x0], &(0x7f0000002600)=[0x0], 0x0, 0xa0, &(0x7f0000002640)=[{}, {}], 0x10, 0x10, &(0x7f0000002680), &(0x7f00000026c0), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000002700)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002900)={'gretap0\x00', &(0x7f0000002880)={'gre0\x00', <r12=>r3, 0x80, 0x10, 0x0, 0x80, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0xcb, 0x0, 0x5, [0x4, 0x2, 0x7, 0x5, 0x4, 0xe]}, @noop]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002ac0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002a80)={&(0x7f0000002940)={0x11c, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
unshare(0x880)
ioctl$BTRFS_IOC_SPACE_INFO(r9, 0xc0109414, &(0x7f0000002b00)={0xf64, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
getsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000019c80), &(0x7f0000019cc0)=0x4)
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000e, 0x411d132, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mremap(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000780)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000007c0)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000800)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000840)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @sack_perm, @sack_perm, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000cc0)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000d00), 0x4)
shutdown(r0, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0)
syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000200)='./bus\x00', 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB='rodir,shortname=lower,uni_xlate=0,iocharset=cp850,codepage=936,utf8=1,gid=', @ANYRESHEX, @ANYBLOB="2c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c757466383d312c757466383d312c696f636861727365743d69736f383835392d332c756e695f786c6174653d312c00e3c1b8b335e1c1da7eccc488bca3b6e30503d7f881f3374399f93bcd78a330326f3c77caf69ea50039c0637dde26c07ef51766a28ba3263118109e02a7c668929085dff99528b8839b3036ce554e314c64a86c977db45e77711a1b1b2e7889f1993076bf26747bfef497a5ccccdd13ed"], 0x1, 0x36a, &(0x7f0000000940)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x9, 0x9, 0x3ff, 0x1, 0x2}})
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000280)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendto$inet(r1, &(0x7f00000008c0), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000900))
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}})
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
executing program 2:
syz_ublk_setup_io_uring(0x22ef, &(0x7f0000000000)={0x0, 0xc7af, 0x0, 0x0, 0x198}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r0=>0x0)
munmap$IORING_OFF_SQES(r0, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x305000, 0x0)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000580)={0x0, 0x1, 0x14, 0x1f, 0x1a0, &(0x7f0000000180)="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"})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_STATFS(r2, &(0x7f0000002640)={0x60, 0xfffffffffffffff5, r3, {{0x3, 0xffff, 0x9, 0x5, 0x0, 0xf, 0x9339, 0x3ff}}}, 0x60)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000026c0)={0xa, 0xb02d, 0x1, 0x8000, 0x15, "e75b712127eaef93"})
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x8, 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @typedef={0x2}]}, {0x0, [0x5f, 0x0, 0x2e]}}, &(0x7f0000002800)=""/152, 0x45, 0x98, 0x0, 0x3}, 0x28)
pwrite64(r4, &(0x7f0000002900)="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", 0x1000, 0x931)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000003900)={0x2, {0x2, 0x4, 0x66aa, 0x0, 0x7, 0x3}})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000003940), &(0x7f0000003980)=0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00), 0x100)
fstat(r1, &(0x7f0000003a80))
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000003b40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003b00)={0x2f}})
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000003b80)=0x1, 0x4)
r7 = accept4$tipc(r5, &(0x7f0000003bc0), &(0x7f0000003c00)=0x10, 0x0)
getsockname$tipc(r7, &(0x7f0000003c40)=@name, &(0x7f0000003c80)=0x10)
r8 = syz_open_dev$mouse(&(0x7f0000003cc0), 0x9, 0x408240)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003d00), 0x200000, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000003d40)={0x7, 0x0, [{0x80000001, 0x80, 0x3, 0xa, 0x1000, 0x6000000, 0x7f}, {0x80000000, 0x2, 0xf, 0x3, 0x6, 0x5, 0x4}, {0xc0000001, 0x10001, 0x1, 0x40, 0x0, 0x3, 0x9f2982b0}, {0x80000000, 0x9, 0x0, 0x2, 0x0, 0x32, 0x1}, {0x80000000, 0xd4d, 0x0, 0x3, 0x8, 0x8, 0x36b5}, {0x6, 0x6, 0xe, 0xfffffff8, 0xbb, 0xb4c, 0x2}, {0xa, 0x665, 0x7, 0x6, 0x3, 0x2, 0x1}]})
pipe2$watch_queue(&(0x7f0000003e80), 0x80)
execveat(r8, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f40)={[&(0x7f0000003f00)='E:\x00']}, &(0x7f00000041c0)={[&(0x7f0000003f80)='\x00', &(0x7f0000003fc0)='/dev/kvm\x00', &(0x7f0000004000)='\xb7\x00', &(0x7f0000004040)='\x00', &(0x7f0000004080)='trusted.overlay.redirect\x00', &(0x7f00000040c0)='trusted.overlay.redirect\x00', &(0x7f0000004100)='\x00', &(0x7f0000004140)='/dev/ptmx\x00', &(0x7f0000004180)='.).\'{.^\x00']}, 0x1000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000052c0)={r4, 0x20, &(0x7f0000005280)={&(0x7f0000004240)=""/4096, 0x1000, 0x0, &(0x7f0000005240)=""/55, 0x37}}, 0x10)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000005300)={0x0, "9b5b5fd9cf280771a244094ba237b9b8"})
syz_clone(0x80200, &(0x7f0000006300)="bc668bc405e2921bb292de61eae3f0588ba0c69535a87f7ab6eee19d1e5306e63ec7e3f29fb3e44ee6240436a6e9489ee7e9480abb6a7160f58db2fbde8a8a11a0969387fc19b82a90fa3a830570f84097941316e728302c7436d003d3f943f776cec52c35c7e6129f0cfd726f075e0743ebb3c782e11c933d55238e1051c53af1ae85cffbd27e0fc298285cf32c1b25695d5df055c15d82ec16fa20400832657cd584d0ed0fc4bbb56e6646", 0xac, &(0x7f00000063c0), &(0x7f0000006400), &(0x7f0000006440)="0b3db89657f55e04a4a88f03fd99ddb752325447624d6631c41349")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006480))
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000440)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
bisect: bisecting 28 programs
bisect: split chunks (needed=false): <28>
bisect: split chunk #0 of len 28 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 27, 4, 19, 30, 20, 21, 29, 23, 30, 7, 30, 30, 30, 30, 4, 22, 21]
detailed listing:
executing program 3:
setpriority(0x0, 0x0, 0x2a14b58) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="3000000001000000312d00000900054000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0x0, 0x802, 0x0, 0x0, 0x0, 0xf45, 0x3, 0x800000000000}, {0x0, 0x0, 0x100000001, 0x200000000002}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@rand_addr=0x64010100, 0x0, 0x33}, 0xa, @in=@loopback, 0x3fff, 0x0, 0x1, 0x4, 0x0, 0x0, 0x100}}, 0xe8) (async)
connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f0000000500), 0x0}, 0x20) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000440)=@filename='./dev/sda1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x0, 0x0) (async, rerun: 64)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x149000, 0x19a) (rerun: 64)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000580)=0x40000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async)
mkdir(&(0x7f0000000200)='./mysys\x00', 0x1ff)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) (async)
mount(0x0, &(0x7f00000003c0)='./mysys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) (async, rerun: 64)
ioprio_get$pid(0x1, 0x0) (rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0xfd, 0x2, 0x400000}})
executing program 3:
openat$dm_control(0xffffffffffffff9c, &(0x7f0000005800), 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = socket(0x10, 0x0, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5)
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x80}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000200), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffff, 0x0, @remote, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(0xffffffffffffffff, r1, 0x80000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f0000001440)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000014c0)=0x40)
syz_usb_connect(0x2, 0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001af4800000904e7000229feac00"], 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001500)=0x655e, 0x4)
r6 = dup2(r0, r0)
write$tun(r6, &(0x7f0000001540)=ANY=[], 0x46)
recvmmsg(r6, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0)
executing program 0:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000b00)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_winnt}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000c00)="$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")
r0 = creat(&(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x182)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x202000, 0x8a16d550d4cf54cc)
executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x3200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c80)={0x280, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xe18, 0x0, 0x3, 0xc, 0xb, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x2}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x7}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x0, 0x2, 0x0, 0x7, 0x8902, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x81, 0x4, 0x7, 0x8, 0xff80, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x7, 0xfff, 0x2, 0x7f, 0x6, 0x0, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x3ba3, 0x2473, 0xfff, 0x9, 0x2, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x1, 0x5, 0x6, 0x0, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x5, 0x4, 0x43, 0xa, 0xffff, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x6}, {0x1, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0x1}, {}, {0x6, 0x5}, {0x1, 0x5}, {0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x6, 0xa7862797c5a00d34, 0x18, 0x12, 0x6, 0x6c, 0xb, 0xb, 0x36, 0x1, 0x1b, 0x30, 0xc, 0x24, 0x4, 0x16, 0x48, 0x69, 0x2, 0x36, 0x1b, 0x2, 0x6c, 0x60, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x8}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {}, {0x3, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbb, 0x8, 0x0, 0xb, 0x3, 0x6, 0x40, 0x2]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x5, 0x7}, {0x5, 0x5}, {0x4}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xafd, 0x8, 0x9, 0xcb7b, 0x2, 0x100, 0xfff9, 0x3]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x7fff, 0x7f, 0x40, 0x9, 0x627b, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77, 0x1, 0x5, 0xfff9, 0x5, 0x7a24, 0x8, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0xd51c5b9b9dee022b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x187)
socket$netlink(0x10, 0x3, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETVESABLANK(r1, 0x560e, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200))
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x22000011, &(0x7f0000000340)={[{@commit}, {@sb={'sb', 0x3d, 0x2}}, {@abort}]}, 0x86, 0x48e, &(0x7f0000000780)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x60840, 0x8)
read$FUSE(r5, 0x0, 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000008f003040540000102030109022400010101d00909040007020701030709050102ff0309a6"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
executing program 4:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) (async, rerun: 64)
listen(0xffffffffffffffff, 0x6) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r5 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f00000003c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000400)=0xe9, 0x4) (async, rerun: 64)
sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="3b8408ddd5"], 0xdd12}], 0x1}, 0x20040890) (async)
read$char_usb(r3, &(0x7f0000000180)=""/120, 0x78) (async)
sendfile(r4, r3, 0x0, 0x1c) (async)
creat(&(0x7f0000000f40)='./file0\x00', 0x0) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000200)={0x3}, 0x4)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
sendfile(r7, r7, &(0x7f0000000280)=0x2eb4, 0x2000007ff) (async)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x200800, &(0x7f0000001040)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x2000}})
executing program 4:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x44, &(0x7f0000000100), 0x1, 0x777, &(0x7f0000000140)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3018449, 0x0, 0x1, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x101, 0x0, 0x30a30b41, 0x6, 0x1000, 0x2, 0x208000000001002, 0xfffffffffffffffc, 0x4, 0x80, 0x9, 0x10000, 0x8bd6, 0x4, 0x7f, 0x6], 0x26000, 0x216146})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mount$overlay(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900), 0x8, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x44, &(0x7f0000000100), 0x1, 0x777, &(0x7f0000000140)="$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") (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3018449, 0x0, 0x1, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x101, 0x0, 0x30a30b41, 0x6, 0x1000, 0x2, 0x208000000001002, 0xfffffffffffffffc, 0x4, 0x80, 0x9, 0x10000, 0x8bd6, 0x4, 0x7f, 0x6], 0x26000, 0x216146}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mount$overlay(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900), 0x8, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async)
executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, &(0x7f00000000c0)=""/24, 0x18)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x24}, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x3, 0x2a2, &(0x7f0000000ac0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x4}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
openat2(r0, &(0x7f0000000200)='./bus/../file0\x00', &(0x7f0000000380)={0x44000, 0x180, 0x1c}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$tipc(0x1e, 0x5, 0x0)
listen(r3, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ppoll(&(0x7f0000000d80)=[{r4, 0x4}, {r3, 0x2}], 0x2, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004)
syz_emit_ethernet(0xba, &(0x7f0000000e40)={@local, @remote, @void, {@mpls_mc={0x8848, {[{}, {0x2}, {}, {0x9, 0x0, 0x1}], @ipv6=@tipc_packet={0x9, 0x6, "41bd63", 0x74, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@srh={0x87, 0x8, 0x4, 0x3, 0x3, 0x40, 0x36, {@empty, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}}], @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x3, 0x0, 0x2, 0x2, 0x5, 0x2, 0x9, 0x4, 0x1, 0x4e20, 0x4e22}, 0x2, 0x4}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0)
executing program 4:
syz_mount_image$vfat(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x200008, &(0x7f0000000a40)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x1c}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae03, 0xa1) (async)
sysinfo(&(0x7f0000000200)=""/101) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0xf)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x4076cbba9945d516, &(0x7f0000000940)={0x0, 0x14}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000e40)={{r3}, "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"}) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x14c, 0x18, 0x100, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x5c, 0x1, 0x61, 0xff, 0x9, "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", 0x2, "5c8dc9f00000e4ffff004d01ffffff2814edb2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "4f4d5a01d49f9755"}, 0x7}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async)
getsockname$packet(r4, &(0x7f0000000980)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f40)=0x14)
sendmsg$nl_route(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="3400290b0000390400"/20, @ANYRES32=r9, @ANYBLOB="2188000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000002040)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002080)=0x14) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r13, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x4000) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r14=>r10, 0x29, 0x5, 0xdb, 0xf, 0x8, @rand_addr=' \x01\x00', @loopback, 0x7800, 0x40, 0x9, 0x5}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r11, &(0x7f0000002e40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e00)={&(0x7f0000002280)=ANY=[@ANYBLOB='x\b\x00\x00', @ANYRES16=r13, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="08000300020000001400020065727370616e300000000000000000006400018008000300000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200697036677265746170300000000000000800030001000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="200001800800030000000000140002006261746164765f736c6176655f310000540001800800030002000000a7fe0200766c616e300000000000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="080003000500000008000100", @ANYRES32=r10, @ANYBLOB="30b37338", @ANYRES32=r9, @ANYBLOB="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"], 0x878}, 0x1, 0x0, 0x0, 0x80}, 0xc831) (async)
sendmsg$nl_route(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x0, 0x7, 0x80, 0x10}, {0x8, 0x6, 0x3, 0xfffffbff}, {0x3ff, 0x1, 0x0, 0x4a6666c5}, {0x5, 0x2, 0x3, 0x5}, {0x3, 0xfe, 0x1, 0x1ff}, {0x9, 0x8, 0x9}, {0x4, 0x2, 0x3, 0x8}]})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f00000000c0)=""/120, 0x78)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x200000000006, 0xfe, 0x7, 0x7ffc1ffb}]})
select(0x40, &(0x7f0000000880)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000008c0)={0x4}, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4050000000000007910ec20d4b1fd9ae4ebcf101e17b1f186b0490000000000"], &(0x7f0000000480)='GPL\x00', 0x5, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x22e, 0x10, &(0x7f0000000600), 0x1dd}, 0x48)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000740)=0x80000000001, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x181643, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000007c0)={0x66666666666689b})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x95)
r4 = socket(0x8, 0xa, 0x0)
listen(r4, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3}, @sadb_address={0x5, 0x5, 0x19, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffd, @private0, 0xfffffffe}}]}, 0x70}, 0x1, 0x7}, 0x400c010)
pselect6(0x40, &(0x7f0000000640)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000680)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f00000006c0)={0x0, 0x3938700}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0xfffffffffffffffd, 0x0)
socket$packet(0x11, 0x3, 0x300)
executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000)
mmap(&(0x7f0000080000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x89287000)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32877000)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus/file0\x00', 0x831010, &(0x7f0000000880)=ANY=[], 0xfd, 0x150a, &(0x7f00000015c0)="$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")
geteuid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x2200000, &(0x7f0000000940)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@acl}, {@acl}, {@debug}, {@delalloc}, {@nogrpid}, {@noblock_validity}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000009c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000f40)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000f80)='./bus\x00', &(0x7f0000000fc0), 0x8, &(0x7f0000001000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000001040)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000001080), &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000011c0)=ANY=[], 0x1, 0x291, &(0x7f0000001200)="$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")
openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101a42, 0x34)
connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000002c0), 0x4000087, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYRESOCT=r3, @ANYBLOB="6bd5a993ee18fe95829b1e2a311af412f9f741f1299a78a5a718dcf0219b66dbd561182d7ccf11abcda726a4f6e5ee6147cf878820c458ea67a20174f7c0b81ec3e0630da12d2ed83e7c2602d4972b314102d77a041bf848c8b8d8ac4629d6dc", @ANYRES64=0x0, @ANYRES64, @ANYRESHEX=r3, @ANYBLOB="add9edd5a7c734e34d1ccc322f579fbf23b36fe21280391863915fdfc31c57aa3726e065eb622be2b47a77897f6b8f9ab3de8647c283d296330ec5853ca7ec937fcbc77af988973fe34aa9fe10a8804cf5e226132f6ac56362d704e12097685b0fe8ec61e12bd07fc7ef96bf7be3d5dd21644241071dade8257f2f8645cf4489e8d46e", @ANYRES8=r1], 0x1, 0x313, &(0x7f00000004c0)="$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")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
executing program 1:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x4004040)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x8840, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000005c0)={0x0, 0x5, 0x1, 0x3, 0x7, "ff00f70000e102005200002000"})
r1 = syz_open_pts(r0, 0x141601)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000600)={0x6, 0x7fffffff, 0x0, 0x3, 0x14, "802499266727e8f583430e2da1bf3a0ae404d1", 0x3, 0x7})
write(r1, &(0x7f0000000640)="d5", 0xfffffedf)
ioctl$KDENABIO(r1, 0x4b36)
executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0xc)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, r1, 0x16, 0x0, @void}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = epoll_create(0x7)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f0000000100)="108e7a61eb7cbe25f8cc98411e8bcef30be64efc1b200bfc585809c3587ea20c1559404a708d98761196714b55bb0528c60d868e507611683d72873560754dd6e24d207ccfbb49a72357086908d0c09a766237e76692ad0e51917ea95d6a99e669a240d6aa4456a9e640bbe2c752cc1677db81bb4cbfcb3ddb126eeaadd0653900922e6ca80d66", &(0x7f00000001c0)=""/96, &(0x7f0000000240)="96a3d7fe8dba035c3044afebe572c5fb2b1e0c443651ac0347c29169ff4a", &(0x7f0000000280)="d36a32f987837703e06eae750801cc36b3f67e54a027f6e14c9d4b8a7d9fd20a2b31cc7e6a94f7316ee401172be2f9fb5357d4be5635960499896cf70293b531b2816993b1378081b48d0ada8e88ededacc630507f962235b1aab7a9141b449cc846bea6e0056831b4efddaafc9532326292649caf859b42bee517fad99fdfa8", 0xd, r1}, 0x38)
r4 = epoll_create1(0x0)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x6})
mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='xfs\x00', 0xc8, 0x0)
r6 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r7=>0x0}, &(0x7f00000008c0)=0xfffffffffffffe00)
getgroups(0x7, &(0x7f0000000600)=[0x0, 0xee00, 0xee00, 0x0, 0x0, 0xee00, <r8=>0xee00])
setresgid(r6, r7, r8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f00000000c0)={0x2010})
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000005f80), 0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000680)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r10, 0x1, &(0x7f0000000700)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r11 = userfaultfd(0x1)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x100})
readv(r11, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/114, 0x72}], 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x40004)
syz_open_dev$tty1(0xc, 0x4, 0x1)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffbd3, 0x57}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0x14)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x800)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x3, 0x4, 0x1000, 0x8, 0x800, 0x15, 0x87c9}, 0x1c)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2b0, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="52ae912f4cdc4149c0220e1a9d5cc370"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4c7e05ef975a48ac41628eafd7ea37d763440955517aa2bf998e0080d133445b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b8c2aca32bfaf568b0d43ac90f748af2993106f460e05ecb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d28d126452ed094c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c0cf4b174927d4d3df9411f5d488f82d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="26126bf5be3fb4c0fd36f8096ad6a985"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "af4b681a30ecfa82"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "833f38300e8638ee"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fe2e137d1d5f43cddde75f524737b49e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4c7d6eba5687b91f8d8e3436ef1c6b13"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b0d16c64f67380d2eb7eb88afc5e7ac1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1df664200333a9fab8e284fee436f9820cd4c9b843f8a7ee"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e1998c61b863fbb9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "feafd433e8d6eff2"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f236943b25b14b2ef55c450c3497be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c782f78a5a3a8032"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x452}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b26d3c59966737a47ded14daeaa0360c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf9243207ea9e1ee"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40000000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3a1aa66af87f9b9"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d5dbbcb81aacfb7c4ad62df9140f8b91"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "46d3eb85947761c8"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9a0bdd1bb9a2a66e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x87}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b4bf175d3e9a3149b7b53530410a8020"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2a4e68bb93dcff3cc0d321beefd1449a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9f37cb7f712af1d09e77f6c9d5893666ccc08a158ae838514faaedb92163cc52"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8e5f421ce7245df4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bed305bad478bdd50ed3286688fc0469"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="838acf239ed8a6f13090618e37c8d0b5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fd713403228a5088ca7f363468c92cae9e354886e119f256"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14b4e3bc195fabcd"}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000580)={<r4=>0x0, "b6a43869c9721c8ab8a6c6d71aeced52"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001580)={r4, 0x7, 0x2, 0x1})
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x18, 0x3f9, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001a80)={0x0, 0x40, 0x7})
r6 = openat(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', 0x4000, 0x40)
ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000001ec0)={0x1, 0xd})
r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000002180)='bpf_lsm_dentry_init_security\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_lsm={0x1d, 0x25, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@x}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x1, 0x6, 0x2, 0x6, 0x0, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x81, 0xb3, &(0x7f0000002040)=""/179, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000002100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002140)={0x0, 0x6, 0xd, 0x73c1}, 0x10, r7, 0x0, 0x0, &(0x7f00000021c0)=[r6], 0x0, 0x10, 0xb6af}, 0x94)
sync_file_range(r5, 0x0, 0x7b1, 0x7)
listen(0xffffffffffffffff, 0x1)
fcntl$setpipe(r0, 0x407, 0x7f)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000022c0)={{&(0x7f0000ff6000/0xa000)=nil, 0xa000}, 0x1})
clock_getres(0x1, &(0x7f0000002300))
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000002340))
ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000002480)={<r9=>r6, &(0x7f0000002380)='${+(}', 0x200, &(0x7f00000023c0)={@_ha_fsid={[0x9, 0x1e68d6f4]}, {0x0, 0x200, 0x9, 0x5}}, 0x5, &(0x7f0000002400), &(0x7f0000002440)})
ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f00000024c0)={0x7, 0x10})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002840)={r8, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000025c0)=[0x0, 0x0], &(0x7f0000002600)=[0x0], 0x0, 0xa0, &(0x7f0000002640)=[{}, {}], 0x10, 0x10, &(0x7f0000002680), &(0x7f00000026c0), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000002700)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002900)={'gretap0\x00', &(0x7f0000002880)={'gre0\x00', <r12=>r3, 0x80, 0x10, 0x0, 0x80, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0xcb, 0x0, 0x5, [0x4, 0x2, 0x7, 0x5, 0x4, 0xe]}, @noop]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002ac0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002a80)={&(0x7f0000002940)={0x11c, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
unshare(0x880)
ioctl$BTRFS_IOC_SPACE_INFO(r9, 0xc0109414, &(0x7f0000002b00)={0xf64, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
getsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000019c80), &(0x7f0000019cc0)=0x4)
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000e, 0x411d132, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mremap(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000780)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000007c0)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000800)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000840)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @sack_perm, @sack_perm, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000cc0)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000d00), 0x4)
shutdown(r0, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0)
syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000200)='./bus\x00', 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB='rodir,shortname=lower,uni_xlate=0,iocharset=cp850,codepage=936,utf8=1,gid=', @ANYRESHEX, @ANYBLOB="2c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c757466383d312c757466383d312c696f636861727365743d69736f383835392d332c756e695f786c6174653d312c00e3c1b8b335e1c1da7eccc488bca3b6e30503d7f881f3374399f93bcd78a330326f3c77caf69ea50039c0637dde26c07ef51766a28ba3263118109e02a7c668929085dff99528b8839b3036ce554e314c64a86c977db45e77711a1b1b2e7889f1993076bf26747bfef497a5ccccdd13ed"], 0x1, 0x36a, &(0x7f0000000940)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x9, 0x9, 0x3ff, 0x1, 0x2}})
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000280)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendto$inet(r1, &(0x7f00000008c0), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000900))
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}})
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
executing program 2:
syz_ublk_setup_io_uring(0x22ef, &(0x7f0000000000)={0x0, 0xc7af, 0x0, 0x0, 0x198}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r0=>0x0)
munmap$IORING_OFF_SQES(r0, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x305000, 0x0)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000580)={0x0, 0x1, 0x14, 0x1f, 0x1a0, &(0x7f0000000180)="ccdd778792bdc39702d5c53186ad1ac5def274c133664763eba5095db686ea1410d3b3e7c6b23783ccd1896747245732f5f3aa05c409f7864c18e66ab7258a242615cac1c09db1154d7c817a99e2e88e5cc981018431d9723b2c55a972722d2ff06f92417cee383e261c3806bdb7fe780bd2096d44148dd3b573bba0f587d51ee233cc300aa8cdbe8533c9a9c7fe1838691e39b391ed0fa7f848bd77c5e2f608c763d1176ad44f5f6551317dab22f63b8db0a7a63567d12e9ca31b003f9b99c0e6d234277d9b8d2b577231dbea89b412f9ce4dabd9df7e281cbcd9848d656872730b3763dd4237dcfdf3d01bafb515624893d6dfcb19ac67b3240b6c040c467d7dbf2cea0f69f45c4b11bef988aa3715e436168445def4829f60178657d459c6820e03f0c38c7d723b179c0292939039ac35033c1eea5336a8c9f1d3c4dc88fcc31f66c1e75f4ef36d9dc7b8b5040428ef360aedfbe77e59003db87f6aa800323558202fc05ad2554d827de3a73f2b03b997799f976fed3065081a3684037b4b6e06b513bd1e991c3cd98a3bb5312a547f2eeaa10f030c9da9538c317773a03e4ee6370cb4bcc561a9caf34d547b8d12913e7eb414dd16a7f48c346ef3998c4e5b9d182ef799f74729cb8dec63ad4625d7bb6e954ff2ed736450073394439fdee280ceb92be0807acb96822b6842d2a0c5be98c3a30fdd906d342903e3d36e5d0dad3294d174f1a1b5e79b053284bc9907525720f0391bc33ea6d220780717938de97f864aa277f96e7e429f0fab0ea09fffa5dc5ce6df649b3fb4d448d10dd5acc3573bb517166aab5b2baaa8daca1244ae27de96b0a8f87869c51d10e799d10566bd9cabbe7f812fc56f3f2c846ddf25a91a539607bdbdfb57e0336a92533cd76c7e4052cff2b901ee70625adb35703e180c7a1cb4a5e634224342613f56516a4af0aa3ec0185a1a2acd26135f01fd08d0e8bc3e8d2e018dfe7366bf82aa7d81237ffaa24c1b3cc32c93f126f2119820650a5c43846cacbae46b827338cc2858a4eb793e1cb073a62ef9ce32ad7b09fd1b3460a73b8778c2880d480e5e4a9a0496d50298f26f42e29fb2d526da0efc0eb45368fba2a38d44d0e7daa0cb44a26c3b7ad4bb7e6472356f82bcaa2d191061da955866c9cb94b54803d005771d82acd662831e93c2dd576b5b64895e33556883a22354627ec98fb7c830b6ee5748d1719936488a0cf30936634dc748fc7e071ceb037b9f401ee1474bc613864bf0ed289adee0137af9d5975972c6facc0072dba99d2aa5069b83f3c2343fe3d8f890a5daf4da6aa71383fcdbf946666845887437eb91bd1a1897d3a938ce149236562800a81710e37c830ae21ba6eb856414fbc3176a907d8144de6318f5a13d7f9fd678c77bdca0a986442020b49e8d4c574345fb7c4bba5ac733607041d2ecc9"})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_STATFS(r2, &(0x7f0000002640)={0x60, 0xfffffffffffffff5, r3, {{0x3, 0xffff, 0x9, 0x5, 0x0, 0xf, 0x9339, 0x3ff}}}, 0x60)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000026c0)={0xa, 0xb02d, 0x1, 0x8000, 0x15, "e75b712127eaef93"})
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x8, 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @typedef={0x2}]}, {0x0, [0x5f, 0x0, 0x2e]}}, &(0x7f0000002800)=""/152, 0x45, 0x98, 0x0, 0x3}, 0x28)
pwrite64(r4, &(0x7f0000002900)="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", 0x1000, 0x931)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000003900)={0x2, {0x2, 0x4, 0x66aa, 0x0, 0x7, 0x3}})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000003940), &(0x7f0000003980)=0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00), 0x100)
fstat(r1, &(0x7f0000003a80))
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000003b40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003b00)={0x2f}})
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000003b80)=0x1, 0x4)
r7 = accept4$tipc(r5, &(0x7f0000003bc0), &(0x7f0000003c00)=0x10, 0x0)
getsockname$tipc(r7, &(0x7f0000003c40)=@name, &(0x7f0000003c80)=0x10)
r8 = syz_open_dev$mouse(&(0x7f0000003cc0), 0x9, 0x408240)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003d00), 0x200000, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000003d40)={0x7, 0x0, [{0x80000001, 0x80, 0x3, 0xa, 0x1000, 0x6000000, 0x7f}, {0x80000000, 0x2, 0xf, 0x3, 0x6, 0x5, 0x4}, {0xc0000001, 0x10001, 0x1, 0x40, 0x0, 0x3, 0x9f2982b0}, {0x80000000, 0x9, 0x0, 0x2, 0x0, 0x32, 0x1}, {0x80000000, 0xd4d, 0x0, 0x3, 0x8, 0x8, 0x36b5}, {0x6, 0x6, 0xe, 0xfffffff8, 0xbb, 0xb4c, 0x2}, {0xa, 0x665, 0x7, 0x6, 0x3, 0x2, 0x1}]})
pipe2$watch_queue(&(0x7f0000003e80), 0x80)
execveat(r8, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f40)={[&(0x7f0000003f00)='E:\x00']}, &(0x7f00000041c0)={[&(0x7f0000003f80)='\x00', &(0x7f0000003fc0)='/dev/kvm\x00', &(0x7f0000004000)='\xb7\x00', &(0x7f0000004040)='\x00', &(0x7f0000004080)='trusted.overlay.redirect\x00', &(0x7f00000040c0)='trusted.overlay.redirect\x00', &(0x7f0000004100)='\x00', &(0x7f0000004140)='/dev/ptmx\x00', &(0x7f0000004180)='.).\'{.^\x00']}, 0x1000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000052c0)={r4, 0x20, &(0x7f0000005280)={&(0x7f0000004240)=""/4096, 0x1000, 0x0, &(0x7f0000005240)=""/55, 0x37}}, 0x10)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000005300)={0x0, "9b5b5fd9cf280771a244094ba237b9b8"})
syz_clone(0x80200, &(0x7f0000006300)="bc668bc405e2921bb292de61eae3f0588ba0c69535a87f7ab6eee19d1e5306e63ec7e3f29fb3e44ee6240436a6e9489ee7e9480abb6a7160f58db2fbde8a8a11a0969387fc19b82a90fa3a830570f84097941316e728302c7436d003d3f943f776cec52c35c7e6129f0cfd726f075e0743ebb3c782e11c933d55238e1051c53af1ae85cffbd27e0fc298285cf32c1b25695d5df055c15d82ec16fa20400832657cd584d0ed0fc4bbb56e6646", 0xac, &(0x7f00000063c0), &(0x7f0000006400), &(0x7f0000006440)="0b3db89657f55e04a4a88f03fd99ddb752325447624d6631c41349")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006480))
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000440)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_del_work
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 30, 30, 30, 4, 22, 21]
detailed listing:
executing program 1:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x4004040)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x8840, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000005c0)={0x0, 0x5, 0x1, 0x3, 0x7, "ff00f70000e102005200002000"})
r1 = syz_open_pts(r0, 0x141601)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000600)={0x6, 0x7fffffff, 0x0, 0x3, 0x14, "802499266727e8f583430e2da1bf3a0ae404d1", 0x3, 0x7})
write(r1, &(0x7f0000000640)="d5", 0xfffffedf)
ioctl$KDENABIO(r1, 0x4b36)
executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0xc)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, r1, 0x16, 0x0, @void}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = epoll_create(0x7)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f0000000100)="108e7a61eb7cbe25f8cc98411e8bcef30be64efc1b200bfc585809c3587ea20c1559404a708d98761196714b55bb0528c60d868e507611683d72873560754dd6e24d207ccfbb49a72357086908d0c09a766237e76692ad0e51917ea95d6a99e669a240d6aa4456a9e640bbe2c752cc1677db81bb4cbfcb3ddb126eeaadd0653900922e6ca80d66", &(0x7f00000001c0)=""/96, &(0x7f0000000240)="96a3d7fe8dba035c3044afebe572c5fb2b1e0c443651ac0347c29169ff4a", &(0x7f0000000280)="d36a32f987837703e06eae750801cc36b3f67e54a027f6e14c9d4b8a7d9fd20a2b31cc7e6a94f7316ee401172be2f9fb5357d4be5635960499896cf70293b531b2816993b1378081b48d0ada8e88ededacc630507f962235b1aab7a9141b449cc846bea6e0056831b4efddaafc9532326292649caf859b42bee517fad99fdfa8", 0xd, r1}, 0x38)
r4 = epoll_create1(0x0)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x6})
mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='xfs\x00', 0xc8, 0x0)
r6 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r7=>0x0}, &(0x7f00000008c0)=0xfffffffffffffe00)
getgroups(0x7, &(0x7f0000000600)=[0x0, 0xee00, 0xee00, 0x0, 0x0, 0xee00, <r8=>0xee00])
setresgid(r6, r7, r8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f00000000c0)={0x2010})
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000005f80), 0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000680)=<r10=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r10, 0x1, &(0x7f0000000700)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r11 = userfaultfd(0x1)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x100})
readv(r11, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/114, 0x72}], 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x40004)
syz_open_dev$tty1(0xc, 0x4, 0x1)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffbd3, 0x57}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0x14)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x800)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x3, 0x4, 0x1000, 0x8, 0x800, 0x15, 0x87c9}, 0x1c)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2b0, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="52ae912f4cdc4149c0220e1a9d5cc370"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4c7e05ef975a48ac41628eafd7ea37d763440955517aa2bf998e0080d133445b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b8c2aca32bfaf568b0d43ac90f748af2993106f460e05ecb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d28d126452ed094c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c0cf4b174927d4d3df9411f5d488f82d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="26126bf5be3fb4c0fd36f8096ad6a985"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "af4b681a30ecfa82"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "833f38300e8638ee"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fe2e137d1d5f43cddde75f524737b49e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4c7d6eba5687b91f8d8e3436ef1c6b13"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b0d16c64f67380d2eb7eb88afc5e7ac1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1df664200333a9fab8e284fee436f9820cd4c9b843f8a7ee"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e1998c61b863fbb9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "feafd433e8d6eff2"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f236943b25b14b2ef55c450c3497be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c782f78a5a3a8032"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x452}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b26d3c59966737a47ded14daeaa0360c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf9243207ea9e1ee"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40000000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3a1aa66af87f9b9"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d5dbbcb81aacfb7c4ad62df9140f8b91"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "46d3eb85947761c8"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9a0bdd1bb9a2a66e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x87}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b4bf175d3e9a3149b7b53530410a8020"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2a4e68bb93dcff3cc0d321beefd1449a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9f37cb7f712af1d09e77f6c9d5893666ccc08a158ae838514faaedb92163cc52"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8e5f421ce7245df4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bed305bad478bdd50ed3286688fc0469"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="838acf239ed8a6f13090618e37c8d0b5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fd713403228a5088ca7f363468c92cae9e354886e119f256"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14b4e3bc195fabcd"}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000580)={<r4=>0x0, "b6a43869c9721c8ab8a6c6d71aeced52"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001580)={r4, 0x7, 0x2, 0x1})
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x18, 0x3f9, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001a80)={0x0, 0x40, 0x7})
r6 = openat(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', 0x4000, 0x40)
ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000001ec0)={0x1, 0xd})
r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000002180)='bpf_lsm_dentry_init_security\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_lsm={0x1d, 0x25, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@x}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x1, 0x6, 0x2, 0x6, 0x0, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x81, 0xb3, &(0x7f0000002040)=""/179, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000002100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002140)={0x0, 0x6, 0xd, 0x73c1}, 0x10, r7, 0x0, 0x0, &(0x7f00000021c0)=[r6], 0x0, 0x10, 0xb6af}, 0x94)
sync_file_range(r5, 0x0, 0x7b1, 0x7)
listen(0xffffffffffffffff, 0x1)
fcntl$setpipe(r0, 0x407, 0x7f)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000022c0)={{&(0x7f0000ff6000/0xa000)=nil, 0xa000}, 0x1})
clock_getres(0x1, &(0x7f0000002300))
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000002340))
ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000002480)={<r9=>r6, &(0x7f0000002380)='${+(}', 0x200, &(0x7f00000023c0)={@_ha_fsid={[0x9, 0x1e68d6f4]}, {0x0, 0x200, 0x9, 0x5}}, 0x5, &(0x7f0000002400), &(0x7f0000002440)})
ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f00000024c0)={0x7, 0x10})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002840)={r8, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000025c0)=[0x0, 0x0], &(0x7f0000002600)=[0x0], 0x0, 0xa0, &(0x7f0000002640)=[{}, {}], 0x10, 0x10, &(0x7f0000002680), &(0x7f00000026c0), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000002700)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002900)={'gretap0\x00', &(0x7f0000002880)={'gre0\x00', <r12=>r3, 0x80, 0x10, 0x0, 0x80, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0xcb, 0x0, 0x5, [0x4, 0x2, 0x7, 0x5, 0x4, 0xe]}, @noop]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002ac0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002a80)={&(0x7f0000002940)={0x11c, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
unshare(0x880)
ioctl$BTRFS_IOC_SPACE_INFO(r9, 0xc0109414, &(0x7f0000002b00)={0xf64, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
getsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000019c80), &(0x7f0000019cc0)=0x4)
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000e, 0x411d132, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mremap(&(0x7f0000221000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000780)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000007c0)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000800)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000840)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @sack_perm, @sack_perm, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000cc0)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000d00), 0x4)
shutdown(r0, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0)
syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000200)='./bus\x00', 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB='rodir,shortname=lower,uni_xlate=0,iocharset=cp850,codepage=936,utf8=1,gid=', @ANYRESHEX, @ANYBLOB="2c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c757466383d312c757466383d312c696f636861727365743d69736f383835392d332c756e695f786c6174653d312c00e3c1b8b335e1c1da7eccc488bca3b6e30503d7f881f3374399f93bcd78a330326f3c77caf69ea50039c0637dde26c07ef51766a28ba3263118109e02a7c668929085dff99528b8839b3036ce554e314c64a86c977db45e77711a1b1b2e7889f1993076bf26747bfef497a5ccccdd13ed"], 0x1, 0x36a, &(0x7f0000000940)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x9, 0x9, 0x3ff, 0x1, 0x2}})
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000280)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
sendto$inet(r1, &(0x7f00000008c0), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000900))
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}})
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
executing program 2:
syz_ublk_setup_io_uring(0x22ef, &(0x7f0000000000)={0x0, 0xc7af, 0x0, 0x0, 0x198}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r0=>0x0)
munmap$IORING_OFF_SQES(r0, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x305000, 0x0)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000580)={0x0, 0x1, 0x14, 0x1f, 0x1a0, &(0x7f0000000180)="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"})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_STATFS(r2, &(0x7f0000002640)={0x60, 0xfffffffffffffff5, r3, {{0x3, 0xffff, 0x9, 0x5, 0x0, 0xf, 0x9339, 0x3ff}}}, 0x60)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000026c0)={0xa, 0xb02d, 0x1, 0x8000, 0x15, "e75b712127eaef93"})
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x8, 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @typedef={0x2}]}, {0x0, [0x5f, 0x0, 0x2e]}}, &(0x7f0000002800)=""/152, 0x45, 0x98, 0x0, 0x3}, 0x28)
pwrite64(r4, &(0x7f0000002900)="f167774b6e292fb61b95e36e19f200587dee37fbeb5d9063083398804b49cea48426d06ea0a4b1c4543184540f4abf4a530fe6771c97f8bc0bd5c47b530917c6903bfbbf5f061e378082ca5d721d7a164733f9023f06cfc456951946f4caf5560313163bd3480498045dc6f816f49a15fd4c07d4d683ba1d9901096eef3d64fddf09ff71884ef7a0f4ecd28ea3d3c15217248a869dcf8194eef500772938fc65ed6bc1330a9f69bfdf54596552c78e40eeccfbb1766c56e196e135dd5e3f8b97498d82ea2f219229cd255d082de1e17a4f5caa2acea4762dd704467afa9a377a3066bbecf8cd7232e981a1cc23a22273a02bff233446d1a8c2cde7c850776dce327f41d6ae3ca92ecd28896279261d9a8008775ac8f23412d2c28068d32eeec370e77eb47d303cf37bfdd5d600ea20476b0002711726e9d1e409cf12a0668d0545d05aa1d1e3ca592c4ca8b045433e3fafada898f0a2bbf399441e3b394aa0c50127e193660e1ddc6bc54842b08df2d8a2040701082b1ac2e48c43b71374ce6bdec4f6f99e99bf5d34994b156a806df7be17f04207b3876b0c06c3eb72e4185c58aa20afb6af50f0d426eebcb82cd313d986b1c567bbc926ba93c8e1c4edf01fc95e3048fc1149adbdecc01167c5c62ecdf0811b99cc4579843e4784f31d75e670131c223f072ee2d01ad816f3bd644ed9e5a7cb9eef7c0f9df88b97e9ca5aa6e445ae6243b18feb95a3ad1f36fcbd7eb0dc9081218c43bc058a657d1a5a97993030dd463a9c56725e80bca8c5a4c229d85644c833ede47eb26f28e852999672dce721c547e4f070534413bf0a37ae7b890266ff77567824cdfc9078a5e01b2fa626f916c22059d7897cb3382e39a31eb33823cdf0f67225100345938c7f3176ff7372a7a5baf06ef368e15301d3bf227bc43b13919755ca32f8159f1f8247fe32bad7504826eb07edd6643508ecfb608f51ad60b58673a786ee6de287ae83d627f0c1840d6c54ce83808bded55f02ed6cd13307ccb62ee3aec75aaf4ecbc3a537cc610969916d3a6557cdea58b56f8c0afa9ab9f1c09c1dd8d092024eef2352b99b18b26b08af5b64f65ede5e770b4873dff624cf999326ccca800b5ec294070c33c7bfa2b3b610e16293925efcd4e6f5da5aabeab0ca2d77a4fab643fd1ff29093433d95a520ceff533b4c8a740c379edc0b560b188cb33e3a0d64377705e1facbd8143c2085464d565f099fc27a9c381e81c108f6322b9909e586661cfc130632eca0fd2deaed22e5d9457dadc69d7601e48ace8f8bd477c27a82b98fd805f3d5660df75bf08217daa95be35dc2f6acdb52c7f30419844c0c129d80a8b2fc8871e4136fd362de6cce311d6f798726da2ef1cab0272e395bc6389f53a4cae1b163cbd1a08b13627df9ddc530bcc381bc280f69bdf0fc7a4129433fcf7011c7372ba9516842b17043c68d4b2f2103fdd86a60806e352e69ee2cd722cc4f96d4a7a428f236194650128cdbe7d124f061f78d4e618ce82c3b4f28e786afd4e245fa12fd99b219939a4850bbed73a74bf9d8385fe22d12b5bdc68aeb2416e51bf07c4c3f4e089a042156eb5a4460f5f6b6be8b4cfaa17fdc8bd0b2d47a64365baacc1565bb5d5f6891ab55b2ab2b2846d56a4bfa1f8ee2ac9c5c4bcd2cde1420a38598c72b6ebeffdf198b8185b9680a610759d5dd647080bd7ea7534e3bfe8c681ca5f114e84cdca201ff4540d623c66635ab3ed50ae1f872e2b162bd9da1f086994dd59784a09621a23d193a7212c746a6ed765c69f656465a9399fc4777bbf63b9378578fa8f8ea51a55f4b2ccad1a119e58b5fd7dce9375eb1a815fab2f82aed9aef6decc204b1ea7a0bad82cf3c03a6daabf4a964fcf5186d3b2ab394c9282d5897b8f2fa2292931c133f3b1f61ed3f94ccef5a4e366c6adb5209dd97f90494f0eacaeadc6e19b325694a9b222e8ed073710ee89bc0d0ebd7f7b806f4fc03e9854beeae5890beee63453276381d518526c1506c278de036a50cf6a84b1bd768ae8890c5aeb0abf0979758a1eb4bbe8091efd244fb713e1a27efb9fcbe49052ce06e12fdeab6ce14deb1f210b69ac5879d66fa0a1b7876ace786ac5dd337cd98224c3b03f5ce1b58bcf7df6b643e67887ed8a42610750ee41dbfd3c94a18ba1c0cfa6eb859796e2103ef7c590a6d67d18d5b6b5ca92d45f66343dff4dec75912fdf9fa333abb550690cf188f81d8d359df649f951bfb607823195e524db0ee6671ac4c80bdc679eef6326ce7761686503cc254a8ef7564bbd65ce2b04de69919e9e534310bbf7932f826812be194d26ff47158ff19455c468b48359932f6d532f865a7272eecd35cc7bfc9dcf656f39137e7d8d6db93dfe6d5eaf507587d176483c07369ffc1d630f193809df344f30fc890b5a27a6b7736dcbcae3dbddcc70bbfdff86d481cc82a746b50aef374079079da0f92da758780e85815286c6167dbed58c45a73ad23cc5f92b2d5a4a8a1189241da1daf922b6626e9d6f38b08c4004fa9466326f08e9966a2793bd4ac1f13f2e95fde3817f81674522a7be6738a0cc3a244b8384c2e453ca41903bb44fc0551d204db2bad9e07684d6cb97f0872202f77e9402b3d9d9d925d8b711a9357dbdccd1543d603210c88f27ae3a26c5219c99451fda1d9c60a1a2289ad81ee007ea449bc111a431e2bdb0d2034230c826c5e625d1b04cb30d75138ca04d6359dafdeec0f0c2423054098f1725ea61e834c28efdad2f96d26fcfa1526146846bdab30721ac29f6c2cb182fb711797f8d8e4f9937b9110931f9c9f2657d06b4bac3a7ccdc8942e18089f212c7245aaf65e8ddb678867229864eac61bce4e46bee68d9c3ec5ece853e3c9d8553afdf07b114fa0220789ce5b83c3fe7f8ac13e498855f022ee41d5640ab5891f9f3885d9d8ff8104e74994062bd6c86763e116abfa2773beac6030aff915cbe802ec3a88dc1f518cd6f9aa47055afe48b9d1f8e790f0f8d39dfab53921ba5d6627d589d4af63d64a856ebc452525fb044c8451093edf7534f1fa2ae6d02a4dfa166875da01fd789f7cf7cd704aaefaf49ca20df66562d1fef77917644353f0b08b17b5c59b0f5c2a6cccd29d12fb7205d8e9742c6fc00f7d98c9475e28fd59ddc573fb025fa79164a32682199f24d8042752ac6967cd55529395d76ddaaae5d5c089c7417ea4a024f5f6810175cf5feb09699b9e879575b33e63fb027f3ad5bc2327cc5d22694d10a7c5aebe83d45d58f32e41e48ad9e056c481f545915f7facbc479e06554735e88f365e9d8e7e21dace92ad8d6951d99196c1bf1b87142ede90cf427d86e8803818200d547b58a87dbda695dca06f612caa858bd5ae2c43d53c45d9bce7df993f36c4ea44d3875dd6a2fb82a9e8a14d3529be85b45c9a77267f32f7db160181b9ec2a46582b0cce67fed2ad72e052d07c7aa8a46b77b3fc66ae1caa7f1794d9bb3e22b6b501d6b17c21a5aa0ca178dc716d43cff4aa9aedede97a56c6463855607b3aa20e68431fe28a4662fb8104f04d76be6aa0447a32f8384a5e2ed5c62fb36d976007442be3afda97bf64f05d91af301a1a86410ec0d149b0871febb0844f8638d122fe794ffbd08c6d890852dc68d24731da6f06cfce708b271ac9846c5ce7d51514e23186d67c28934a40d115fd7dbe4f663db0ab931f79890b1b44b962f9b95923064e2ffc2cd68d290a222645240074f01e53aee37bad21a62c419168b678e00f98acabce967a8e6111d80288810b28f5f95da7fc0e27d45ba86aa6347fbdc5b18a2401da0795def20389bf2e191dd93f6ef7f4d053395a899132dfa67525f0a9c676fbb538a6033a6f106777b5f35cd7705e3cd852ab7a5a7077c362e02989f519a69f3a723a8494a6bb6d465ba5207238b63e364aff2164f9f9a36d44432eb44f3e6ece9b4641c391a7c4262c84fba45b35db6ec78f5c5b734c87fe7b03b72d81b41399bbbedcf7e0fa2e1d18cd96fa1f5756156ecc8ecd309ab77f8e5561d0ff480af7201cf48fe71ed600f1bf43efbfc8064760436a12efe1f60bf4febfc5369c9bb4fcbb1711a090f7f7c6f5bbd85edb0a5324f833b0935832ce0bd2bff8c57caca211bc92ac7f0c9756e9abbe716e185968163581e4a846c092bfdfa9b7741b37758fbbb53dad82fb3cf53ed94dc5b80291aa4a1265db84c1d84f277154981675b177e815fbf9f25f892c01fb9ed5094b37fa1163eb1a094f9e3ba037305fcd35ded4d45562fcbdadec2166dee58f91cc1e6d69159a9528755970a2fe4c7f071d3c08f77102b7c9751e15e9afa6674ba51dea45c559576a620349e239fd7a0cb1fd14729cfdd350bef5424bf762c86fa1fc131185232f355ba957bbdcff3d3f3ae15cd1c80fd121e82d3ef8f5a54b324143417f4bca5517d2439751c7871aa277e0de20a85a6f819126250e8401d4f76ee56484db03c225e07d309717b952add6dbdf91823c026fc005163cad2ffe954a1c2d38d75b30ec687f2cffbfa1a3f5eed591a980c2b5bd443e500e46e6681faf57ee19c6d08266e4f5f54f62e09bf5b52f6838731d8801cae6d9c31790a847f9f05f998f413c8b5a15010c10944b81d8e2b2897275c31d92d0a96496318d07ca4306a82ffdcca2f22daae6176809906cd4b44b5c192355578f774ae16d4474d87175638102349670eb430592751c6301ddc3ee803569bfe117f7a6baa95bb6e503a98ecc0d7596b39e1fcb40110867a9143798a52bde9c7cb64f782d14b57b7685e17d35c108748e2d716cad45e4ba01dc898342dc711a3dfec892f522bdf6113f703b7b1ba7f77f0d29dd3c06b5e89029a3417cbbfef042f84bc6913711a9c345a76d5fb2d6b9ee4f5a770cad77088c6b3822c8be7a07ec5a3e6fef7e69a93c4f19fbbb70a3abc9383c0fd47c8203d4ab13062b67617a5eaaeab027c0bba549d9289ce80676bbd0d5b898bbdc0c54e90badf2450e4dd3e244c0c07e7faca4e9ee17336e1bbc83af51af521b0a4cc47d5affbce6dc7fc8dee76b8333dd210c22171ec7b1379de52da7b6e99f7a83b9254f598a5e7bf5931f9ced3ea4687f679afcef27d99b3fb85e1db82ed619779195b9d8fef0c9cb2383d405fdb0d0a3d586167d4d323b5454f6ec584dc4ad1bd2b87e7c537fed8b7e92a416211315908ad7eb224fdd9a46d41d87e1018f6f2e6ef325b10d394e6c66ecc159213f047557e5a43a2864abf05a9a99b327c5cf774c8a1f17707d30d4bee72d48501c58e0b84ccdea84ed1dd54d4b84ab05f70a21e18a1a6fc1552bf135d2ee47c111a873f0e93930ee0aed8c41f88e42026a796e9280286baad8ea7536c1e61166c7ba7157711744844e76fbb6520e43806121759b797a9897f523d900c2ff5ff6398329fc1c6b73c68d694364bed436ce64cfd3d73b8b4f92e4393967cb076acd7947c27daa85e8e9cc9a064fa821a9fed3efe9584a4c86629c9cb8d18907814e60632041d59c6107fbbd6bbd502dbb1d66ba610faa3a62da665691abe36e373aba0921f3432de1fe56b483fc6ad6aaa996307892689ad9a284465a28ec142d9babeb2613729db47e1aaee51f040b8d9a32486c1f6b1c3cdf5443486c10e911e13c7b4aedd16c9d4d3285a462eb5999f5950112e195d5512d605f38134c1317a128b4003220fb55ebddfd227142fccb83c7c690031a8c7baca909dece3a4355d3397c2231d82896ca5dafa464861b5d1e143fc3fdc3aa390c42c97de810907d33ffcbcbb1ea9375540799cf", 0x1000, 0x931)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000003900)={0x2, {0x2, 0x4, 0x66aa, 0x0, 0x7, 0x3}})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000003940), &(0x7f0000003980)=0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00), 0x100)
fstat(r1, &(0x7f0000003a80))
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000003b40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003b00)={0x2f}})
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000003b80)=0x1, 0x4)
r7 = accept4$tipc(r5, &(0x7f0000003bc0), &(0x7f0000003c00)=0x10, 0x0)
getsockname$tipc(r7, &(0x7f0000003c40)=@name, &(0x7f0000003c80)=0x10)
r8 = syz_open_dev$mouse(&(0x7f0000003cc0), 0x9, 0x408240)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003d00), 0x200000, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000003d40)={0x7, 0x0, [{0x80000001, 0x80, 0x3, 0xa, 0x1000, 0x6000000, 0x7f}, {0x80000000, 0x2, 0xf, 0x3, 0x6, 0x5, 0x4}, {0xc0000001, 0x10001, 0x1, 0x40, 0x0, 0x3, 0x9f2982b0}, {0x80000000, 0x9, 0x0, 0x2, 0x0, 0x32, 0x1}, {0x80000000, 0xd4d, 0x0, 0x3, 0x8, 0x8, 0x36b5}, {0x6, 0x6, 0xe, 0xfffffff8, 0xbb, 0xb4c, 0x2}, {0xa, 0x665, 0x7, 0x6, 0x3, 0x2, 0x1}]})
pipe2$watch_queue(&(0x7f0000003e80), 0x80)
execveat(r8, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f40)={[&(0x7f0000003f00)='E:\x00']}, &(0x7f00000041c0)={[&(0x7f0000003f80)='\x00', &(0x7f0000003fc0)='/dev/kvm\x00', &(0x7f0000004000)='\xb7\x00', &(0x7f0000004040)='\x00', &(0x7f0000004080)='trusted.overlay.redirect\x00', &(0x7f00000040c0)='trusted.overlay.redirect\x00', &(0x7f0000004100)='\x00', &(0x7f0000004140)='/dev/ptmx\x00', &(0x7f0000004180)='.).\'{.^\x00']}, 0x1000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000052c0)={r4, 0x20, &(0x7f0000005280)={&(0x7f0000004240)=""/4096, 0x1000, 0x0, &(0x7f0000005240)=""/55, 0x37}}, 0x10)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000005300)={0x0, "9b5b5fd9cf280771a244094ba237b9b8"})
syz_clone(0x80200, &(0x7f0000006300)="bc668bc405e2921bb292de61eae3f0588ba0c69535a87f7ab6eee19d1e5306e63ec7e3f29fb3e44ee6240436a6e9489ee7e9480abb6a7160f58db2fbde8a8a11a0969387fc19b82a90fa3a830570f84097941316e728302c7436d003d3f943f776cec52c35c7e6129f0cfd726f075e0743ebb3c782e11c933d55238e1051c53af1ae85cffbd27e0fc298285cf32c1b25695d5df055c15d82ec16fa20400832657cd584d0ed0fc4bbb56e6646", 0xac, &(0x7f00000063c0), &(0x7f0000006400), &(0x7f0000006440)="0b3db89657f55e04a4a88f03fd99ddb752325447624d6631c41349")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006480))
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000440)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 4, 22, 21]
detailed listing:
executing program 2:
syz_ublk_setup_io_uring(0x22ef, &(0x7f0000000000)={0x0, 0xc7af, 0x0, 0x0, 0x198}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=<r0=>0x0)
munmap$IORING_OFF_SQES(r0, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x305000, 0x0)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000580)={0x0, 0x1, 0x14, 0x1f, 0x1a0, &(0x7f0000000180)="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"})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_STATFS(r2, &(0x7f0000002640)={0x60, 0xfffffffffffffff5, r3, {{0x3, 0xffff, 0x9, 0x5, 0x0, 0xf, 0x9339, 0x3ff}}}, 0x60)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000026c0)={0xa, 0xb02d, 0x1, 0x8000, 0x15, "e75b712127eaef93"})
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x8, 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @typedef={0x2}]}, {0x0, [0x5f, 0x0, 0x2e]}}, &(0x7f0000002800)=""/152, 0x45, 0x98, 0x0, 0x3}, 0x28)
pwrite64(r4, &(0x7f0000002900)="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", 0x1000, 0x931)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000003900)={0x2, {0x2, 0x4, 0x66aa, 0x0, 0x7, 0x3}})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000003940), &(0x7f0000003980)=0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00), 0x100)
fstat(r1, &(0x7f0000003a80))
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000003b40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003b00)={0x2f}})
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000003b80)=0x1, 0x4)
r7 = accept4$tipc(r5, &(0x7f0000003bc0), &(0x7f0000003c00)=0x10, 0x0)
getsockname$tipc(r7, &(0x7f0000003c40)=@name, &(0x7f0000003c80)=0x10)
r8 = syz_open_dev$mouse(&(0x7f0000003cc0), 0x9, 0x408240)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003d00), 0x200000, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000003d40)={0x7, 0x0, [{0x80000001, 0x80, 0x3, 0xa, 0x1000, 0x6000000, 0x7f}, {0x80000000, 0x2, 0xf, 0x3, 0x6, 0x5, 0x4}, {0xc0000001, 0x10001, 0x1, 0x40, 0x0, 0x3, 0x9f2982b0}, {0x80000000, 0x9, 0x0, 0x2, 0x0, 0x32, 0x1}, {0x80000000, 0xd4d, 0x0, 0x3, 0x8, 0x8, 0x36b5}, {0x6, 0x6, 0xe, 0xfffffff8, 0xbb, 0xb4c, 0x2}, {0xa, 0x665, 0x7, 0x6, 0x3, 0x2, 0x1}]})
pipe2$watch_queue(&(0x7f0000003e80), 0x80)
execveat(r8, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f40)={[&(0x7f0000003f00)='E:\x00']}, &(0x7f00000041c0)={[&(0x7f0000003f80)='\x00', &(0x7f0000003fc0)='/dev/kvm\x00', &(0x7f0000004000)='\xb7\x00', &(0x7f0000004040)='\x00', &(0x7f0000004080)='trusted.overlay.redirect\x00', &(0x7f00000040c0)='trusted.overlay.redirect\x00', &(0x7f0000004100)='\x00', &(0x7f0000004140)='/dev/ptmx\x00', &(0x7f0000004180)='.).\'{.^\x00']}, 0x1000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000052c0)={r4, 0x20, &(0x7f0000005280)={&(0x7f0000004240)=""/4096, 0x1000, 0x0, &(0x7f0000005240)=""/55, 0x37}}, 0x10)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000005300)={0x0, "9b5b5fd9cf280771a244094ba237b9b8"})
syz_clone(0x80200, &(0x7f0000006300)="bc668bc405e2921bb292de61eae3f0588ba0c69535a87f7ab6eee19d1e5306e63ec7e3f29fb3e44ee6240436a6e9489ee7e9480abb6a7160f58db2fbde8a8a11a0969387fc19b82a90fa3a830570f84097941316e728302c7436d003d3f943f776cec52c35c7e6129f0cfd726f075e0743ebb3c782e11c933d55238e1051c53af1ae85cffbd27e0fc298285cf32c1b25695d5df055c15d82ec16fa20400832657cd584d0ed0fc4bbb56e6646", 0xac, &(0x7f00000063c0), &(0x7f0000006400), &(0x7f0000006440)="0b3db89657f55e04a4a88f03fd99ddb752325447624d6631c41349")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006480))
executing program 2:
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000440)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 21]
detailed listing:
executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000440)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-openat$ptmx-ioctl$TCSETAF-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setaffinity-faccessat-madvise-socket$inet6-sendto$inet6-ptrace$ARCH_SHSTK_UNLOCK-socket-socket$nl_route-sendmsg$nl_route-sendmsg$nl_route_sched
detailed listing:
executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000440)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x8000)
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents
detailed listing:
executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 1 programs left: 

executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)


bisect: trying to concatenate
bisect: concatenate 1 entries
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
bisect: concatenation succeeded
found reproducer with 22 syscalls
minimizing guilty program
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) (async)

program crashed: KASAN: use-after-free Read in l2tp_tunnel_get_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp-socket$inet6_udp
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents-socket$pppl2tp
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO-getdents
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)
getdents(r3, &(0x7f00000000c0)=""/44, 0x2c)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE-ioctl$LOOP_SET_DIRECT_IO
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xf2)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat-read$FUSE
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS-openat
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID-ioctl$FS_IOC_SETFLAGS
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000)

program crashed: KASAN: use-after-free Write in pppol2tp_release
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x40047452, 0x0)

program did not crash
testing program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x40047452, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=41.30136897s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
program crashed: KASAN: use-after-free Write in pppol2tp_release
simplifying C reproducer
testing compiled C program (duration=41.30136897s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
program crashed: KASAN: use-after-free Write in pppol2tp_release
testing compiled C program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing compiled C program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing compiled C program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing compiled C program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing compiled C program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
testing program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)

program crashed: KASAN: use-after-free Write in pppol2tp_release
validation run: crashed=true
testing program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)

program crashed: KASAN: use-after-free Write in pppol2tp_release
validation run: crashed=true
testing program (duration=41.30136897s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-sendfile-syz_clone3-ioctl$EXT4_IOC_GETFSUUID
detailed listing:
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0)

program crashed: KASAN: use-after-free Read in pppol2tp_sock_to_session
validation run: crashed=true
reproducing took 34m55.345922197s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 net/l2tp/l2tp_ppp.c:156
Read of size 4 at addr ffff888110576400 by task syz.2.17/401

CPU: 1 PID: 401 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
Call Trace:
 __dump_stack+0x21/0x24 lib/dump_stack.c:77
 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118
 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:435 [inline]
 kasan_report+0x100/0x140 mm/kasan/report.c:452
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report_generic.c:308
 pppol2tp_sock_to_session+0x1a0/0x1b0 net/l2tp/l2tp_ppp.c:156
 pppol2tp_release+0x150/0x2b0 net/l2tp/l2tp_ppp.c:435
 __sock_release net/socket.c:597 [inline]
 sock_close+0xb8/0x200 net/socket.c:1287
 __fput+0x2dc/0x730 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x127/0x190 kernel/task_work.c:189
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0xa7c/0x24e0 kernel/exit.c:879
 do_group_exit+0x149/0x310 kernel/exit.c:993
 get_signal+0xfb1/0x1300 kernel/signal.c:2806
 arch_do_signal_or_restart+0xe7/0x11b0 arch/x86/kernel/signal.c:805
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop+0xa2/0xe0 kernel/entry/common.c:172
 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:202
 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:277
 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f83dcb76657
Code: Unable to access opcode bytes at RIP 0x7f83dcb7662d.
RSP: 002b:00007ffc57cd3a20 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
RAX: fffffffffffffdfc RBX: 0000555557112500 RCX: 00007f83dcb76657
RDX: 00007ffc57cd3a60 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f83dcc4a04e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007f83dce37fac R14: 00007f83dce37fa0 R15: 00007f83dce37fa0

Allocated by task 400:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:430 [inline]
 ____kasan_kmalloc mm/kasan/common.c:509 [inline]
 __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:518
 kasan_kmalloc include/linux/kasan.h:254 [inline]
 __kmalloc+0x19f/0x330 mm/slub.c:4038
 kmalloc include/linux/slab.h:560 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616
 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772
 __sys_connect_file net/socket.c:1867 [inline]
 __sys_connect+0x3ce/0x450 net/socket.c:1884
 __do_sys_connect net/socket.c:1894 [inline]
 __se_sys_connect net/socket.c:1891 [inline]
 __x64_sys_connect+0x7a/0x90 net/socket.c:1891
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb

Freed by task 356:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track+0x4a/0x70 mm/kasan/common.c:45
 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:362
 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:370
 kasan_slab_free include/linux/kasan.h:220 [inline]
 slab_free_hook mm/slub.c:1600 [inline]
 slab_free_freelist_hook+0xc5/0x190 mm/slub.c:1626
 slab_free mm/slub.c:3208 [inline]
 kfree+0xc0/0x270 mm/slub.c:4196
 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline]
 l2tp_session_put+0xb2/0x1a0 net/l2tp/l2tp_core.c:193
 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589
 l2tp_tunnel_closeall net/l2tp/l2tp_core.c:1235 [inline]
 l2tp_tunnel_del_work+0x180/0x3d0 net/l2tp/l2tp_core.c:1273
 process_one_work+0x6fd/0xbc0 kernel/workqueue.c:2301
 worker_thread+0xa8e/0x13c0 kernel/workqueue.c:2447
 kthread+0x324/0x3b0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298

The buggy address belongs to the object at ffff888110576400
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 0 bytes inside of
 512-byte region [ffff888110576400, ffff888110576600)
The buggy address belongs to the page:
page:ffffea0004415d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110574
head:ffffea0004415d00 order:2 compound_mapcount:0 compound_pincount:0
flags: 0x4000000000010200(slab|head)
raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 15, ts 23877962456, free_ts 23870634509
 set_page_owner include/linux/page_owner.h:35 [inline]
 post_alloc_hook mm/page_alloc.c:2456 [inline]
 prep_new_page+0x176/0x190 mm/page_alloc.c:2462
 get_page_from_freelist+0x225f/0x23f0 mm/page_alloc.c:4254
 __alloc_pages_nodemask+0x29a/0x640 mm/page_alloc.c:5384
 alloc_slab_page mm/slub.c:-1 [inline]
 allocate_slab mm/slub.c:1813 [inline]
 new_slab+0x84/0x3f0 mm/slub.c:1874
 new_slab_objects mm/slub.c:2632 [inline]
 ___slab_alloc+0x2f8/0x4c0 mm/slub.c:2796
 __slab_alloc+0x63/0xa0 mm/slub.c:2836
 slab_alloc_node mm/slub.c:2918 [inline]
 slab_alloc mm/slub.c:2960 [inline]
 __kmalloc+0x1f9/0x330 mm/slub.c:4034
 kmalloc include/linux/slab.h:560 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 neigh_alloc net/core/neighbour.c:439 [inline]
 ___neigh_create+0x6ec/0x1a70 net/core/neighbour.c:592
 __neigh_create+0x31/0x40 net/core/neighbour.c:680
 ip6_finish_output2+0x8fe/0x1540 net/ipv6/ip6_output.c:129
 __ip6_finish_output+0x5fd/0x790 net/ipv6/ip6_output.c:203
 ip6_finish_output+0x33/0x1e0 net/ipv6/ip6_output.c:213
 NF_HOOK_COND include/linux/netfilter.h:288 [inline]
 ip6_output+0x1fa/0x420 net/ipv6/ip6_output.c:236
 dst_output include/net/dst.h:451 [inline]
 NF_HOOK include/linux/netfilter.h:299 [inline]
 ndisc_send_skb+0x721/0xbc0 net/ipv6/ndisc.c:513
 ndisc_send_ns+0x879/0xb10 net/ipv6/ndisc.c:655
 addrconf_dad_work+0xa40/0x1480 net/ipv6/addrconf.c:4224
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:28 [inline]
 free_pages_prepare mm/page_alloc.c:1349 [inline]
 __free_pages_ok+0x80b/0x830 mm/page_alloc.c:1629
 free_the_page mm/page_alloc.c:5445 [inline]
 __free_pages+0xd8/0x390 mm/page_alloc.c:5454
 __free_slab+0xcf/0x190 mm/slub.c:1899
 free_slab mm/slub.c:1914 [inline]
 discard_slab mm/slub.c:1920 [inline]
 unfreeze_partials+0x150/0x180 mm/slub.c:2415
 put_cpu_partial+0xc1/0x180 mm/slub.c:2451
 __slab_free+0x2c9/0x3a0 mm/slub.c:3100
 do_slab_free mm/slub.c:3196 [inline]
 ___cache_free+0x10e/0x130 mm/slub.c:3215
 qlink_free+0x50/0x90 mm/kasan/quarantine.c:157
 qlist_free_all+0x5f/0xb0 mm/kasan/quarantine.c:176
 kasan_quarantine_reduce+0x14a/0x160 mm/kasan/quarantine.c:283
 __kasan_slab_alloc+0x2f/0xe0 mm/kasan/common.c:440
 kasan_slab_alloc include/linux/kasan.h:244 [inline]
 slab_post_alloc_hook+0x5d/0x2f0 mm/slab.h:580
 slab_alloc_node mm/slub.c:2952 [inline]
 slab_alloc mm/slub.c:2960 [inline]
 kmem_cache_alloc_trace+0x155/0x2e0 mm/slub.c:2977
 kmalloc include/linux/slab.h:555 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 prealloc_shrinker+0x53/0x230 mm/vmscan.c:390
 alloc_super+0x65e/0x7d0 fs/super.c:270
 sget_fc+0x2c9/0x700 fs/super.c:544

Memory state around the buggy address:
 ffff888110576300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888110576380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888110576400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888110576480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888110576500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
------------[ cut here ]------------
WARNING: CPU: 0 PID: 401 at net/l2tp/l2tp_ppp

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 net/l2tp/l2tp_ppp.c:156
Read of size 4 at addr ffff888110576400 by task syz.2.17/401

CPU: 1 PID: 401 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
Call Trace:
 __dump_stack+0x21/0x24 lib/dump_stack.c:77
 dump_stack_lvl+0x1a7/0x208 lib/dump_stack.c:118
 print_address_description+0x7f/0x2c0 mm/kasan/report.c:248
 __kasan_report mm/kasan/report.c:435 [inline]
 kasan_report+0x100/0x140 mm/kasan/report.c:452
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report_generic.c:308
 pppol2tp_sock_to_session+0x1a0/0x1b0 net/l2tp/l2tp_ppp.c:156
 pppol2tp_release+0x150/0x2b0 net/l2tp/l2tp_ppp.c:435
 __sock_release net/socket.c:597 [inline]
 sock_close+0xb8/0x200 net/socket.c:1287
 __fput+0x2dc/0x730 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x127/0x190 kernel/task_work.c:189
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0xa7c/0x24e0 kernel/exit.c:879
 do_group_exit+0x149/0x310 kernel/exit.c:993
 get_signal+0xfb1/0x1300 kernel/signal.c:2806
 arch_do_signal_or_restart+0xe7/0x11b0 arch/x86/kernel/signal.c:805
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop+0xa2/0xe0 kernel/entry/common.c:172
 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:202
 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:277
 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f83dcb76657
Code: Unable to access opcode bytes at RIP 0x7f83dcb7662d.
RSP: 002b:00007ffc57cd3a20 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
RAX: fffffffffffffdfc RBX: 0000555557112500 RCX: 00007f83dcb76657
RDX: 00007ffc57cd3a60 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f83dcc4a04e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 00007f83dce37fac R14: 00007f83dce37fa0 R15: 00007f83dce37fa0

Allocated by task 400:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track mm/kasan/common.c:45 [inline]
 set_alloc_info mm/kasan/common.c:430 [inline]
 ____kasan_kmalloc mm/kasan/common.c:509 [inline]
 __kasan_kmalloc+0xd4/0x100 mm/kasan/common.c:518
 kasan_kmalloc include/linux/kasan.h:254 [inline]
 __kmalloc+0x19f/0x330 mm/slub.c:4038
 kmalloc include/linux/slab.h:560 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 l2tp_session_create+0x39/0xb60 net/l2tp/l2tp_core.c:1616
 pppol2tp_connect+0xbf5/0x1640 net/l2tp/l2tp_ppp.c:772
 __sys_connect_file net/socket.c:1867 [inline]
 __sys_connect+0x3ce/0x450 net/socket.c:1884
 __do_sys_connect net/socket.c:1894 [inline]
 __se_sys_connect net/socket.c:1891 [inline]
 __x64_sys_connect+0x7a/0x90 net/socket.c:1891
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb

Freed by task 356:
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track+0x4a/0x70 mm/kasan/common.c:45
 kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free+0x125/0x160 mm/kasan/common.c:362
 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:370
 kasan_slab_free include/linux/kasan.h:220 [inline]
 slab_free_hook mm/slub.c:1600 [inline]
 slab_free_freelist_hook+0xc5/0x190 mm/slub.c:1626
 slab_free mm/slub.c:3208 [inline]
 kfree+0xc0/0x270 mm/slub.c:4196
 l2tp_session_free net/l2tp/l2tp_core.c:168 [inline]
 l2tp_session_put+0xb2/0x1a0 net/l2tp/l2tp_core.c:193
 l2tp_session_delete+0x3a9/0x4a0 net/l2tp/l2tp_core.c:1589
 l2tp_tunnel_closeall net/l2tp/l2tp_core.c:1235 [inline]
 l2tp_tunnel_del_work+0x180/0x3d0 net/l2tp/l2tp_core.c:1273
 process_one_work+0x6fd/0xbc0 kernel/workqueue.c:2301
 worker_thread+0xa8e/0x13c0 kernel/workqueue.c:2447
 kthread+0x324/0x3b0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298

The buggy address belongs to the object at ffff888110576400
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 0 bytes inside of
 512-byte region [ffff888110576400, ffff888110576600)
The buggy address belongs to the page:
page:ffffea0004415d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110574
head:ffffea0004415d00 order:2 compound_mapcount:0 compound_pincount:0
flags: 0x4000000000010200(slab|head)
raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 15, ts 23877962456, free_ts 23870634509
 set_page_owner include/linux/page_owner.h:35 [inline]
 post_alloc_hook mm/page_alloc.c:2456 [inline]
 prep_new_page+0x176/0x190 mm/page_alloc.c:2462
 get_page_from_freelist+0x225f/0x23f0 mm/page_alloc.c:4254
 __alloc_pages_nodemask+0x29a/0x640 mm/page_alloc.c:5384
 alloc_slab_page mm/slub.c:-1 [inline]
 allocate_slab mm/slub.c:1813 [inline]
 new_slab+0x84/0x3f0 mm/slub.c:1874
 new_slab_objects mm/slub.c:2632 [inline]
 ___slab_alloc+0x2f8/0x4c0 mm/slub.c:2796
 __slab_alloc+0x63/0xa0 mm/slub.c:2836
 slab_alloc_node mm/slub.c:2918 [inline]
 slab_alloc mm/slub.c:2960 [inline]
 __kmalloc+0x1f9/0x330 mm/slub.c:4034
 kmalloc include/linux/slab.h:560 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 neigh_alloc net/core/neighbour.c:439 [inline]
 ___neigh_create+0x6ec/0x1a70 net/core/neighbour.c:592
 __neigh_create+0x31/0x40 net/core/neighbour.c:680
 ip6_finish_output2+0x8fe/0x1540 net/ipv6/ip6_output.c:129
 __ip6_finish_output+0x5fd/0x790 net/ipv6/ip6_output.c:203
 ip6_finish_output+0x33/0x1e0 net/ipv6/ip6_output.c:213
 NF_HOOK_COND include/linux/netfilter.h:288 [inline]
 ip6_output+0x1fa/0x420 net/ipv6/ip6_output.c:236
 dst_output include/net/dst.h:451 [inline]
 NF_HOOK include/linux/netfilter.h:299 [inline]
 ndisc_send_skb+0x721/0xbc0 net/ipv6/ndisc.c:513
 ndisc_send_ns+0x879/0xb10 net/ipv6/ndisc.c:655
 addrconf_dad_work+0xa40/0x1480 net/ipv6/addrconf.c:4224
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:28 [inline]
 free_pages_prepare mm/page_alloc.c:1349 [inline]
 __free_pages_ok+0x80b/0x830 mm/page_alloc.c:1629
 free_the_page mm/page_alloc.c:5445 [inline]
 __free_pages+0xd8/0x390 mm/page_alloc.c:5454
 __free_slab+0xcf/0x190 mm/slub.c:1899
 free_slab mm/slub.c:1914 [inline]
 discard_slab mm/slub.c:1920 [inline]
 unfreeze_partials+0x150/0x180 mm/slub.c:2415
 put_cpu_partial+0xc1/0x180 mm/slub.c:2451
 __slab_free+0x2c9/0x3a0 mm/slub.c:3100
 do_slab_free mm/slub.c:3196 [inline]
 ___cache_free+0x10e/0x130 mm/slub.c:3215
 qlink_free+0x50/0x90 mm/kasan/quarantine.c:157
 qlist_free_all+0x5f/0xb0 mm/kasan/quarantine.c:176
 kasan_quarantine_reduce+0x14a/0x160 mm/kasan/quarantine.c:283
 __kasan_slab_alloc+0x2f/0xe0 mm/kasan/common.c:440
 kasan_slab_alloc include/linux/kasan.h:244 [inline]
 slab_post_alloc_hook+0x5d/0x2f0 mm/slab.h:580
 slab_alloc_node mm/slub.c:2952 [inline]
 slab_alloc mm/slub.c:2960 [inline]
 kmem_cache_alloc_trace+0x155/0x2e0 mm/slub.c:2977
 kmalloc include/linux/slab.h:555 [inline]
 kzalloc include/linux/slab.h:667 [inline]
 prealloc_shrinker+0x53/0x230 mm/vmscan.c:390
 alloc_super+0x65e/0x7d0 fs/super.c:270
 sget_fc+0x2c9/0x700 fs/super.c:544

Memory state around the buggy address:
 ffff888110576300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888110576380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888110576400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff888110576480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888110576500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
------------[ cut here ]------------
WARNING: CPU: 0 PID: 401 at net/l2tp/l2tp_ppp