last executing test programs: 6m48.059040467s ago: executing program 32 (id=116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000180)='\x00\xcd-\x91X\xf2\x1e\ri\xdc\x0e\xba+Pq\xf7\xc7\xd2\x17\x83\x1d\xd4\xd2\x83\xd1\xfa\xdd\xfco\xe5\x0f\x9dy\x85o:\xd7\xac\x98\x86\xe6\xd9\xad\xdd\x9a\xef\x19[\x18\xaai\xfafn~\x13\xf5\xaa\xeb\x91\x8e\xfb\xfa\xc9T]\xe5\xa3}Yy\x01!\xb6\xfe\x18\xda\x1c\xc7\x9a\x9f\xf8\xeb.\r\xbe4\xfb&\xb9O\x94N\xdc\xbd.3\xff\xf8\xda\xb8\xd2&`\xba\x96\xca\xf2\x18%<\x89\x8d\au(\b\xfci\t\x00\x00\x00\x00\x00\x00\x00\x8a3A\xb3\xd2\xc8(\xc5\xcab(\xe1\x95\xc3\xb5\x01:l\xfa\x9e {\ab\xbf\xc7\xed\x95\x86\xdf\xf5\f\x9c\xcb\v\x06zL', 0x0) keyctl$unlink(0x9, r1, r1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x24000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x50040, 0x30) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2, 0x0, 0x4}, 0x18) sysinfo(0x0) 6m42.557301789s ago: executing program 33 (id=152): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x4a79a644ae8bc70) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 6m35.129770781s ago: executing program 34 (id=204): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) 6m32.006014238s ago: executing program 35 (id=240): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000280)={0x9, 0x6, 0xfec, 0x168e}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) (async) tgkill(0x0, 0x0, 0x7) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001640)={&(0x7f00000002c0)="8efcc806201c707bc7d17adbc152cf0a1b52c161051c85a664c9842627", &(0x7f00000003c0)=""/90, &(0x7f0000001480)="6dea44c0df3e679c923bc73452301afd8be51f511c365abe35f2ad0b20393ae9536bdd648d07924ae411de90e30d8df824b105c9edfafd74e9f739e864c8369aad22ca4189d41ac8b01b16ec9a8e252e6e5fd441425c6a6fb538a18f195cc76720d060740d1ce113b4eb57ea6f8c1c419974c6ced63c40c1f91e96dddcc25e3a795698e3bdd21b754299dd321a5e88c9c66e056a47f905598b4aa13ccbe2b29591f42d948b7acfd6ba15b1b91a911252", &(0x7f0000001540)="8dffdb2437ee8d5349d556375005daac956ade5e648cfe9b8fa407ab0180dd60816e79e483c0ca91e5830bc37b4f356a6ceb2f01caa00c530a3fa2b487b71f2d2eb76866466f135ddb76725b6348d1c0ff5f834cc94858cc82b6d91cb766be48672724fc3507f4cad40c651cc7a2b59cf98cae6b37776398dc25ba20f9cdeeae5755b2be69dbaa45c84394424d95722117b2e662c35f974d84057ce39978e18edb93fee8f7a404af55fb9a69bd5c143aff368ac597d30098dae3a10c2c674ce7ac19e97c3f55aaa807304c59a8d63f2aaec44a0b19742e47a7b71efb61c4dac5a89111b31566874629a0cc9cae0f790f88c3a8a7", 0x9, r4, 0x4}, 0x38) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0x20}, 0x14}}, 0x20) 6m22.51344591s ago: executing program 36 (id=337): mknod(&(0x7f0000000240)='./file0\x00', 0x10, 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) inotify_rm_watch(r0, r3) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='./file3\x00', &(0x7f00000003c0)={{0x0, 0x3ffffffe}}, 0x0) 5m46.123093546s ago: executing program 37 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x633, &(0x7f0000000000)="$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") syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200"/63], 0x0, 0x56}, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000300)=0xc) process_vm_writev(r8, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000680)=""/146, 0x92}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/54, 0x36}], 0x6, &(0x7f00000008c0)=[{&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000840)=""/126, 0x7e}], 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) 5m20.180713896s ago: executing program 38 (id=901): stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000200)) (async) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}], [{@uid_gt={'uid>', r0}}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000003c0)={0x2, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000100)={0x8000, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x9d}) (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000100)={0x8000, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x9d}) 5m12.394002842s ago: executing program 39 (id=979): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="6112a000000000006113880000000000bf2000000000000062000000180000003d030100000000009500f000000000006926b40000000000bf67000000000000560602000fff07007706000020000000620200000ee60000bf250000000000003d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2463e1c1e762400"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc90}, 0x48) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x0, &(0x7f0000000240), 0x0, 0x83, 0x0, 0x0, 0x41100, 0xe, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xe, 0xfffffffa, 0x17ca6135}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[r1, r1], &(0x7f0000000380)=[{0x3, 0x1, 0xe}, {0x0, 0x4, 0x4, 0x5}, {0x3, 0x2, 0xc, 0x9}, {0x5, 0xffffffff, 0x10, 0xb}, {0x3, 0x2, 0xf, 0x8}], 0x10, 0x8}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="40000000ed440000090040001343748d5077d4b3e4ab3712f676a30cba96bdfa93e6237c48b6191eb7cc850ad1607282b87d1cb467adc3c4cb9afea579384fa8c8b9c87040c175736fb4a9566d0070a82736741b3c79327eab4d7c329bcfd1c7285addb6401d9e59ee", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000040000000d00"/24, @ANYRES32=r7, @ANYBLOB], 0x50) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000001c0)) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendto$inet6(r0, &(0x7f0000000540)="7293b37c856422b5973f795628899fd12acb3a5236a9740e0732360ffb3ee0ec95a1af4bfb72f85228b7afb5adc1e279e509017cbdfa1886b5237af7429bef983b75ed6e8204b6bfe6d0d6f0b448299dba7069b612cc4a295aef2b3fad725a2f56a22a45f6a15870f1a13f1e377c074107d9bf23bffd7657c77b4883fc2fe85e4b1ee311a726478811c6315a9d81a9c15b75ab97bd28", 0x96, 0x4001, &(0x7f0000000300)={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1e}, 0x1c) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) getsockopt$WPAN_WANTACK(r8, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") 4m33.2227995s ago: executing program 40 (id=1334): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r2 = gettid() pselect6(0x40, &(0x7f0000000280)={0x35, 0x800, 0x0, 0x81, 0x6, 0x9, 0x1ede, 0xbff}, &(0x7f00000002c0)={0x5, 0xfffffffffffffff8, 0x7, 0x7, 0x7, 0x5, 0x2, 0x1}, &(0x7f0000000380)={0xfffffffffffffff9, 0x2, 0x1, 0x2, 0x6, 0x6, 0x7f, 0x6}, &(0x7f00000003c0)={0x77359400}, 0xfffffffffffffffd) tgkill(r2, r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0xfd, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x2) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)=""/7, 0x7) 4m28.651020109s ago: executing program 7 (id=1363): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@nobh}, {@bsdgroups}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@dioread_nolock}, {@auto_da_alloc}]}, 0x0, 0x4d7, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) futimesat(r0, 0x0, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30}, 0x30) 4m27.942667719s ago: executing program 7 (id=1371): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x1, 0x40}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000100)="a255514f4186b7eb7d9c6c88ebc52961a8fdff00a6ea102486d0956952573fbfe240cc4868ac6a34ee1c974b8c3ae91c231e24255c11e5e320a07821a12fa98e01765dc5bb6dc54dd80f029f0e02aaf7bd8c22614c27d551cb897e656525d041aedcc21e8fe9813391b5ef3611e23952903cbcf9e03a", &(0x7f0000000180)=""/120}, 0x20) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x1f0, 0x108, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000240), {[{{@arp={@local, @multicast1, 0xff, 0xff000000, 0x8, 0x5, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="5f98a14274cd", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x2, 0x1, 0x66b, 0x5, 0x4, 0xe, 'geneve0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0xca}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fff, 'syz0\x00', {0x6}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @remote, 0x8, 0x36130e9963af0b3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write$cgroup_int(r0, &(0x7f00000006c0), 0x12) r2 = pidfd_getfd(r0, r1, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f0000000700)="470f2200f086680a66b8a9000f00d036470fc728470f01cab9110200000f320f3266b8af008ec8c40255ac6e00c7442400e4198138c7442402c4b495dcc7442406000000000f011424", 0x49}], 0x1, 0x4a, &(0x7f00000007c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000800)=0x9, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x10, 0x8, 0x958, 0x7, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x64, 0x0, 0x5, 0x38, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x18, 0x4a, 0x0, 0x9, [0x7, 0xffffffff, 0xfffffffa, 0x10001, 0xffffc000]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@gettfilter={0x4c, 0x2e, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {0x6, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x25}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x56947c1d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40085) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@cgroup=r2, 0x24, 0x0, 0x2, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@map=r2, r5, 0x25, 0x4, 0x0, @void, @value=r2, @void, @void, r6}, 0x20) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000c40)) getdents64(r0, &(0x7f0000000c80)=""/163, 0xa3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000fc0)={&(0x7f0000000d40)="9b230d2a1fb4d9b70e44986d3dbf3b15885f280ebba5d469c1ac565dbf9a5e8cdf10de26d8d9742b096ce7ed635488c6dd26eb65de47abc2da934a39a1a0698176c0ed20eda80d6f82843a8300dcf6ced6ef37acb3112c0a1a17fa6cd881f354521efba2e799045ce96be25b81aac31428121f70aef4adc36016d595", &(0x7f0000000dc0)=""/184, &(0x7f0000000e80)="9514c6f95be40ddc741dd921437cd8de3efd8920e2551f44a9a3095af627916010560a3bff4c1410be423018842022669ea144a1479b679e0513803bf35d2093be9161c5398f18900699a970d55abd55d44fc6e7725b79e4b5946b19ef04dadd7d28f4de2fcc91206e50087bddd1263ff71e0e560496", &(0x7f0000000f00)="8e8fc876dd2a9453c29a92e562158fcee634643c025c6c4ac10bfbb03ae79c5b48803be92086d0e34478d1d5610f7799c142302bfd3a0cecbc8255003bae7de4669b8be3a6a0f4847005411cc72017a4bb1e5f0cdefd62334f27769f971e983295277d2cd57b899858eb33aa0f58e08ed97d82bca6ba829f7e913e0abce4b8902af900277bb1ff6fca51a2cfeb9594356a4c89843a3d7e53327c380422a40fb8093fe55e", 0x80, r1, 0x4}, 0x38) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000001000), 0x4) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001400)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f00000010c0), 0x0, &(0x7f0000001100)=""/132, 0x84}, 0x1}, {{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)=""/163, 0xa3}], 0x1, &(0x7f0000001340)=""/135, 0x87}, 0x101}], 0x2, 0x100, &(0x7f00000014c0)={r8, r9+10000000}) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0xe, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000001580)='syzkaller\x00', 0x1, 0x7d, &(0x7f00000015c0)=""/125, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x23, r0, 0x8, &(0x7f0000001640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x4, 0xe, 0x40, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000016c0)=[{0x5, 0x3, 0x2, 0xb}, {0x5, 0x1, 0xc, 0x5}, {0x4, 0x5, 0x8, 0xa}, {0x3, 0x3, 0x7, 0xa}], 0x10, 0x767}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', 0x109000, 0x10e) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000001840)=@arm64_core={0x6030000000100048, &(0x7f0000001800)=0xcf79}) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x184, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_NAT_DST={0xd4, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0xbb}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x4000) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000001b00)) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000001b40)="f08de811b54aaa8421ca487346be8212bb05cf6020f27cf71983c5cf4510bce2af3b8cfaba09071781860dcf688ea3c927ee5be118e15e6b2172ec9180ffad96e2b3a871417db4b0e26b78470fc4d55dc39297816fcd58bf633dbcf3e214fe21fb465f26a3972ff5fd3fe1a793d6f63850baac656c177fb868", 0x79) fchdir(0xffffffffffffffff) 4m26.970978093s ago: executing program 7 (id=1378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000db2a785d7a0b100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x18) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r4) (async) close(r4) r5 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 4m26.744977767s ago: executing program 7 (id=1380): socket(0x2, 0x3, 0x100) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@nobh}, {@resuid}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0xe, 0x4dd, &(0x7f00000013c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) write$selinux_load(r3, &(0x7f0000000280)=ANY=[], 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) io_setup(0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) capget(0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/219, 0xdb}], 0x1, 0xab36, 0xfffefffa) 4m25.22014276s ago: executing program 7 (id=1387): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) (async) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x8}}, 0x30) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) (async) bind$tipc(r4, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 4m24.52485509s ago: executing program 7 (id=1393): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x27, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x6003, 0x0) listen(0xffffffffffffffff, 0x3) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x5020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x3}]}}}]}, 0x44}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e6430"], 0x2c}}, 0x40006) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) 4m24.50198781s ago: executing program 41 (id=1393): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x27, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x6003, 0x0) listen(0xffffffffffffffff, 0x3) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x5020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x3}]}}}]}, 0x44}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e6430"], 0x2c}}, 0x40006) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) 3m24.644573529s ago: executing program 2 (id=1985): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002200)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000002300)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010400, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9f}}, {@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, '^'}}, {@uid_gt={'uid>', r4}}]}}) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000002440)={0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002800)={r6, 0x20, &(0x7f00000027c0)={&(0x7f00000026c0)=""/172, 0xac, 0x0, &(0x7f0000002780)=""/39, 0x27}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000028c0)={{r6, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0xc, 0x11, &(0x7f00000024c0)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}], &(0x7f0000002580)='syzkaller\x00', 0x51, 0x8e, &(0x7f00000025c0)=""/142, 0x40f00, 0x0, '\x00', r0, @fallback=0x1b, r6, 0x8, &(0x7f0000002680)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r6, 0x4, &(0x7f0000002900)=[r9], &(0x7f0000002940)=[{0x2, 0x1, 0xc, 0x3}, {0x4, 0x1, 0xb, 0x1}, {0x3, 0x3, 0x3, 0x6}, {0x2, 0x2, 0x1}], 0x10, 0x1}, 0x94) r10 = creat(&(0x7f0000002a40)='./file0\x00', 0xd) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000002b40)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000002c40)=0xe8) mount$fuseblk(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00), 0x1000000, &(0x7f0000002c80)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize}, {@blksize}, {@blksize}, {@blksize}], [{@obj_user={'obj_user', 0x3d, 'fd'}}, {@uid_lt={'uid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) prctl$PR_GET_THP_DISABLE(0x2a) r12 = open_tree(r10, &(0x7f0000002e00)='./file0\x00', 0x1800) syz_genetlink_get_family_id$mptcp(&(0x7f0000002e40), r10) write$selinux_context(r10, &(0x7f0000002e80)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002ec0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f0000002f00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) dup(r7) r14 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000003100)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)=@deltaction={0xd8, 0x31, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x541}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4010}, 0x4040084) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000003140)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x7f, 0x4, 0x887b, 0x5, 0x1, 0x8}, {0x1, 0x200, 0x0, 0x7, 0x8, 0x6bfc33ec}], ['\x00', '\x00', '\x00']}) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000032c0)={0xec, 0x200, 0x2, 0x0, 0x0, [{{}, 0x4}, {{r13}, 0x6}]}) mount$bind(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='./file0\x00', &(0x7f00000033c0), 0x808, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000003400)={"5b05fe8a2e61c79d9175055443bee11ce0ea2aedcdda7b13b01a25b34c7242f2d6083a35ec74a27f38db013edf690bc94d243f0cf637b2e0b5f245562149a2effd4c201758739001fb58cb557b5d934558809363cc812a03364d1e5281dacb06d7de0abe3976c2192e6aea4c87e37c597173aba08006780458abbe5ea0b85989d5811438f9c17268426291214b7beb318654f54709ab3d1ba739727975d841a6a68115383e70b64060c9557b41d9e61103056644a96391b4387ae2493a16aeca9bcd8dc70a27f10cf3cec27804f33c1c2f04024bcb98a11bdd793d82443ed97ce406ee0d5eee95a78a29d0e8c999557dc21f4c7fadeac708141fe550d14286ba6ffff982091f8ab053535412da27a17c4fe42af57ee98c43ab9e12899654ec5fa3ca1e5b2275369e801e83243811950de186d8663140b0f244107387c22e618232f4039c82f8310b31eb42c9509c692b20dcbaec74bd912371dffbfaa66d61f653a0360af61414738a102a33c11e7820d76b252cbfdf2033d42935bd535f956271c39fd01b5a99de2e54d042dedea63b399d469d4b9dcfe1416a3ddc4418fa41e9bc122898b1c689d2157b6ce67bc2c5778c212f6a99bed0ec6fec70e6d5be7c3fc611f1d053cbc2a77e3f839e5fa60c0b38773b415d6cb9bc12326f11c2e1ce0524c312d3348fcaec50b1ee41733b77e4a2cdc88b48586e2d04feacadc5952876e26b63503425e9be806b5ddc726b6dac5fb6f355f9e74d1c5c65fe069dbbf2a5f4e85e84ea00e70a39a217cb1e6bc86ce6a899d7f4f6493b0c77bdbaf518498197193e063e17f20cf2ae126b70f764ce241fe1c3f92201c24f2b9506fcfdc5311f66e84e3c5b229877333fb9878942e17e8e03e47127c48eb0c477a604114e2811a011a0615f590ed66815265e28e286b1cf9508cd3a4ed174abf28c81cda3875ab59f11dc9fcb3a0dbfb939d85d52c27c1fdeaac2b4fcd6f068fd47b1819aa4824b5aa62db2ed3ad7bc7453622f2fefea6791f84857246d66dddf3bf7e97c8e207170fdb3c5ae1c4e347debfdf46822fb6ccdbd105037045ec927c7831ae1f8fadb0b384288b838837f408694d6982ddd2715c7e1e95d64a1c9a6748b3d063a3a27c11b4706da1bded46af143b9eaf7a73fb3f72605dd6147bbe756a49a50ce5af406876c9b80720cf441571073da69cd17c729cd472c12f2437f54f12b6763c7a629014da97554176105bda7794da95b15e5d1da7f07c1aa00ca93a5e62c0c00d9b1791a10a7e211d4fd893c12f2d50177d2525054a369825d2a4488e05bd68a4e528e39d86c3a143dfc8ff5acee804247295ca2ff10aa350766269bcfb0f3f88616f2be363f0d01242a1bbfd25906caae0a3ac661871770940fd3e8c5a0f38ebb82ec912785793ea9bbbee233221ad5bdbc0ecd950718592a7895e53fdd"}) read$FUSE(r6, &(0x7f0000003800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r12, &(0x7f0000005840)={0x20, 0x0, r15, {0xe, 0x4, 0x7fffffff, 0x5}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000005880), 0x40000, 0x0) 3m24.56669524s ago: executing program 2 (id=1987): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r3, 0x0, 0x0) 3m24.56574197s ago: executing program 2 (id=1988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x19, 0x100) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x10e, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404bf6f"], 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 3m22.780675087s ago: executing program 2 (id=2003): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) read$char_usb(r0, &(0x7f0000001080)=""/4122, 0x101a) 3m22.690574898s ago: executing program 2 (id=2005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d34, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x46, 0x10, 0x29, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x1d, {0x9, 0x21, 0xc, 0x7, 0x1, {0x22, 0xecb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x9, 0x5}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0x2, 0x6, 0x20, 0x7}, 0x2f, &(0x7f0000000080)={0x5, 0xf, 0x2f, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x7, 0x43e9, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8b, 0x0, 0x81a5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x0, 0x4, 0x19f, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0x200}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x814}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f00000003c0)={0x0, 0x20, 0x8b, {0x8b, 0x9, "bf180a80a468c7c083872c1f4e8aca22d7457ec00a6892c593a0d9a419ba56f6784015a932bd44592aabbcdae8a339793eccfad9fbc2877e69c980d968c06c0a4d1add50a0cc4805af057994f974cee6d0c09cfba9d3ceeda3be96dd358307f9f142d2eca075b2ee9c2ad0099f33372246ade75e60db8caadb0b2c2b5f45a42aeb28e458776e948af0"}}, &(0x7f0000000580)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "52b9255c50454091537fc10dfa65f439ee6f7a39159d05f577a00a5a771780d050234b1a520635d8a34866ee06b46efd53a1e76ae2fba3ef35f3870f00fe1a349479ad8cbab3343a58b093930edfdd0fc0a0e74c16c70cb4589b7170573fb21a790b1dd66de9dc82da4376ce4bbf7c421226d06fd5aa3371d4cc2b023963809c8b23752574b8cf8adb28a8f646a27f492affe8c151dc21094961dd131abb7ee8ea4dc934a14c7b24f7d2533030d6e4e91551b7702739ea2c4b815c9b1f9bb44fbb645e232e5bcefceb97e92a5fc6ccd6d86a410ec9bafa953aff079a6fd98f134bfa49eb80065a06fa"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "a0811d40"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5969, 0x9, 0x1, {0x22, 0x691}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x0, 0x23, 0x97, "e6271623f699cb06df2bfa8c4dd3323adee0bde575eaed7e357a976752b6a0761677bc66d548d94925a1e40d205ca907a5eadd0cef731e57a3435acc4867b6d60ce303a2a0a7c2c665a8a410a9294683579e18fd8cb7d93f53bf69b34e2edb99af2e6fd86a859adcf26963ef99d00e5e5938fb4a4753b907c9cea23c819a112cb7a7687d42363c0eccd3bdf7630a8e2ba33200f3a48334"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0x20, 0x1, 0x47, "4f5c393b48b4841c7ea67c199ca47a7c68a3d2c395bc6f1f1649ad5096f9afb0bfcfd3228d5bce9fe03f8994e509c33a5f95b2c39f5f25f14e5d8321e9bbf33ce23a9c44a5bf9e"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0xab}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 3m21.294281109s ago: executing program 2 (id=2012): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x2}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x10, 0x819d4ed0e4f1ce4e, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x7fff}, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xe907, &(0x7f00000005c0)={[{@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x101}}, {@dioread_lock}, {@nouid32}, {@usrjquota}, {@orlov}, {@resgid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@acl, 0x32}]}, 0x3e, 0x4e1, &(0x7f0000000a40)="$eJzs3UFvG1kdAPD/OHGbtClJBYdSQaloUVJB7aShbcShgITgVAko9xISJ4rixFHstE1UQSo+ABJCgMSJExckPgAS6kdASJXgjnZXu1rttruHPezWK4/tbpraTaI6dhT/ftJ03psZ+/9/bvzsN/PkCaBvXYyIaxHxvFqt1uqjje2ZxhJJRGzXj3v29OFcbUmiWr3zQZLuqtVrh03seM7T9YfEUET8/CcRv0pejVve3FqeLRYL6416vrKyli9vbl1dWpldLCwWVqenp27M3Jy5PjPZkXaORMStH73zx9/97ce3/vWd+/+/+97Er5PG9tjRjk6rNz2bvhZNgxGxfhjBeuBrjfZke50IAAD70vye/82IuBKjMZB+mwMAAACOk+r3R+LTJKLawlDLrS872W7H0N6PBQAAALojk86BTTK5xjyAkchkcrn6HN6vxKlMsVSufHuhtLE6X58rOxbZzMJSsTDZmCs8FtmkVp9Ky1/Ur+2qT0fE2Yj4w+jwcCwVC7m5UnG+1yc/AAAAoE+c3jX+/3i0Pv4HAAAAjpmxXicAAAAAHDrjfwAAADj+jP8BAADgWPvp7du1pdq8//X8vc2N5dK9q/OF8nJuZWMuN1daX8stlkqL6W/2rez1fMVSae27sbrxIF8plCv58ubW3ZXSxmrl7tJLt8AGAAAAuujsNx7/L4mI7e8Np0vNiV4nBXTF4EEOfvvw8gC6b6DXCQA9c6DPf+BYyfY6AaDnkj32t5288+/O5wIAAByO8a+2vv6f7HluYDvTpRSBQ+L8H/Qv1/+hf7n+D/0rGwNhIA/97fCv/1erB0oIAADouJF0STK5iPQ8wEhkMrlcxJn0tgDZZGGpWJiMiC9FxH9Hsydr9an0kcmeYwYAAAAAAAAAAAAAAAAAAAAAAAAAoK5aTaIKAAAAHGsRmXeTxv2/xkcvj+w+P3Ai+WQ0XUfE/b/c+dOD2Uplfaq2/cMX2yt/bmy/1oszGAAAAMBuzXF6cxwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ307OnDuebSzbjv/zAixlrFH4yhdD0UgxFx6qMkXTclETHQgfjbjyLiXKv4SS2tGGtk0Sr+cA/jZyLidAfiQz97XOt/ftDq/ZeJi+m69fvvRtpDvbm2/V/SPGIo7eda9T9n9hnj/JN/5NvGfxRxfrB1/9Psf5M28S/tM/4vf7G11W5f9a8R4y0/f5KXYuUrK2v58ubW1aWV2cXCYmF1enrqxszNmeszk/mFpWKh8e+OLvnii9Lvv/7P569r/6k28cf2aP/lfbb/sycPnn65Xsy2ij9xqfXf37k28TONz75vNcq1/ePN8na9vNOFv//nwuvaP19v/+BB//8n9tn+Kz/77Vv7PBQA6ILy5tbybLFYWO/rwhu9GrWvRUeiFYdZGI4jkUaHC785GmkcyUJv+yUAAKDzXh0DAwAAAAAAAAAAAAAAAAAAAN3WzV/Xa9ruTVMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF7r8wAAAP//Q9jOyw==") r3 = eventfd(0x2cdc0812) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f00000002c0)=""/70, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000002400)=ANY=[@ANYBLOB="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"/4646], 0x1220) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(r2, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103900, 0x0) fchown(r8, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r9, 0x0, 0x10003, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r9, 0xc004ae02, &(0x7f0000000540)=ANY=[@ANYBLOB="5fb81e951e4ecd00000000008140f67a0ad644b77df9f294d6e5482a8ffd9c6b32ee9aaad57151bcf9ee1437bc2d0da7e6eb86c9374ab7c292caa58ebe033e2a0bbe18aca06813c9f61dc08e541263999b74f04412c02af005291252fe"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004d9000/0x2000)=nil, 0x2000, 0x15) 3m21.293817539s ago: executing program 42 (id=2012): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x2}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x10, 0x819d4ed0e4f1ce4e, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x7fff}, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xe907, &(0x7f00000005c0)={[{@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x101}}, {@dioread_lock}, {@nouid32}, {@usrjquota}, {@orlov}, {@resgid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@acl, 0x32}]}, 0x3e, 0x4e1, &(0x7f0000000a40)="$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") r3 = eventfd(0x2cdc0812) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f00000002c0)=""/70, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000002400)=ANY=[@ANYBLOB="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"/4646], 0x1220) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(r2, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103900, 0x0) fchown(r8, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r9, 0x0, 0x10003, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r9, 0xc004ae02, &(0x7f0000000540)=ANY=[@ANYBLOB="5fb81e951e4ecd00000000008140f67a0ad644b77df9f294d6e5482a8ffd9c6b32ee9aaad57151bcf9ee1437bc2d0da7e6eb86c9374ab7c292caa58ebe033e2a0bbe18aca06813c9f61dc08e541263999b74f04412c02af005291252fe"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004d9000/0x2000)=nil, 0x2000, 0x15) 3m4.034819558s ago: executing program 8 (id=2200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r1, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000200)={0x8, 'syz_tun\x00', {'gretap0\x00'}, 0x401}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2}, 0x1c) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b000100000000090400000201035100090583130000000000072501"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0c040105fde50d023236000000fe80000000000000000000000000000000000000000001"], 0x28) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="24000000010006", 0x7) 3m2.171018696s ago: executing program 8 (id=2216): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) (async) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b4c, &(0x7f0000000080)) pivot_root(&(0x7f0000002140)='./file0\x00', 0x0) 3m1.662516514s ago: executing program 8 (id=2224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ustat(0x100, &(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) sync() ioctl$TIOCNOTTY(r3, 0x5422) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a007100feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 3m1.469735117s ago: executing program 8 (id=2229): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file1\x00', 0x2052809, 0x0, 0xf9, 0xfffffffffffffd92, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000021000100000000000300000000050015000200000042d5370d50d8057f61aee0d9e06fffd8e849ae5418f1e97d313f0a0449398cd81cd8b66839bd65227f160000b9d76e1a8a1503201252d66fcb5fe4249c8bb32c236c5621f374e6b49e222f834376b4694e70a1bb9b4f46d5fafcc60f67c831dd0393a4f505a03bdaf2dbfe21958f2db2bff81e371825f249550df8c5b80ca47569feef9b33273819b1e2cfdd775ece05c4f2ea611eec3500000000000000"], 0x24}}, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10r\x8fst\x00Da\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0xfc, 0xfff00002}, {0x16, 0x0, 0x40}]}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3m0.536929231s ago: executing program 8 (id=2242): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000010000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 3m0.110112687s ago: executing program 8 (id=2245): socket$pppl2tp(0x18, 0x1, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x28, 0x20, 0x400, 0x70bd2c, 0x0, {0x2, 0x0, 0x80, 0xe7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048851}, 0x0) r2 = dup(r1) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x1, 0x4) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x453, 0x20, 0x70bd2b, 0x25dfdbfb, '\x00'}, 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x200, 0x102) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000680)={0x1f, 0x20, @none, 0x0, 0x1}, 0xe) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = dup(r4) fsetxattr$security_selinux(r8, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x3) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) 3m0.054093498s ago: executing program 43 (id=2245): socket$pppl2tp(0x18, 0x1, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x28, 0x20, 0x400, 0x70bd2c, 0x0, {0x2, 0x0, 0x80, 0xe7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048851}, 0x0) r2 = dup(r1) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x1, 0x4) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x453, 0x20, 0x70bd2b, 0x25dfdbfb, '\x00'}, 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x200, 0x102) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000680)={0x1f, 0x20, @none, 0x0, 0x1}, 0xe) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = dup(r4) fsetxattr$security_selinux(r8, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x3) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) 36.136247057s ago: executing program 1 (id=2296): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x122840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x56d, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8000, 0x6c) getpeername(r2, &(0x7f0000000040)=@tipc=@id, &(0x7f00000000c0)=0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000540), 0x0}, 0x20) 36.115949298s ago: executing program 1 (id=2297): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8000, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r6 = fspick(r5, &(0x7f0000000180)='./file0\x00', 0x1) fsmount(r6, 0x1, 0x78) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2c, 0x86cc62432dc63952, r7, 0x1e, r8}, 0x10) 34.688783019s ago: executing program 1 (id=2304): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9a7, 0x0, 0x1, 0x1792, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x5, 0x101000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xa, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @fwd={0xd}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x3}}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x11}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x70, 0x5f, 0x0, 0x0, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000500)=""/114, 0x92, 0x72, 0x0, 0x80000000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2e, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x76}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @exit, @ldst={0x3, 0x1, 0x6, 0x6, 0x7, 0x20, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @alu={0x4, 0x1, 0x0, 0xa, 0x4, 0xffffffffffffffe0, 0x8}, @generic={0x5, 0x5, 0x1, 0xd, 0xfffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x23ab, 0x96, &(0x7f0000000380)=""/150, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x6, 0x90}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000600)=[{0x1, 0x5, 0x8, 0xa}, {0x0, 0x3, 0xe, 0x9}, {0x3, 0x1, 0xf, 0xc}, {0x3, 0x3, 0xf, 0x7}], 0x10, 0x9}, 0x94) 34.63515928s ago: executing program 1 (id=2305): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095003d0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2) syz_clone(0x40000000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000021200000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x0018\v5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1, 0x3a, ']', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x29) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="74727e000000685c50e9005fe084a2", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=readahead,nodevmap,dfltgid=', @ANYRESHEX, @ANYBLOB=',aname=E,cache=readahead,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',cache=mmap,obj_type=system_u:object_r:netcontrol_device_t:s0\x00,dont_appraise,posixacl,seclabel,uid<', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=root,obj_type=/(+,\x00']) 33.33167855s ago: executing program 1 (id=2316): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)="5d1643d5ab", 0x5, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)="5d1643d5ab", 0x5, 0x6, 0x75, 0x10001, 0xc, 0x79, 0x0}) exit(0x6) lseek(0xffffffffffffffff, 0x9, 0x0) (async) lseek(0xffffffffffffffff, 0x9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001080), 0x400080, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0xc, 0x4, 0x9, 0x669, 0x12, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x1a, 0x20, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @map_fd, @map_fd={0x18, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0xa0}, @alu={0x7, 0x0, 0xc, 0x2, 0x4, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x478}}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0xa, &(0x7f0000000480)=""/10, 0x41100, 0x27, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x4, 0xfffffffe, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001180)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r1, r4], &(0x7f00000011c0)=[{0x0, 0x4, 0x7, 0xa}, {0x3, 0x5, 0x5, 0x3}, {0x5, 0x2, 0x3, 0x1}, {0x2, 0x5, 0xb, 0x5}, {0x2, 0x1, 0x7, 0x1}], 0x10, 0x401}, 0x94) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18) ustat(0x3, &(0x7f0000000000)) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x4000000000000000}, @code={0x1, 0x5a, {"f30f0941f4c744240003800000c744240295000000c7442406000000000f011c2466b8f6008ed0362e650f01cb26f6e90f0766400f3882ad4600000066baa100ecb8010000000f01d9"}}, @code={0x1, 0x5d, {"430f01d1c4c199fa3d006000003e2e450f01c5460f01cf2e36660fc7b703000000b9b40900000f32f24690b9f50b0000b800880000ba000000000f3066ba210066b8724666ef36480fc76e0d"}}, @code={0x1, 0x56, {"c421c575d636460f064d0fc75859c4a298f2cf0f0059000f7ed62e266447b70c48b807000000000000000f23c80f21f835080030000f23f88f4980935700b9a90a00000f32"}}, @code={0x1, 0x4c, {"66b862008ec866b854008ec03e420f0f5b089a470f219a66b832008ed8640f20640f20e035800000000f22e0450f1b74990066b820018ee0470f07"}}, @code={0x1, 0x4e, {"660f3882810080000046f4d8530ef00fc708430f350f0765430f7916b9600b0000b896000000ba000000000f30b9f80200000f328f490897b600000100"}}, @code={0x1, 0x69, {"c7442400f0120000c744240200000080c7442406000000000f011c240f01380f01ef2e66420f3880785e36f04380b30020000000440f0666b886008ee80f01cb450f807de0147a66baf80cb8c3898d8aef66bafc0cb000ee"}}, @cpuid={0x2, 0x18, {0x7, 0xffff}}, @uexit={0x0, 0x18, 0xe}, @uexit={0x0, 0x18, 0xfffffffffffffffe}, @cpuid={0x2, 0x18, {0x0, 0x17}}, @code={0x1, 0x78, {"f04381a100000100627cbddfc4e1a8168e090000004d0fc7ae00500000c74424005f000000c744240223c11a6dff2c24b9800000c00f3235008000000f300f01df670f2059c4416c5d14c572460000b8010000000f01c166baf80cb81a872882ef66bafc0c66ed"}}, @cpuid={0x2, 0x18, {0x5, 0xffffffae}}, @uexit={0x0, 0x18, 0xa}, @uexit={0x0, 0x18, 0x1ff}, @uexit={0x0, 0x18, 0xc}, @cpuid={0x2, 0x18, {0x1, 0x4}}, @uexit={0x0, 0x18, 0x800000000}, @cpuid={0x2, 0x18, {0x7fffffff}}, @cpuid={0x2, 0x18, {0x800, 0x8}}, @code={0x1, 0x68, {"26f20f5dd726420f01c2b9860b0000b855000000ba000000000f30c4837d19dd0866410fc7310f01f8c744240093000000c744240200800000ff2c24b805000000b97d0000000f01d9660fc5d9008f2af8101300480000"}}, @code={0x1, 0x57, {"c4a15652859a00000066450f3acfc7000fae58000f9f71d0c44231bf7607660f1adac4a269bc25e4d80000c4a17d2f471ec4837916a100200000c40f20c035040000000f22c0"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18}, @code={0x1, 0x4c, {"f46467640f01c4470f015dd5400f06b9800000c00f3235008000000f303e0f019bd8000000c4217929b20040000066b832018ec00f01580643dfcd"}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @uexit={0x0, 0x18, 0x81}], 0x543}) mmap$KVM_VCPU(&(0x7f0000a97000/0x4000)=nil, r10, 0x8, 0x10010, r11, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000a97000/0x4000)=nil, r10, 0x8, 0x10010, r11, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) (async) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r8) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="1f22ccfd22a168a6d9dcea2a0720000400"/30], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="1f22ccfd22a168a6d9dcea2a0720000400"/30], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 33.113625443s ago: executing program 1 (id=2319): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r2, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000004940)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) (async) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) (async, rerun: 64) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x80000201) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x2) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) lseek(0xffffffffffffffff, 0x2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) (async, rerun: 32) timerfd_create(0x0, 0x0) (rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @remote, 0x2}, 0x1c) (rerun: 64) r7 = socket$netlink(0x10, 0x3, 0xf) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff3, 0xffff}, {0x0, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x66}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x5}}}}]}, 0x48}}, 0x4000800) 33.088822834s ago: executing program 44 (id=2319): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r2, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000004940)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) (async) ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0) (async, rerun: 64) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0x80000201) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x2) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) lseek(0xffffffffffffffff, 0x2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) (async, rerun: 32) timerfd_create(0x0, 0x0) (rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @remote, 0x2}, 0x1c) (rerun: 64) r7 = socket$netlink(0x10, 0x3, 0xf) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff3, 0xffff}, {0x0, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x66}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x5}}}}]}, 0x48}}, 0x4000800) 9.222904951s ago: executing program 3 (id=2584): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r5}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 9.141110582s ago: executing program 3 (id=2586): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x462b02, 0xd1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) (async, rerun: 32) ioctl$TCFLSH(r2, 0x540b, 0x1) (rerun: 32) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x6) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @any, 0x6, 0x1}, 0xe) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) 9.077622723s ago: executing program 3 (id=2588): ioprio_set$uid(0x0, 0x0, 0x6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000240)="7230efbd", &(0x7f0000001580)=""/92}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@nolazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x200}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, &(0x7f0000000080)='3', 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) 8.6502505s ago: executing program 3 (id=2592): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @random="6b37d3d00a5f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x1e, 0x67}, @fragment={0x89, 0x0, 0x1, 0x0, 0x0, 0x5, 0x67}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000280)=""/148, 0x94}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x8, &(0x7f0000000500)=""/71, 0x47}, 0x78a5}, {{&(0x7f0000000580)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000340)=""/36, 0x24}], 0x3, &(0x7f0000000840)=""/179, 0xb3}, 0x4}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/208, 0xd0}, {&(0x7f00000006c0)=""/40, 0x28}, {&(0x7f0000000b40)=""/198, 0xc6}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/36, 0x24}, {&(0x7f0000000d00)=""/228, 0xe4}], 0x8, &(0x7f00000057c0)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f0000000e80)=@tipc=@name, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f00)=""/79, 0x4f}, {&(0x7f0000000f80)=""/31, 0x1f}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/116, 0x74}, {&(0x7f0000001040)=""/164, 0xa4}, {&(0x7f0000001100)=""/80, 0x50}, {&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f00000077c0)=""/217, 0xd9}], 0x8, &(0x7f00000078c0)=""/178, 0xb2}}, {{&(0x7f0000007980)=@ax25={{0x3, @null}, [@null, @rose, @netrom, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000007a00)=""/4096, 0x1000}, {&(0x7f0000001280)=""/59, 0x3b}, {&(0x7f0000008a00)=""/135, 0x87}], 0x3}, 0xffffffff}], 0x5, 0x40012000, &(0x7f0000008c40)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x81) getdents64(r0, 0x0, 0x22) 8.221747797s ago: executing program 3 (id=2596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.999018169s ago: executing program 3 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) close(r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) unshare(0x40020200) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 7.97805765s ago: executing program 45 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) close(r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) unshare(0x40020200) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.192715487s ago: executing program 9 (id=2613): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100bf91000000000000b70200"/66], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a0000"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)=ANY=[]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="000000000000006fb650a3956e14e5d387f3ff776700b70400000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4.142460338s ago: executing program 5 (id=2614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x5519, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0'}, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$P9_RLERRORu(r4, &(0x7f0000000100)={0x11, 0x7, 0xff42, {{0x4, 'set\x00'}, 0x24dfd9ad}}, 0x11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x4, 0x0, 0x1c3, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x100000, 0x33}, 0x0, @in=@private=0xa010100, 0xfffffffc, 0x3, 0x0, 0xb7, 0x0, 0x10000}}, 0x13a) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@random={'system.', '.\x00'}) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 4.049264799s ago: executing program 0 (id=2615): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776730007500"/28], 0x34}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') fchdir(r3) mremap(&(0x7f00003ad000/0x400000)=nil, 0x400000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000771000/0x4000)=nil, 0x4000, 0x2, 0x1010, r1, 0x0) (async) mmap(&(0x7f0000771000/0x4000)=nil, 0x4000, 0x2, 0x1010, r1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r8, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r9, &(0x7f0000001600)=""/4081, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) 3.96832047s ago: executing program 0 (id=2616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, 0x0) 3.95281235s ago: executing program 9 (id=2618): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYRES8=0x0], 0xfe, 0x555e, &(0x7f0000005f80)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) madvise(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8b35a7637272c93a, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095", @ANYRES32=r7, @ANYBLOB="2a69dbb65f52caab29a06b57074ea1d2bfe91f024d33dc9e3e094635b11fe6b05f19bd736e941b671fe1664fab8030de8509a3f52af1942e838c5b6384b94e984054010cf05b3b234c87f05fd3214c89329d053d440c0cb5e68d9383f096ef5832ab9657", @ANYBLOB="b99513be24d41c01e268ea2d2f0bcea54b71b248723b280584212a36e7c7adfd3f0bd701f2e83bb8867016b7a4", @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000940)={0x5, 0x0, [{}, {}, {}, {}, {}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x3, 0x0, 0x0, 0xea}]}, 0xffffffffffffffbe) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r9, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 3.882915961s ago: executing program 0 (id=2619): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xd36, 0x6, 0x8000, 0x7}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) 3.882333921s ago: executing program 0 (id=2620): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_socket_connect_nvme_tcp() r2 = socket(0x10, 0x3, 0x0) r3 = getpgrp(0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x6, 0x2636, 0x58, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x40, 0x8, 0x6, 0x3}}) kcmp(r3, r4, 0x0, r2, r2) getpgrp(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r10}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.34314088s ago: executing program 6 (id=2625): ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0xffffffff, 0x61, 0x1}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='mm_vmscan_lru_shrink_active\x00', r1, 0x0, 0xd}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f}, [@alu={0x4, 0x0, 0x6, 0xa, 0xa, 0x80, 0xfffffffffffffffc}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @generic={0x58, 0xa, 0x8, 0x401, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x2e, &(0x7f0000000240)=""/46, 0x40f00, 0x9, '\x00', 0x0, @flow_dissector=0x11, r2, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0xc}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x8, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x7, 0x9, 0x7}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x4}, {0x2, 0x5}]}, @enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0x2, 0x8b}, {0x9, 0xc970}, {0x0, 0x5}, {0x9, 0xfff}, {0xd, 0x2}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000580)=""/60, 0x78, 0x3c, 0x0, 0x3f24, 0x10000, @value=r1}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x0, 0xf, 0xc, 0x0, 0x100, r1, 0x5, '\x00', r6, r7, 0x3, 0x4, 0x2}, 0x50) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[{0x4, 0x0, 0x2, 0x43b7}, {0xe, 0x9, 0x4, 0x3}, {0x0, 0x2, 0x2, 0x80000000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f00000007c0)={0x328, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x7b}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb1, 0x5b, "4c932ac23d26cbc100309a9c4f1bb3db62734faaa14ef1ea6f8d2464ff4ff6c05032cda1c3912cdccf4854a3defed640ebf50df612b42dd9f75c1b9df32663a6f799c8d34cc8b49c2c8c62725fffd8ddb614bb328e6d2ff7f09d4eaae9b82510271228a1612f2f6971e686d1fc89154546df5157b73841165c04bd6a618ab8f9826ee56deb2b789c5757de29842415ebacfba8410da1337513039a6078bf894da6a470d9c2028d29cf738bae0b"}, @NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "a49403039d1615e78feb6398794cbcfa6f1de27dda546173fe61f5d786998d2ceebeb5b4f9d1ff366e32f6edd268311a33be430ba2f8c675a59f5215180d488025c823e5ce0f994bc623baca250c3d6ce17c04677135a26404074d281a8f44d506598c73a64555ad1b6de17290fdeeac70c6db2e182fba09e02976111b116718e9e42a5ce3b9d4f4cf189652bc3e290e6242825e96ac7c82c52fed2e1b660f311fcbd00455931fd3f6be24fab766c89ed3be1cce787665bc69590df14ba90db7"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xaf, 0x5b, "0a6b77abd4c7c92b04b0f0187266c9fe4fb79344ea07bc9f69b95adef43016fb7056061ce1f93d271af834ffd11fae4ef77a0791682abdb2542396f2a88472a7be9b1deb073af5c928084ac0d8097e7bf1a451a7238a77efb1b686edf52d58d1fd9bb7905d8a320f48952e965d42d524d7e609fe4e823f0392688976bad651e86e59a85af59a1c1fdbd4a4564f22b63ec1f74900567559f26e9d156f697ab3305a889647a182e3327bbc57"}, @NL80211_ATTR_FRAME_MATCH={0xbd, 0x5b, "529ceab20c30e31ffd5d2a1782358a65c13b518e51f0e68c9b7baf90d16e46979105862ebc221271ff5d2bb6733f21b0063e069bc9bbb94fcd427d77ae7a70af71cb96e6a787e747d3b9b28a03c41403c7be0020c179e1c1198af9f67c3ecb5fa697030e4627c904e16605d4a4f5372e46a8309294f174c579e16d079692452ad9c7eda2b2f6c73c603f135128d6e78f0dd60b4ed28c486a4da505d715709e1f5af274c930be1ade13b445681a1620af66b8554184023778fe"}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x4, &(0x7f0000000b80)=@raw=[@call={0x85, 0x0, 0x0, 0x9a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xbb87}, @alu={0x7, 0x0, 0x4, 0xb, 0x6, 0xffffffffffffffe0, 0x1}], &(0x7f0000000bc0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x22, '\x00', r6, @fallback=0x2b, r7, 0x8, &(0x7f0000000c00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0xf, 0x80, 0x8}, 0x10, r3, r4, 0x7, 0x0, &(0x7f0000000c80)=[{0x2, 0x2, 0x4, 0x2}, {0x4, 0x5, 0xd, 0x1}, {0x1, 0x2, 0x2, 0x8}, {0x0, 0x3, 0x10, 0x6}, {0x4, 0x2, 0x0, 0xb}, {0x5, 0x2, 0xd, 0x4}, {0x1, 0x4, 0x5, 0xc}], 0x10, 0xfffffffd}, 0x94) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000dc0)=0x3, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000e00)={0xffffffff, 0x2}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000e40)=0x0) timer_create(0x3, &(0x7f0000000e80)={0x0, 0x1c, 0x0, @tid=r11}, &(0x7f0000000ec0)) r12 = accept$inet(r1, &(0x7f0000000f00)={0x2, 0x0, @multicast2}, &(0x7f0000000f40)=0x10) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000f80), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast1, @local, 0xff, 0xff, 0x1, 0x4, {@mac=@random="7d5bd3393a72", {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x101, 0x1934, 0x5, 0x0, 0x5, 0x2, 'netpci0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @rand_addr=0x64010101, @loopback, 0x61e9d0fd1fb9c959}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) connect$unix(r1, &(0x7f0000001440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$inet6(r9, &(0x7f00000014c0)="34b58b881488369041c7a86b64f633be7bb6faabe46cf7a29442d80135b6ec0094c6ed319e4c42011e2ec084097a8e877a855ea7f8b58a121fe8e04acc664711c019ebcbe9f7e9c39e9a00ebbac71e827095ba0c0ba91e23a8cfe48406a357dd703317851f022cbd7605f46c2ee0a4d85dab9ccc5d095829d19dfc7fe0e8a4ad03d2c503b3eb0474481bc48d23a62d4d7c8387185aa6fefef1339d38eaaf334a7b72a000ed26b7b08239caa2f08fda0390", 0xb1, 0x4040, &(0x7f0000001580)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000015c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @remote, @void, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0xd, 0x3, 0x0, 0x0, "2f8bfd86635755d72d232a969aeda26cda3f65c2d427c3627b1e23a346147d28aa421a9fdbb98a006683834b5e228d4063482ae381755a6188e14ded60ff1bf7"}}}}, &(0x7f0000001640)={0x1, 0x1, [0x1a, 0xb42, 0xe44, 0xf43]}) open(&(0x7f0000001680)='./file0\x00', 0x200000, 0x2) r13 = dup3(r8, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, &(0x7f0000001700)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000016c0)={0x401}}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001780)={0x208, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_NAN_FUNC={0x1e0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_SERVICE_INFO={0x48, 0xb, "a94b0ebd593bb80df28797b2cc0b7e5ec894ec77326ca8e4a1f1b6f8a5aa6af56e03d8f72e53d1fd4a38106e4fabaeac5635c7e18308b0530e381f3b3c35fa771fb44aa6"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1ff}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x168, 0xd, 0x0, 0x1, [{0x26, 0x0, "34376c441e9823b51571fe92766b1359dd6d0d9026ce86b05038ed82f34244c09312"}, {0x69, 0x0, "e59423c77178bd58cee66a63096efab3e908b2a083b6c8d4fc6b16621b0fbed15b3976c1789de037a04e7248febcca86a5136a0179806a9c0308edf6e20b8c53fa8c0e41a70b1a6cae14fa55acaf320f89ceff161571a4fa93d89d0cd0e97515b8bd8e44e4"}, {0xd0, 0x0, "882d9b036a8b8a193ef850fd77334951c0453f137f36534b508f72874f29af6cffd7ccae056ba1c1769d616edafe06de0d8492e398b47b18b6718a85f7b223f66d808e14aa640f4c5f66cc9565c12124e69c89792c68881aa2d694e4672c5e8d1a769edd4d8c836df2b1af45ec99183c18728defadde43ca5de490f9dcd25e70b6d946c6b24b4b62da58db8018a6e6294fb33600cba85534f6e80776fd196b09a8a6562edc60f4fc37eab41b910898fec51b6d6552ce51d6157d3802f9b23f0168233925d9095963e2298ef1"}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0xc860}, 0xc000) 3.3082516s ago: executing program 6 (id=2626): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000084355420000000000000109022d00010000402009040005020300010009210700000120050009058103000206"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xa) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) ioctl$TCSETS(r4, 0x40045431, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0xc010, &(0x7f0000000040)=',pd_3\xd4\xa9\x93\xae\x1c>\xe4\xcf\x05l%\xb0\xa2\xfaW*0^\x16\xad?0\xbe\xc7q/.\x93\x1d\xe3)\x88j{\xf6u\x89\xdc\xeb\xd9\xe9\x80\x8c\xfb\'\xd6\xde/#\xb1\xaa\xdc}\x88\xecc\x97\xbb\xa4\x91!0\x89\x92\xf6[Q\xde\xb1\x88\x87\xce\xb3\xeb+\x9a\xe7\xca\xea\xf8\f\xf9\xab\xccrH\xb9\x8eo\xadr\x89\a\xb6N6\x80J\x9e\x9b\xbe\xad\x96\x93\x9e\xed\x8bo\xe7\xfd\xaf\xe7U\xe5\xe0\xb1\xaf\x1c\xd5\x8cL\xaf`\xea\v\xc3\xd6\xeeJbv4\xd8\xc4\rw.0\xbd\xe9D`\xc9ZoBx\xa5\xf6e\xf9d\x95\xa0\x0f\x9e\x81\x15\xce\xd7\xb3\xd8\xf9\x03\xf2\xe4\x91\xbb\xb4\x99=') 3.058387034s ago: executing program 5 (id=2628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000002200)='./file0\x00', 0x6e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, '.'}}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x80047441, 0xf0ff1f00000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008680)="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", 0x2000, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={0x78, 0x0, 0x40000000000000, {0x400, 0x8, 0x0, {0x0, 0x100000, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x4, 0xfffffbff, 0x0, 0x1, r4, r5, 0xfffffffe, 0x8d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) 3.012553565s ago: executing program 9 (id=2629): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000000000ebff0a"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @local, 0x5}}, {{0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000340)={0x80, 0x9, 0x4, 0x3, 0x9, 0x0, [{0xc44, 0x100000000, 0x200, '\x00', 0x2}, {0x4, 0x4, 0x1, '\x00', 0x1000}, {0xc, 0x0, 0x9, '\x00', 0x1804}, {0x8, 0x3, 0x100, '\x00', 0x8}, {0x5, 0x3, 0x5, '\x00', 0x2}, {0x4000000, 0x0, 0x6ed, '\x00', 0x209}, {0x26f, 0x1, 0x8, '\x00', 0x302}, {0x10000, 0xb14, 0x7, '\x00', 0x3005}, {0x8, 0xfffffffffffffffd, 0x5, '\x00', 0x3789}]}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240), 0x64, 0x537, &(0x7f0000000f80)="$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") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000005000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000008000000000000000000000000000000000edebb25e36ad2096b052330c7392ff0f000400000000eef39477aa36e9a94a6dfa4213aa20f3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1000) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'team_slave_1\x00', 0x3}, 0x18) socket(0x80000000000000a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.364920244s ago: executing program 9 (id=2631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x4, {0x2, 0x4e20, @local}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file2\x00', &(0x7f0000000000), 0x2808800, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4089, 0x88, 0xff9, 0x1}, 0x28) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/179, 0xb3, 0x2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) getdents(r1, &(0x7f0000001080)=""/4096, 0x1000) 2.294452806s ago: executing program 9 (id=2632): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x10000010003, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa05, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x3, 0x7f, 0x7, 0x0, 0x0, 0x0, 0x4f8b, 0x0, 0x0, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) setgid(0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x10, 0x83, &(0x7f0000000040)="3dd6a705e75a9848055d6c91b010aa02", &(0x7f00000005c0)=""/131, 0x4, 0x0, 0x36, 0x1000, &(0x7f0000000080)="9218dfdda76e27bf98df853254c4fde9ad335bebea9b1088b1795e8b0fc846e3e36a0d8ca4c8ca2f10f42d176ecf8e6d20e6e95c4479", &(0x7f00000008c0)="2356b98e9fdcebbfd993fd8f024521df0ff4631484088746bf651d8e8c1d5d6964dc167027f9a2c6e2e474f040b7c449b5a78f99017c89bcb302daea2b68dddd87d276cfb40543147aff0bd37220bb7b65d4bfca25e56717d0d436abb4f4d1b1d6f584f44fe09a4c037306e126bc02990670f1636dcdecaee78c0333a700544bef58d16a0d3dfe44ac9be2d9df77192186c8e7129cbba453ab637e2755d5e9a6acc878f50ae117a2c9716146892b9a37845a4b0850fa82cdc6abaab93cf3827bf56d21671d47bd942b111a3d8e80bd269889fc62fdff844cb53dc83fc2c0e5c432444304cb572b47e7222c82959315d6a06423b230e7ce7c1bfd6b42d9c8c779b7472a76e113e47118b7250676d1d3fb33c7f75adf325b98eba7fc28cae8f7a5e73c096b574794cb24d60798e10f46fddceb05f932324a029edc461e4bcf4024132dedbe1e1087c0f467703fa5143c87b0cfcbc3f8cebcba8933d20dd4d6b20777eee2d7890d97b62a89357dfb00f3f2afcee64abc5b7eee9544cf29433a73a35cdd5b4ee584246dcd1186f0a1cabaef5a44c22448f007a20ce59ba8c48049b8fba4e6ac1d1d32846b162b4f62b25eb744c2268df0d12b9513c4ea02edbd49e052bf187a867a28de74218d359913e42931eec3bc0810e872e357af81bdc15be0d28dddca8cb6febe08d21607b892ba2ef220a1449ac7dee4fdbe6389b18266bfc0dcabcb6bbee87b344d977b7faf6fcc6111df737c3e7f76212862270db5553767a8ebd7c316c47377c94f6a4f8980d62b1a91cd6840f5c7260fc1a2a86ac1c05b67fbce401615b40f2a810ee97adf35522a9bbc4d8b316da950acea46919b5fdd6a5d6ba0e38d964d86c2d452f5b6c1fcda0267df1054561b4818c19b596958cec53e0e435e2260d30a340fe10884294beb775cca6f40d86fa7fbb2597ea841c1d013762a8c0581a118b90ec980fcaf8cbb6e0b9285350359a2c1e044346435acc9b6766d8a1d2f0819a510bff0564f504422864772280f6b77553535ee5ed3820358d0f90654940ec6318ff9d6e3e1a9ba9f7986310aaa2287fa6bdda13866f66a16ab25b269a7555f05ecb44bbaeb1a0be5fbc6ed8baf26de07d36e022b653a8379fcba3ad3ab883c66f0a8cadcedc0630ae9d748637ab13f08112a354eb31b6e1e5d259388dcea53925635be4061247f192cb50e9330b27a6d5ad6b0f4977c7da17cd031fd4925ce5722bc1a8cce27d5c53d9dfb7c793e49af8cbd4a9b9dfe06465aae74dc782d23e0fad1e2564544d3bf71408e61c13d192880df212c975638a9956d512f343fe0e6a1c7960659108d940b44e6478eb473258de47c88739d6f92f718293b608d8f20bde038261303931372d2ec78b373d843e84b3394b22dac92070a6ce0f521f168f600efddb9174428a1c100a86179aa6ff60f428fdf858f67bd97b8b576c04ed75c1e3c597d281cf7067c51477c6c3f62f3a9fe2c0caa32856c75eeccffd1b413a1e6522c5d53fe3f820ca2acb60338bd23b203abaf7b9d2d96a0d6066c4cc847c1a4e56341d4bcb2b9240478859a4ddd44d99b7e013ecf4b85ea9e89c77e49f6ec0a467d55a95cf11ebb4fa81e7287f665d81151f37613ad8954626ef3438db4fe163d20c6b890d4ae9ba33c0388eec5886492a2b2ac3fa2ff87564370ecbe2711fbbe577fc2f1f4f7219ebfd985ebcb2d3262f6e3c36ef834efd27d9415774878839a3e854e9fd671086c7f57a8a550bb164a91f4d941a157d1f44c4cbea8e724f0cf5cdf9da5095c764a44509d1da3c275a8309f892bba522ec782497933b838760bf11b9af49af942cdbc0f18822e1c9082710547de9365909a805096125021e3004d7d51ccb8cdde9efe377726e9498f4526ae60accf39886137bb7d34c7b6fa96e554691a17b4c7aa8129f346332563dd4b59acea68d86b8daccee5a03a918f9386980c23cb1173754db0a6851d65ee36abb7d82358ab588efb305ad8789e30b5fe125780fc85d1b7dc20334c9fdf3465f13b34d6edf942238026571a45fb47a5f4c731c66c580e1b86f5ea5919fec2ef56d4fc646ec4281ee7e4a8dd0e8748bf301db989ab962f6b4cbbdec40305c21e383d8b94fa85e6e4e4ac7a88a0229e6c8fd6c898b2e1e532b68a65e628c6461d67b217473a76aea67f833183be6a587c01412c1e37ff39755537bd9fc09cb5ff7f8e8a2cecb3227e2e499e393f0e54b69675995a516551094ef428d9fb9b5477b37b29e3d4c339bf942029df1dea386dfe3ef3894e903a31c2b065ec2bd6f889766ae4d0d8af6c7d214277cba35261bc5b7476a4f0e52ab20a180e4793e48fbba030ca928f41ff3f741f64b92604b81a93ffb518a5654e0545fe6817fc2ba1db647aaf85179d5bd82429e87a0d43c497a6c5f8e78f11febba91a74345f1e97c6a632967c4c56f697e2053fe14523453f440030ee822a14d13c596c9e42e79899b2a6306612fff89e5f8f4893c21a42e3e4f0cd5f43952922e86d9b401104b5401f3c166b983a3828a2a2488df823859d9d29a40c3e5c146d7f046efcb1f1cc4e5fc5af255226d2b60a6aae05174336f384ce2e619ef51fa1d5d7efeff55659e6ab6fb63ab122599e550c9d10fdec6ab056502032404a0e7e10313dcca29392690c8869aedb7d58bc7b3be41d25a2e2eaa5105f7fc91a7d298d39c4a5e733d4d3c2a25309098180ab03a02b5e6976e4dd39f1fd83606ee0fe77eb454e02b64adec9f4ac85512dc685c0c3332fcef6c28730cd94c739df47dd01176f1c9f71210ff153af61c0fa9faa898ebbafc6eeb21d5eb355628dbfcb4447898a5c463459f1f71d23899adab810019732e53c729c97ab0a272debe3b7d4be92dbe872f780341f19c6ba5986b8a9493f88e13b59aaaa07500382c3a655be1d8dfb628bba13dc729a8e13d1677afc5227e27d84f9b0fd6c194e5bbb82921e71e92eb20ada626e300f6328e685d9044e50608f1293c3e8bc7308691c97540f28bbf3c6d74409d2636e985ba8eef18d0142b5fc37fa0f94ab39a6a0ad15f2adf338daa4badaa16179303d4b32eb99ab722b7304b43cea6b485bfca46e5a8bcea02c7a26f9bdee975962d5d1469a2d741ea0cb63383b23491dbd7dfb168b5e893626af5f06c78038f1149e6c77a65d681f79e3136e012d7c8468f79f47ebadaac397d64e9356aa534e2946e5a48dff4063ac42b161fe4fedf1ac36c8eee9e0fe0e6aaf2e10de4d00115b8f3eca47bcdbfda70de92c368e27f9180156cc574262c4be73e700d31f50dc9ecc4fd8ba3e38c45c6e4185d1fa58dca288103de638b755bec624641c9363a39c7f615ab420f2adba7cf1cc4dbe465ffe6ea6be10a7c271ea917194c7d4e225d3dfa1a454bff6b27148ebea5de2a7fb077bd7b7bd5c7092703e66ed04496f5a5a5ff9c77fccfd17a23ef2e8f0ce2530a891dc40528d6e82621a685a0e2295daff96aec6c8f8e0da3d3c7812646e45e87995151c54183ea65c6c6df7cba530d1866b59786e48d9c51a43d401e8b1264951936787f4cfeaa2e41fca4643d4f01ed7710020c796b14beef53fc57834e3454cada753848b762ca9fa4568abdd19e29d3288f6b56ea1c1429a7d25d3667ecda623c81d1225bdf36dc3ad5a4d46807aa87ac1516c01cbf07f6d39d5b3f17e043201590fa4fe85c14fb9b476dfc2f176ff2c22ebf6f63a4e87a3039700b43f6dcaca6b441288df8489a3efe84d81dd6025b9c72d77b9f101f9cccdcb3e71db322855a247fa13dd84add3d4a6fd3954418a1a4c3f31b9ae9874edc3609e01b588a8b61b7b5a9e3ee7465449cd4a5ffe3593d178611a56dcbfe3f12cfb1df6df09e368b3451bd8219ccd0413bc1c36d2b481d53e040de21a805b58a4680760506a7827196e6b1b3c12a0bffeafa24a2b56879dc55320a0421616e8d40630ae1c4c1b7ce05bab9536ddc514effcb3108d461a1df34281f8aa16f80d32818cf4fad65f984814553ea5c771a1a045a50b58926c139a6f7b7b4537d68031ae88cacbe87148c1acfe16c462c6ce019080063fa74a17a5e70ee4623104001ab3c5cdb39eacc81a0bcbf405a4feb6b4e2e401c69afd0994b300ee86879273d02577747bf5617c851e6fd97eaf74e0cca0eb8e4e7afe782e5c8532d73af2ee59a5a15515f7c99a583377e90f6c5f9951dff301a552080911cf9c4c4bf8643721968b91befda33a8f8809dcc8c6505485f4cfff1bb3e8840d0705128a93e5b9ee719ec332da2f588cfb607e758abfc246a8b277baabc971ee993a6833de5092a8ee7dc87ad3e863de18e08f23a4317e42e229c6881be2ca43a9538c70741a3e27536bf8f907db303a485bbf9e06836504fe26bdc68042b911b65c2f04c00b45a289f7cb54a926d39b8e3e651d2956a1c7748378e8a35a71698843b061b25806937ac4644b8c54f26b297385110b2c4a69c590dfaf51d035bfd07a6cb6473e7cdb874863cf6cbec527a6d8bee1f44a40ce1d6cf8ef246f23cdf1203bcafd1daeb67f916993807b5887d25b0bf426f3a664396892cb1523eb854e29b137971062305294326e6f1c744e23577cd1d59c53206e1868f1e4b66b670642fadec2921d20c466ab3144088acc071be3963867b960ecaaf304bcf57c98bdb40f16e9778222e4aa67ff6361e5ed4837784f79329960f34e7bfd0da460c5f96ebd4f06965e7a5fd809cf6c84950f5e8275293e792dfa438a3dac7adc1934472b7540fa5e28ce0c5e76273ea85b277cd19942a48009f445d32222db46ec27bc2f817b34122aa7f8229fc4041f3bcc151e7a8d27c74702468a51ab66aa4834ec221d9c09195fcbf5b98ab50fea1849150f203427e8dfc18192a0f53b805835a2211df5b8757bef56e837e0606c31d0cc08e49d91cb1e3e3786d111de98213f95b7bd3df9270e592a071b3078de3ef751432e56364dc44515535acd6b79b1274f11de0363486c7997e3935e52603c8ad7dfc0aa53a35fbe0b53b42530bc36e7523af21d8927c15f0142c0eace574daf0fa6c47b7683c96216e54fba086d72b489948271b4b15330eb840c79a14734e9cfd637839f5b1c52495ff4bcb7f1919d15710d080ef7689f9906bc17dcd3681595c5a0ff00bda4d180831822f1b096f462e50577933728f8710d4ef50a3f2404074b5225adb2540cd1beabbba7ce63e520a28eefa765ee9b6e3f83598696e4918facc1231f6f1d5df2b2800bf8c9fbcea64413e13f6d8b68b84de7491b0e1be773083f474c593cf072cfd0da3bd2d6b9137c6a97f6975e98039bd15d66d0034bb21bc8c96a4390d3ea09b76c01ad9d0e71bdf97695b2294c8d7823c78b31a058000ef3d34da4178ae68fd2b7ce752d2eab12aabec7025adf4f74e635a1884309425e2e18112f8cfac7930ed60ebadc9bd9c1de5b8cd8b31cf74954bfd77cbb960c0566580e07d2c2495476f02f0daf3a2bcab4f916bd7be0b8f59039c542bd99b8f807456fc85754498d0b790c596b26caa4dc8a7782df897be8827c83d69ddf2bdb347ea92d971c46ed0b5b9a6b041d72c49b59bb0b2cb4e5db8d173f3cdec16796cbcc68d5603125acecfe35a0ca2bbd04ecbc82483d29bc68dabeb353f077a03f87b7614962d13cda6fc3900835d716f5847359770134121194d4fa779febd78e09915f3d9aa52354463707af04f06dd0b7d2e2c90f868d74bfc75619f7b21e92f1215f7473aade2e6e5e47e466437a1d03ab48c9936d721d703324ff46f93690b03b89e64191652085c4cdc3", 0x2, 0x0, 0xfffffffb}, 0x50) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3e, &(0x7f0000002400)=""/82, &(0x7f0000002480)=0x52) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r10, 0x0, 0x40000000, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x44f0) 2.246957336s ago: executing program 9 (id=2633): syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0xa, 0x0]}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, 'P'}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x6, 0x6, [0x0, 0x7, 0x9, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x5}, @feature_unit={0x2, 0x24, 0x6, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81, 0x8}}}}}}}]}}, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(r1, &(0x7f0000000140)='uid_map\x00') ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000100)) 1.902378961s ago: executing program 5 (id=2635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast2, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x1, 0x0, [@private2]}}}], 0x28}}], 0x1, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) 1.901144151s ago: executing program 5 (id=2636): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x41) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886ddc2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.900609431s ago: executing program 5 (id=2637): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000280)={0x8, 0x0, 0x9, 0x1, 0x2}) (async) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000280)={0x8, 0x0, 0x9, 0x1, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x0) (async) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x453, 0x802, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000004c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_delete(0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 833.926857ms ago: executing program 4 (id=2642): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00009cd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) r8 = getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x1, 0x10000000, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330, r8}, &(0x7f0000000100)={0x40, 0x6, 0x9, 0x8, 0xffff, 0x3}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000003010101000000000000000002000000300002802c00018014000300fe88000000000000000000000000010102000400200100000000000000000000000000000c0019800800020002000000"], 0x50}}, 0x0) 833.480187ms ago: executing program 0 (id=2643): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) (async, rerun: 64) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="20000000060000007f0000009600000000400000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000400edff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)="91b8a8f2f8acb5086a320819ddc8", &(0x7f0000000200), 0x4, r2}, 0x38) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) (async) listen(r3, 0x5) (async) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x8, 0x1}, {0xffff, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x10}}}]}, 0x38}}, 0x4000894) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async, rerun: 64) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) (async, rerun: 64) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) (async, rerun: 64) syz_open_dev$hiddev(&(0x7f0000000040), 0xb, 0x212e02) (rerun: 64) 828.908767ms ago: executing program 0 (id=2644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='module_request\x00', r0, 0x0, 0x40000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xc) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xe) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001c00), &(0x7f0000001c40)=r9}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f00000004c0)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 181.811257ms ago: executing program 6 (id=2645): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x94) io_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100001100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe399}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x10402, 0x0) write$binfmt_elf32(r3, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x1000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1, &(0x7f00000002c0)=""/112, 0x70}, &(0x7f0000000180)=0x40) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x7, 0x180000, &(0x7f00000005c0)=0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001000110400"/20, @ANYBLOB="8e53f272657e47042b8ac19089bc74957597fef2b1b53886ba8137e35e0538b3f34e51df2f4807f3e91212cad489b5579b03838861320cf83eac8b95f0faf4c1f6089cb808e95bc29d7c2a7afecd9956b0c8d7eb33bb2929959937cc209d778fa8d74529aab1ea225a6f60ba3dffbf4a9a4b420964fb28b97ac54dcc7bcd3841fd66764c59c897a59134ce0d362c3ef49551e90a573588b4a8461793963979df4657ee1d1a7bb892d1c615bf33e09ee21659a217c4e988404d36a6fc5215cb3d6914e54ec623a441b362b5d893a9108e633557a89644598d199c931269b2378e9e72b9929d8f6468cae2eff934ea6d05e10401eb456f10a9b2ad769fb9747289c26335b21882019aad1832c9c2d08aba1ace7af717afaed12861ad6297db854e1cbe9bb8751933deca2f33928029b23a3a445166d390a687460a7ca7f1449706127dfe7cdf0f8ea3e25087a876d9e6f1a5927c54f807", @ANYRESHEX=r4], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB='N\x00']) 181.402137ms ago: executing program 5 (id=2646): prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xf30, 0x111, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0xd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0xec9}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8, 0xfd}}}}}]}}]}}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x3}) 178.322057ms ago: executing program 4 (id=2647): r0 = dup(0xffffffffffffffff) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400002, 0x80, 0x20}, 0x18) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000100)='^&+^$\x00']}, &(0x7f00000001c0)={[&(0x7f0000000180)='\\\x00']}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x2, 0x0}, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10000000, '\x00', 0x0, r0, 0x2, 0x4, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9ccb49ef739468f4, 0xe, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xc, 0x4, 0x8, 0x8, 0x1}, @jmp={0x5, 0x1, 0xa, 0x2, 0x4, 0x6, 0x4}, @call={0x85, 0x0, 0x0, 0x87}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x56, &(0x7f00000002c0)=""/86, 0x95a966f52b2576e7, 0x0, '\x00', 0x0, @fallback=0x29, r1, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xc, 0xd, 0x6}, 0x10, r3, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[r0, 0x1, r0, r4], &(0x7f00000004c0)=[{0x0, 0x1, 0xb}], 0x10, 0xffffffff}, 0x94) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000005c0)) sendfile(r2, r5, &(0x7f0000000600)=0x7fff, 0x6) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) getpeername$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r7}, 0x14) mknod$loop(&(0x7f0000000700)='./file0\x00', 0xc000, 0x1) unshare(0x8c086b79f1b9f5fa) r8 = socket$netlink(0x10, 0x3, 0x15) unshare(0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000740)={0x0, 'bond0\x00', {0x1}, 0x5}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000780), r8) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0), 0x8) listen(r2, 0xd) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x40, '\x00', 0x0, r0, 0x3, 0x4, 0x1}, 0x50) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000900)=0x0) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x3002443, &(0x7f00000009c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x6ab3}}, {@max_read={'max_read', 0x3d, 0xe0}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}, 0x1, 0x0, &(0x7f0000000b40)="1f00fbed8722c7e62f024957e76b8441cb2ec88ea1a2b70c355a1b921bb5d2706f25ea8865e295d3b884a7f245381595ee7af872b3ec28ab8d4e7d532059a321adbcee81e985a67331597c53073d18901e75318ab2fbe9edc0966989eba36f77ff34be8bfceb0ea6315d0b201ff85a2cc7ae99fbbfba1ed501a5fd22f61852fcf521f3747940c3ca09d1e1cb062c906faabe45ffb928b1d6556f5a11c3970747c1241916e3b96ff4a679fed8fb2a6a75979d318b399957c143858effff156da7f7e4b39f7029") close(r12) sendmsg$inet(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000c40)="abb14eabdf3d8054d94ece23ed77a159febc03b57e1a09bbe52018e9444bde3c8f5c5dcd5c6ced3541149875fb65cd6958383ed540fb8848c3e5448c959ebe3547ba192c35acc6c0c0f68415eb4709d218ee3ec66826a54451b6c93992a21813fbe9516711867dd63c42375c92d83a189d1aeef3d3bd776250c88d277c3103964abff03e745c449a2cb587300c5c26c28809df4555f6d76d7fa9b6dc07445d60a9211ea24537d9b084a73e6a99aaa68a5c9939ad7d236b5652f9d765b48ff7c2165cf2df01d1bda593178889f3361c3d6f", 0xd1}, {&(0x7f0000000d40)="ab387b6fbb6ff9e29dc1f565f6544a8788ad05424db2122b23133a9d7f19e838e778634fbf4e4f889b8f8eba5530daae162f35550c750cf8d3d3b30965b36d8e0824097ad7b3374129a81a01cec7e6b55f0fa080a6906912eeb347be4abdad4ea25ea8efb89061fe26ce297c9d677dc4d2fd02ce793c88", 0x77}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="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", 0x1000}], 0x4, &(0x7f0000002e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x25}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x647}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x34, 0x0, [{0x7, 0x12, "f5704e8a7d53af200a0378d22f4016e5"}, {0x6, 0xb, "8ff4466c5777a429d4"}, {0x7, 0xd, "9ea14bff23f8b183e65898"}, {0x6, 0x4, "f981"}]}, @rr={0x7, 0x17, 0xa, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @generic={0x89, 0xc, "746830701238ccb4167a"}, @generic={0x44, 0xd, "255ab29d7fb4b49fe8776b"}]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}], 0x158}, 0x4) bind$xdp(r0, &(0x7f0000002fc0)={0x2c, 0x4, r7, 0x4, r0}, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x802208c}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x5c, 0x0, 0x4bb0df7a226c4eb3, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40814}, 0x14) 149.377958ms ago: executing program 4 (id=2648): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = socket(0xb, 0x800, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x1, 0x6, 0x54, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, 0x700, 0x8000, 0x5, 0x80000001}}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000440)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000480)='GPL\x00', 0x7, 0x7b, &(0x7f00000004c0)=""/123, 0x41000, 0x64, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x1, 0xb1, 0x8b1}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x2, 0x4, 0xd, 0x7}, {0x4, 0x5, 0xd}, {0x3, 0x1, 0x7, 0x4}, {0x3, 0x4, 0xa, 0x2}, {0x4, 0x5, 0x2, 0xb}, {0x2, 0x5, 0x4, 0x5}, {0x1, 0x3, 0xd, 0x4}, {0x2, 0x3, 0x2, 0x6}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000000}, @alu={0x7, 0x1, 0xc, 0xb, 0xb, 0x50, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xb, 0x6, 0x3, 0x4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9f9e}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x4, '\x00', r3, @sk_msg, r4, 0x8, &(0x7f00000003c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0x6}, 0x10, 0x0, r5, 0x2, 0x0, &(0x7f0000000740)=[{0x2, 0x1, 0x2, 0x3}, {0x1, 0x1, 0x4, 0x2}], 0x10, 0xa7}, 0x94) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x208, r6, 0x100, 0x70bd29, 0x3, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_OURS={0x174, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "2b8878f56de7e9a320547b0df17bebbc654cc8f2a9d2a1e1ff33b65487b280cfda71ba036022fd54a16bb06f37e460470ad838f6ce316b3e"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[-(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "fd48b89d774f7fafd382431c492b9892ce38189caf3ae6fe10ec7752a6c037b61771dacf12d6d977aedbb8dce5009265f449efe043e7c07465e7371b0efce38a2d8a3f1c5f653f0b942109c73484be0c1d16d7235dbf3b262e04ec5cd69d9150c9817b06aea7ad359eee016b5e347e68ae6e890b02976e8eefd0019fbe5e1481a743baee6a1463ff7757850a0b6088324b546fe7d445b3a34752b0f9dd190b303f125d560811d797c229cce8d95e8dc53557b4825aefead03f"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x208}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) getdents(r4, &(0x7f0000000c80)=""/182, 0xb6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="76bb7a3f8df9ebab3b35"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2c085) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000010c0)={'syztnl0\x00', &(0x7f0000001040)={'gretap0\x00', r3, 0x7800, 0x8000, 0x0, 0x9, {{0x14, 0x4, 0x0, 0x6, 0x50, 0x65, 0x0, 0x4, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x3a, 0x2, [{0x1, 0x9, "eeadf1a8dfce5e"}, {0x7, 0x10, "52f0fb33512d512487dcdd8f189f"}, {0x6, 0x10, "72c311d44d434108764b32b3c011"}, {0x5, 0xb, "827a8b51b32c43ba4a"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x238, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xdc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "60824eb4a3e287078879d6bc05f78978ace3191c1ebc721686ac00c1cef67e296d2ce5f67aab39e3eefc82f7aed3a468af94429a541e0b2d0eb91dd4ae5ce2f965819d6a56c2ee26ee35a641c521ff5ab6d249f616b5978d192df46f13a80e4d28a49bf61656f597b8914645b092efeb49258bfeefb2deac18b6fa28333fb5c0b3e7fb2b95bfb450c80f9260b5fdbd75f03e07c56a7b555bcc087d1b19e5060f57c489cfbd94b345e67e5d82253e4f3c547d6c30b4015b361a91bb2edea191fa85139513ab72763c5cf36752"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.%]/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',-:%,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}]}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "566f52024cb62eafa855ca038fc439da0d2315245d2a67f34cdfeb49527ada6b073626d24943ef5d0463ecbeaf9c7d8c1fd33906181277b7216690a53762163524db7532990f62e5bf950a2162d0457dfe2c1462686f3f92156bc5857c100942868d7e449697a419603eafca4238373b89c68c0694deba58b6cbfb44e1d418904bc2a09339244af3f86f12961c39c031e47717a93abceb75847f139ceb551ef300486fdd0f6901ca290e2cd3a99e88259360767e891f7fb050cb2d63c68f"}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x6, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, [@map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @exit]}, &(0x7f0000001400)='syzkaller\x00', 0x7f, 0x1b, &(0x7f0000001440)=""/27, 0x41000, 0x5d, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x1, 0xd, 0xb8, 0xfff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000014c0)=[{0x1, 0x4, 0xc, 0x8}, {0x2, 0x4, 0xd, 0xc}, {0x5, 0x5, 0x1, 0x1}, {0x1, 0x4, 0x1, 0x4}, {0x0, 0x1, 0x9, 0x7}, {0x3, 0x5, 0x4, 0x9}], 0x10, 0xe79}, 0x94) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001600), 0xbd, 0x0, &(0x7f0000001640)="0f83f47c1c7b5950f8574c3efcb3d56a15f7deac489c7f4344c3c0b60beedd87222f366c3bbc9560fd4593d5d4dd912cc7b1c855d29d168128c2e0d3d8f4c4b079bfb7811db9e6dd3310d7d0812095d23b7d410cdaa8c40a7a7d571bc5ba96285437023eeebea328ca7312b38b38e2fd78df5b56350839c63019fba824835d4fb57e2fc1c4466499c6952a2105d06072845b5409c03732baa0b8831853167ac56cd6d14ab06bf52f1a721f47521fdcf1555093f0ebe6506c32039cd01c"}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000001740)) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x9, 0x6, 0x2, 0x0, 0x8100, r4, 0x6, '\x00', 0x0, r4, 0x5, 0x1, 0x0, 0x0, @value=r4}, 0x50) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c00)={&(0x7f0000001880)={0x137c, r12, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa4c}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7e55}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x915}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x38}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x53}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4da}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x137c}, 0x1, 0x0, 0x0, 0x40000044}, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002d80)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000099d000/0x2000)=nil, &(0x7f0000e63000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000515000/0x3000)=nil, &(0x7f0000002c80)="3fcb7fb08ca6886de6e8647e4feb9cf8ecdcca1bdda4872e6321e85dffeb9ffb37044bd6c3e3c935c17de4991b78b895a955e13b886a224aa37adddcae2ffa3832d2aa24a5275d21be047c73e5c744b232dfa155dc11cff5de48c3539a27a08ce4fa31241e50770cb530a1ad9dacfcad99276149d5583a00ce119689ece433dc36a0b96242cda097fab0a8735b1099d70bdf9e06dcdf96cd543da246f19aa64af77408cb621953ff87abed452e8b214cdcca96ffcd827264f8a4278d84f20fc197f98faa91c8be20cb495e8a4b1c3d107da6bc34d8aaaa4298f796bce9f4e998d3946ce81d05f5432ea1db40", 0xec, r4}, 0x68) r13 = accept$inet6(r10, &(0x7f0000002e00)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002e40)=0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r13, 0x29, 0x41, &(0x7f0000002e80)={'filter\x00', 0xca, "6178c904ccf12b5b39adde40d7cfd62e4e78f825a1d96df28d95ddb5a68bd3b3248a38051ec22594347c6d9a5285c39a4e94ef2dc1bafbbb16c480895d10483fc5fe17001dcd8ca412465138ce3af3929742f899e4152d512ca5e4f2bcfdd14c18970b70802a8d198364a46926432d78b08574a6c61d7cdf4549a646fa766e79da6aac1e350c56fb140036233cc8d0faf90c20d55c9701749747c92d8f6f6ba1c39b4e6dfd21dc695a96786aa49b0fc63d279381845a909774da03f540809c287f1105b52e16413ccbf0"}, &(0x7f0000002f80)=0xee) 149.000758ms ago: executing program 6 (id=2649): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x4, &(0x7f0000000500)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x3}, {}, {0x3, 0x20, 0x3, 0x7ff}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140408c1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="768839b9", 0x4}], 0x1, 0x0, 0x0, 0x4000081}}], 0x2, 0x40) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0xffffff0d, @private1, 0x2}, 0x1c) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10010, r3, 0x53543000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000640)=0xc) sched_setscheduler(r5, 0x3, &(0x7f0000000680)=0x101) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r6, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, 0x2}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8045}, 0x4881) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000027bd7000fedbdf253600000008000300", @ANYRES32=r10, @ANYBLOB="0c0ea8893da672e3a232c04569abfc72a12328de7a10a004eeb0af74"], 0x28}, 0x1, 0x0, 0x0, 0x48064}, 0x80) write$binfmt_misc(r4, &(0x7f00000001c0)="5c78b97f30c944f69740c4d6b1f40403685d9f523e49033fb0956dd3340894f2820764e0fa32f674a8fafaa06a87ac6eea46d98f340aeddc5093aef1fbf322d2d15fca0090aea7f89be2bb8c350d33d5c2d46e", 0x53) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r12, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 148.410887ms ago: executing program 4 (id=2650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup(r2) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendto$packet(r3, &(0x7f0000000000)="1e0f88704a769562477d1e97efa61d81f4b78da3babb57b03dc5726c692bce2f746372a0dfd0b4fb0c5a4c2a84c151efdf4b5ea516828819", 0x38, 0x90, 0x0, 0x0) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) r4 = socket(0x1, 0x803, 0x0) bind$unix(r4, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r4, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 90.713528ms ago: executing program 6 (id=2651): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(0x0, 0x5, 0x80000) r0 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x181300, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'macvtap0\x00', 0x100}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r9, 0x20, 0x4, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 83.700608ms ago: executing program 4 (id=2652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) 50.196999ms ago: executing program 6 (id=2653): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000002c0)=0x16, 0x4) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000040)={0xffffffff, 0x5}) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)) sendfile(r5, r0, &(0x7f0000000240)=0xfe23, 0x100) 0s ago: executing program 4 (id=2654): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000340)={0x7, 0x5, 0x6, 0x1000, 0x19, "2b5b712f1a04e7ad"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@tcp6=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x401, 0x81, 0x400}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) kernel console output (not intermixed with test programs): 000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 255.699478][ T24] kauditd_printk_skb: 65 callbacks suppressed [ 255.699489][ T24] audit: type=1326 audit(1751849657.754:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.007646][ T24] audit: type=1326 audit(1751849657.754:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.133356][ T8090] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 256.150609][ T2716] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 256.159732][ T24] audit: type=1326 audit(1751849657.754:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.183317][ T24] audit: type=1326 audit(1751849657.754:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.207000][ T24] audit: type=1326 audit(1751849657.754:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.231400][ T24] audit: type=1326 audit(1751849657.754:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.255049][ T24] audit: type=1326 audit(1751849657.754:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.280776][ T24] audit: type=1326 audit(1751849657.754:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.305332][ T24] audit: type=1326 audit(1751849657.754:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.329101][ T2713] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 256.338873][ T2713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.349425][ T2713] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.358611][ T24] audit: type=1326 audit(1751849657.754:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 256.384164][ T2713] usb 5-1: config 1 has no interface number 1 [ 256.409453][ T2716] usb 4-1: Using ep0 maxpacket: 32 [ 256.501061][ T8092] F2FS-fs (loop1): invalid crc value [ 256.509611][ T8092] F2FS-fs (loop1): Found nat_bits in checkpoint [ 256.530182][ T2716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.541239][ T2716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.551403][ T2716] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.560643][ T2716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.581077][ T2716] usb 4-1: config 0 descriptor?? [ 256.592418][ T8092] F2FS-fs (loop1): Start checkpoint disabled! [ 256.599275][ T8092] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 256.621456][ T2716] hub 4-1:0.0: USB hub found [ 256.877875][ T296] attempt to access beyond end of device [ 256.877875][ T296] loop1: rw=2049, want=40984, limit=40427 [ 256.880797][ T2713] usb 5-1: string descriptor 0 read error: -22 [ 256.900478][ T2713] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.909779][ T2713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.939484][ T2716] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 256.952326][ T2713] usb 5-1: MIDIStreaming interface descriptor not found [ 256.959973][ T2713] snd-usb-audio: probe of 5-1:1.2 failed with error -16 [ 257.039444][ T2716] usbhid 4-1:0.0: can't add hid device: -71 [ 257.045537][ T2716] usbhid: probe of 4-1:0.0 failed with error -71 [ 257.079790][ T2716] usb 4-1: USB disconnect, device number 25 [ 257.111113][ T8104] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 257.152857][ T2713] usb 5-1: USB disconnect, device number 29 [ 257.224246][ T8107] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.2166: invalid indirect mapped block 234881024 (level 0) [ 257.238667][ T8107] EXT4-fs (loop1): 1 truncate cleaned up [ 257.244499][ T8107] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,noload,dioread_lock,nogrpid,jqfmt=vfsv0,delalloc,quota,resgid=0x0000000000000000,,errors=continue [ 257.365919][ T8118] futex_wake_op: syz.1.2169 tries to shift op by 32; fix this program [ 257.374834][ T8118] 9pnet: Insufficient options for proto=fd [ 257.427550][ T48] attempt to access beyond end of device [ 257.427550][ T48] loop3: rw=2049, want=40984, limit=40427 [ 257.501272][ T8123] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 257.510763][ T8123] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.573819][ T8120] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 257.581994][ T8120] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 257.590643][ T8120] F2FS-fs (loop8): Unrecognized mount option "0000000000000000000000018446744073709551615" or missing value [ 257.682168][ T8132] erofs: (device loop3): mounted with root inode @ nid 36. [ 257.913066][ T8147] __nla_validate_parse: 123 callbacks suppressed [ 257.913073][ T8147] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2178'. [ 257.929439][ T8149] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2178'. [ 258.019964][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 258.209470][ T3880] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 258.628079][ T8160] usb usb1: usbfs: process 8160 (syz.1.2181) did not claim interface 0 before use [ 258.637560][ T8160] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 258.666780][ T3880] usb 4-1: config index 0 descriptor too short (expected 256, got 36) [ 258.675179][ T3880] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 258.685615][ T3880] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 258.819030][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2184'. [ 258.849520][ T3880] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 258.858904][ T3880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.867943][ T3880] usb 4-1: Product: syz [ 258.872503][ T3880] usb 4-1: Manufacturer: syz [ 258.877144][ T3880] usb 4-1: SerialNumber: syz [ 258.997795][ T48] attempt to access beyond end of device [ 258.997795][ T48] loop8: rw=1, want=1041, limit=128 [ 259.058350][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2189'. [ 259.102101][ T3891] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 259.163867][ T3880] usb 4-1: USB disconnect, device number 26 [ 259.579383][ T3891] usb 5-1: Using ep0 maxpacket: 32 [ 259.699439][ T3891] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 259.707615][ T3891] usb 5-1: config 0 has no interface number 0 [ 259.713974][ T3891] usb 5-1: config 0 interface 2 has no altsetting 0 [ 259.790501][ T8204] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 259.800861][ T8204] EXT4-fs error (device loop1): __ext4_iget:5007: inode #3: block 1803188595: comm syz.1.2194: invalid block [ 259.813112][ T8204] EXT4-fs (loop1): no journal found [ 259.879583][ T3891] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 259.889636][ T3891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.900317][ T3891] usb 5-1: Product: syz [ 259.905984][ T3891] usb 5-1: Manufacturer: syz [ 259.910997][ T3891] usb 5-1: SerialNumber: syz [ 259.918545][ T8214] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 259.919839][ T3891] usb 5-1: config 0 descriptor?? [ 260.191726][ T8220] hub 2-0:1.0: USB hub found [ 260.197600][ T8220] hub 2-0:1.0: 1 port detected [ 260.332032][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2199'. [ 260.502336][ T3891] usb 5-1: USB disconnect, device number 30 [ 260.516453][ T589] udevd[589]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.629481][ T2713] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 260.829903][ T24] kauditd_printk_skb: 142 callbacks suppressed [ 260.829913][ T24] audit: type=1326 audit(1751849662.884:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.861435][ T24] audit: type=1326 audit(1751849662.884:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885083][ T24] audit: type=1326 audit(1751849662.884:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885097][ T24] audit: type=1326 audit(1751849662.884:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885110][ T24] audit: type=1326 audit(1751849662.884:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885122][ T24] audit: type=1326 audit(1751849662.884:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885136][ T24] audit: type=1326 audit(1751849662.914:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885150][ T24] audit: type=1326 audit(1751849662.914:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885165][ T24] audit: type=1326 audit(1751849662.914:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.885453][ T24] audit: type=1326 audit(1751849662.934:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 260.889415][ T8236] xt_socket: unknown flags 0x40 [ 261.089542][ T2713] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.103547][ T8241] overlayfs: failed to clone upperpath [ 261.109141][ T2713] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 261.120657][ T2713] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 261.130555][ T2713] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.148078][ T2713] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 261.157573][ T2713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.166155][ T2713] usb 9-1: config 0 descriptor?? [ 261.478067][ T2713] usb 9-1: MIDIStreaming interface descriptor not found [ 261.568931][ T8248] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 261.629593][ T8257] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 262.243825][ T3891] usb 9-1: USB disconnect, device number 9 [ 262.490530][ T8277] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 262.504408][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 262.513756][ T8281] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2217'. [ 262.513870][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 262.538946][ T8277] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.574086][ T8283] fuse: Bad value for 'fd' [ 262.736072][ T8300] SELinux: Context : is not valid (left unmapped). [ 263.026160][ T8325] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 263.239438][ T3891] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 263.424105][ T8342] device pim6reg1 entered promiscuous mode [ 263.463228][ T8344] EXT4-fs (loop1): Unrecognized mount option "appraise" or missing value [ 263.603961][ T8352] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 263.633731][ T8352] attempt to access beyond end of device [ 263.633731][ T8352] loop1: rw=2049, want=544, limit=256 [ 263.645046][ T8352] attempt to access beyond end of device [ 263.645046][ T8352] loop1: rw=2049, want=1024, limit=256 [ 263.656911][ T8352] attempt to access beyond end of device [ 263.656911][ T8352] loop1: rw=2049, want=2404, limit=256 [ 263.710695][ T8363] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.719467][ T3891] usb 5-1: config 0 has an invalid interface number: 123 but max is 0 [ 263.721490][ T8363] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 263.735615][ T3891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.748419][ T3891] usb 5-1: config 0 has no interface number 0 [ 263.750177][ T8363] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 263.959468][ T3891] usb 5-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 263.968644][ T3891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.978660][ T3891] usb 5-1: Product: syz [ 264.013792][ T3891] usb 5-1: Manufacturer: syz [ 264.029050][ T3891] usb 5-1: SerialNumber: syz [ 264.043274][ T3891] usb 5-1: config 0 descriptor?? [ 264.081273][ T3891] cdc_acm 5-1:0.123: More than one union descriptor, skipping ... [ 264.318419][ T8376] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2244'. [ 264.327587][ T3892] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 264.455269][ T8382] incfs: Options parsing error. -22 [ 264.468569][ T8382] incfs: mount failed -22 [ 264.548141][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.579500][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.592791][ T8384] device bridge_slave_0 entered promiscuous mode [ 264.651548][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.659450][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.666959][ T8384] device bridge_slave_1 entered promiscuous mode [ 264.760397][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.767476][ T8384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.774790][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.781848][ T8384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.789705][ T3892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.813567][ T3892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.840024][ T3892] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 264.855507][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.872760][ T3892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.892688][ T3892] usb 4-1: config 0 descriptor?? [ 264.903993][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.913461][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.935356][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.952876][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.959977][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.992654][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.008124][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.015246][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.044759][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.058105][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.088520][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.113937][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.132594][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.153656][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.182437][ T8384] device veth0_vlan entered promiscuous mode [ 265.202645][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.234108][ T8384] device veth1_macvtap entered promiscuous mode [ 265.265485][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.297637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.311814][ T296] device bridge_slave_1 left promiscuous mode [ 265.317987][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.349868][ T296] device bridge_slave_0 left promiscuous mode [ 265.356172][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.364445][ T296] device veth1_macvtap left promiscuous mode [ 265.370981][ T296] device veth0_vlan left promiscuous mode [ 265.401033][ T3892] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 265.418011][ T3892] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 265.427084][ T3892] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 265.821404][ T8374] udc-core: couldn't find an available UDC or it's busy [ 265.834112][ T8374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 265.917513][ T8432] input: syz1 as /devices/virtual/input/input16 [ 265.933188][ T24] kauditd_printk_skb: 249 callbacks suppressed [ 265.933198][ T24] audit: type=1400 audit(1751849667.984:5399): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=897 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.069495][ T3892] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 266.077464][ T3892] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 266.091706][ T3892] pyra: probe of 0003:1E7D:2CF6.0013 failed with error -71 [ 266.225151][ T3892] usb 4-1: USB disconnect, device number 27 [ 266.309709][ T8435] fido_id[8435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 266.391960][ T2711] usb 5-1: USB disconnect, device number 31 [ 266.755181][ T8447] xt_TCPMSS: Only works on TCP SYN packets [ 266.823991][ T24] audit: type=1400 audit(1751849668.864:5400): avc: denied { compute_member } for pid=8450 comm="syz.3.2266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 266.909366][ T2711] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 266.921581][ T8455] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 266.933877][ T8455] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 267.184962][ T3892] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 267.359412][ T2711] usb 2-1: Invalid ep0 maxpacket: 16 [ 267.439396][ T3892] usb 5-1: Using ep0 maxpacket: 32 [ 267.479402][ T438] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 267.509451][ T2711] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 267.579453][ T3892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 267.590430][ T3892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 41542, setting to 1024 [ 267.749490][ T2711] usb 2-1: Invalid ep0 maxpacket: 16 [ 267.754920][ T2711] usb usb2-port1: attempt power cycle [ 267.779509][ T3892] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 267.788645][ T3892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.796700][ T3892] usb 5-1: Product: syz [ 267.800942][ T3892] usb 5-1: Manufacturer: syz [ 267.805544][ T3892] usb 5-1: SerialNumber: syz [ 267.810860][ T3892] usb 5-1: config 0 descriptor?? [ 267.850413][ T3892] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 267.869461][ T438] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 267.906432][ T438] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.916248][ T438] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 267.926187][ T438] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.939114][ T438] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 267.948181][ T438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.990425][ T438] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 268.051598][ T3892] usb 5-1: USB disconnect, device number 32 [ 268.189452][ T2711] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 268.279409][ T2711] usb 2-1: Invalid ep0 maxpacket: 16 [ 268.429438][ T2711] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 268.519417][ T2711] usb 2-1: Invalid ep0 maxpacket: 16 [ 268.524836][ T2711] usb usb2-port1: unable to enumerate USB device [ 269.836859][ T2711] usb 4-1: USB disconnect, device number 28 [ 406.850545][ T8485] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 407.067899][ T8498] EXT4-fs (loop5): Ignoring removed nobh option [ 407.109937][ T8498] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 407.141916][ T8498] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.2277: invalid indirect mapped block 256 (level 2) [ 407.159665][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 407.162458][ T8498] EXT4-fs (loop5): 2 truncates cleaned up [ 407.181844][ T8498] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue [ 407.315010][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'. [ 407.575753][ T8498] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2277: bg 0: block 5: invalid block bitmap [ 407.780693][ T8498] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 407.965286][ T8498] EXT4-fs (loop5): This should not happen!! Data will be lost [ 407.965286][ T8498] [ 407.987220][ T8498] EXT4-fs (loop5): Total free blocks count 0 [ 407.999714][ T8498] EXT4-fs (loop5): Free/Dirty block details [ 408.012191][ T8498] EXT4-fs (loop5): free_blocks=0 [ 408.022836][ T8498] EXT4-fs (loop5): dirty_blocks=2 [ 408.033403][ T8498] EXT4-fs (loop5): Block reservation details [ 408.049436][ T8498] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 408.101820][ T24] audit: type=1326 audit(1751849810.154:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 408.157864][ T24] audit: type=1326 audit(1751849810.174:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 408.203262][ T24] audit: type=1326 audit(1751849810.174:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8546 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 408.369967][ T8565] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 408.377557][ T8565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 409.826824][ T8599] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2305: inode #1: comm syz.1.2305: iget: illegal inode # [ 409.847150][ T8599] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2305: error while reading EA inode 1 err=-117 [ 409.866860][ T8599] EXT4-fs (loop1): 1 orphan inode deleted [ 409.873003][ T8599] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 409.939402][ T7] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 409.957897][ T7] EXT4-fs (loop5): This should not happen!! Data will be lost [ 409.957897][ T7] [ 410.019172][ T8608] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 410.029554][ T24] audit: type=1400 audit(1751849812.084:5404): avc: denied { relabelto } for pid=8598 comm="syz.1.2305" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0" [ 410.075242][ T24] audit: type=1400 audit(1751849812.124:5405): avc: denied { execute } for pid=8598 comm="syz.1.2305" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 410.141441][ T8605] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 410.154589][ T8605] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 410.164422][ T8605] F2FS-fs (loop3): invalid crc value [ 410.170161][ T8610] EXT4-fs (loop5): 1 orphan inode deleted [ 410.174430][ T8605] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391) [ 410.176069][ T8610] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 410.196862][ T8610] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.207614][ T8605] F2FS-fs (loop3): Start checkpoint disabled! [ 410.215050][ T8605] attempt to access beyond end of device [ 410.215050][ T8605] loop3: rw=2049, want=40968, limit=40427 [ 410.222383][ T24] audit: type=1400 audit(1751849812.264:5406): avc: denied { setattr } for pid=8609 comm="syz.5.2308" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 410.395029][ T8619] IPv4: Oversized IP packet from 127.202.26.0 [ 410.929991][ T24] audit: type=1400 audit(1751849812.884:5407): avc: denied { mounton } for pid=8634 comm="syz.5.2314" path="/11/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 411.082996][ T8029] EXT4-fs error (device loop1): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 411.104690][ T8029] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 15 [ 411.116344][ T24] audit: type=1400 audit(1751849813.154:5408): avc: denied { unlink } for pid=8029 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 411.146120][ T8029] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 15 [ 411.273669][ T24] audit: type=1326 audit(1751849813.314:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8632 comm="syz.4.2315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x0 [ 411.506416][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.513687][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.524800][ T8648] device bridge_slave_0 entered promiscuous mode [ 411.535989][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.553375][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.563871][ T8648] device bridge_slave_1 entered promiscuous mode [ 411.594573][ T24] audit: type=1400 audit(1751849813.644:5410): avc: denied { bind } for pid=8649 comm="syz.5.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 411.700328][ T8661] erofs: Unknown parameter 'ÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777184467440737095516150xffffffffffffffffÿÿÿÿ' [ 411.877178][ T8661] device vlan3 entered promiscuous mode [ 411.883027][ T8661] device dummy0 entered promiscuous mode [ 413.006927][ T8669] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.017664][ T8669] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 413.035441][ T8669] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 413.193764][ T48] device bridge_slave_1 left promiscuous mode [ 413.228822][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.476932][ T48] device bridge_slave_0 left promiscuous mode [ 413.493746][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.512606][ T48] device veth1_macvtap left promiscuous mode [ 413.518655][ T48] device veth0_vlan left promiscuous mode [ 413.647418][ T8675] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 413.678669][ T8678] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2325'. [ 413.703065][ T8675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 413.711947][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 413.729993][ T8675] EXT4-fs (loop3): orphan cleanup on readonly fs [ 413.736577][ T8675] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2326: bg 0: block 361: padding at end of block bitmap is not set [ 413.755962][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 413.773618][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 413.789816][ T8675] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 413.799034][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 413.807203][ T8687] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 413.811204][ T8675] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #11: comm syz.3.2326: attempt to clear invalid blocks 33619980 len 1 [ 413.836209][ T8687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 413.839720][ T807] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.851315][ T807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.865561][ T8687] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.2328: corrupted in-inode xattr [ 413.869741][ T8675] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2326: invalid indirect mapped block 1811939328 (level 0) [ 413.888076][ T8687] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2328: couldn't read orphan inode 15 (err -117) [ 413.903661][ T8687] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,jqfmt=vfsv1,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,usrjquota=,,errors=continue [ 413.919618][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 413.944612][ T8675] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2326: invalid indirect mapped block 2185560079 (level 1) [ 413.959110][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 413.977923][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 413.979084][ T8675] EXT4-fs (loop3): 1 truncate cleaned up [ 413.991851][ T8675] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,noblock_validity,dioread_lock,resuid=0x0000000000000000,jqfmt=vfsv0,errors=continue [ 414.007701][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.014798][ T807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.022357][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.030678][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.038970][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.047222][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.055577][ T8687] netem: change failed [ 414.069801][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.078682][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.176761][ T24] audit: type=1326 audit(1751849816.224:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.206061][ T8648] device veth0_vlan entered promiscuous mode [ 414.228194][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.238089][ T8694] 9pnet: Insufficient options for proto=fd [ 414.245639][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.259829][ T24] audit: type=1326 audit(1751849816.254:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.284840][ T8696] loop5: p2 < > p4 [ 414.290104][ T8696] loop5: p4 size 8192 extends beyond EOD, truncated [ 414.294659][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.305071][ T24] audit: type=1326 audit(1751849816.254:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.331332][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.352439][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.360314][ T24] audit: type=1326 audit(1751849816.254:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.367660][ T8696] 9pnet: Insufficient options for proto=fd [ 414.389796][ T24] audit: type=1326 audit(1751849816.254:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.389808][ T24] audit: type=1326 audit(1751849816.254:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.389819][ T24] audit: type=1326 audit(1751849816.254:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.389832][ T24] audit: type=1326 audit(1751849816.254:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.389845][ T24] audit: type=1326 audit(1751849816.254:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.389858][ T24] audit: type=1326 audit(1751849816.254:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa63f7929 code=0x7ffc0000 [ 414.531861][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.542621][ T8648] device veth1_macvtap entered promiscuous mode [ 414.578057][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.603399][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.635205][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.650594][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.659140][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.770217][ T8718] bridge: RTM_NEWNEIGH with invalid ether address [ 414.862229][ T8487] udevd[8487]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 414.864785][ T8705] udevd[8705]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 414.872411][ T8718] EXT4-fs (loop5): Ignoring removed bh option [ 414.892195][ T8718] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 414.902279][ T8718] EXT4-fs (loop5): 1 truncate cleaned up [ 414.908014][ T8718] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 414.973098][ T8736] 9pnet: Insufficient options for proto=fd [ 415.126719][ T8753] device bridge_slave_1 left promiscuous mode [ 415.134837][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.142384][ T8753] device bridge_slave_0 left promiscuous mode [ 415.175113][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.197373][ T8711] printk: udevd: 17 output lines suppressed due to ratelimiting [ 415.273436][ T8761] IPv6: NLM_F_REPLACE set, but no existing node found! [ 415.479398][ T3890] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 415.810194][ T3890] usb 6-1: device descriptor read/64, error -71 [ 416.319503][ T3890] usb 6-1: device descriptor read/64, error -71 [ 416.535306][ T8774] F2FS-fs (loop9): Found nat_bits in checkpoint [ 416.633692][ T3890] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 416.668309][ T8774] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 416.807006][ T8809] attempt to access beyond end of device [ 416.807006][ T8809] loop9: rw=2049, want=81920, limit=40427 [ 416.846516][ T8809] attempt to access beyond end of device [ 416.846516][ T8809] loop9: rw=2049, want=53248, limit=40427 [ 416.928348][ T8809] attempt to access beyond end of device [ 416.928348][ T8809] loop9: rw=2049, want=60664, limit=40427 [ 416.949493][ T3890] usb 6-1: device descriptor read/64, error -71 [ 417.099737][ T8648] attempt to access beyond end of device [ 417.099737][ T8648] loop9: rw=2049, want=45104, limit=40427 [ 417.430353][ T3890] usb 6-1: device descriptor read/64, error -71 [ 417.553549][ T3890] usb usb6-port1: attempt power cycle [ 417.763981][ T8851] xt_TCPMSS: Only works on TCP SYN packets [ 417.810355][ T8851] EXT4-fs (loop3): Ignoring removed bh option [ 417.817757][ T8851] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,nombcache,,errors=continue [ 417.827894][ T8851] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.889401][ T2766] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 417.897057][ T2713] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 417.979433][ T3890] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 418.139447][ T2713] usb 5-1: Using ep0 maxpacket: 16 [ 418.149408][ T3890] usb 6-1: device descriptor read/8, error -71 [ 418.289803][ T2766] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.301177][ T2713] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 418.311621][ T2713] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 418.320589][ T2766] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 418.330083][ T2713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 418.339280][ T2766] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.347702][ T2713] usb 5-1: config 0 has no interface number 0 [ 418.354634][ T2713] usb 5-1: config 0 interface 104 has no altsetting 1 [ 418.359463][ T3890] usb 6-1: device descriptor read/8, error -71 [ 418.361930][ T2766] usb 10-1: config 0 descriptor?? [ 418.401294][ T8873] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 418.410566][ T8873] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.423121][ T8873] 9pnet: Insufficient options for proto=fd [ 418.579597][ T2713] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 418.588718][ T2713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.597016][ T2713] usb 5-1: Product: syz [ 418.601499][ T2713] usb 5-1: Manufacturer: syz [ 418.606262][ T2713] usb 5-1: SerialNumber: syz [ 418.611925][ T2713] usb 5-1: config 0 descriptor?? [ 418.860184][ T2766] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 418.870055][ T2713] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 418.889235][ T2766] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0014/input/input18 [ 418.901472][ T2713] asix: probe of 5-1:0.104 failed with error -71 [ 418.917843][ T2713] usb 5-1: USB disconnect, device number 33 [ 418.993123][ T2766] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 419.053097][ T8894] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 419.198577][ T24] kauditd_printk_skb: 172 callbacks suppressed [ 419.198588][ T24] audit: type=1400 audit(1751849821.244:5593): avc: denied { unmount } for pid=8384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 419.260609][ T8900] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 419.274220][ T24] audit: type=1400 audit(1751849821.304:5594): avc: denied { create } for pid=8899 comm="syz.5.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 419.337320][ T24] audit: type=1400 audit(1751849821.304:5595): avc: denied { ioctl } for pid=8899 comm="syz.5.2387" path="socket:[44715]" dev="sockfs" ino=44715 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 419.384723][ T24] audit: type=1400 audit(1751849821.364:5596): avc: denied { read write } for pid=8899 comm="syz.5.2387" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.431546][ T24] audit: type=1400 audit(1751849821.364:5597): avc: denied { open } for pid=8899 comm="syz.5.2387" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.455039][ T24] audit: type=1400 audit(1751849821.364:5598): avc: denied { ioctl } for pid=8899 comm="syz.5.2387" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.463911][ T8847] F2FS-fs (loop9): invalid crc value [ 419.485487][ T24] audit: type=1400 audit(1751849821.384:5599): avc: denied { create } for pid=8901 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.500158][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 419.506090][ T24] audit: type=1400 audit(1751849821.434:5600): avc: denied { read append } for pid=8903 comm="syz.4.2389" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.518800][ T8847] F2FS-fs (loop9): Found nat_bits in checkpoint [ 419.537372][ T24] audit: type=1400 audit(1751849821.444:5601): avc: denied { open } for pid=8903 comm="syz.4.2389" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.603298][ T24] audit: type=1400 audit(1751849821.444:5602): avc: denied { ioctl } for pid=8903 comm="syz.4.2389" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.640852][ T8847] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 419.799488][ T3890] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 419.822812][ T8941] fuse: Unknown parameter './file0' [ 419.828138][ T8942] fuse: Unknown parameter './file0' [ 419.859728][ T8847] udc-core: couldn't find an available UDC or it's busy [ 419.866847][ T8847] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 419.875146][ T3879] usb 10-1: USB disconnect, device number 9 [ 420.199596][ T3890] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 420.209883][ T3890] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 420.299486][ T3890] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.308580][ T3890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 420.316641][ T3890] usb 6-1: SerialNumber: syz [ 420.339468][ T8900] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 420.379983][ T8648] attempt to access beyond end of device [ 420.379983][ T8648] loop9: rw=2049, want=45104, limit=40427 [ 420.559902][ T8900] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 420.634568][ T8954] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 420.651272][ T8954] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 420.665628][ T8954] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.2402: Failed to acquire dquot type 0 [ 420.677214][ T8954] EXT4-fs (loop3): 1 truncate cleaned up [ 420.683324][ T8954] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue [ 420.729706][ T475] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 421.039378][ T475] usb 10-1: Using ep0 maxpacket: 16 [ 421.049658][ T3890] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 421.060164][ T3890] usb 6-1: USB disconnect, device number 23 [ 421.159455][ T475] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 421.173024][ T475] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.182378][ T475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.191300][ T475] usb 10-1: config 0 descriptor?? [ 421.207853][ T8961] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 421.229800][ T475] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 421.765234][ T9009] EXT4-fs (loop5): 1 orphan inode deleted [ 421.771225][ T9009] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 421.780261][ T9009] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.044877][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 422.060225][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 422.362095][ T9050] bridge: RTM_NEWNEIGH with invalid ether address [ 422.440518][ T9070] 9pnet: Insufficient options for proto=fd [ 422.472271][ T9072] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 422.806439][ T9105] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2445'. [ 422.869359][ T2716] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 422.919426][ T2766] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 422.939920][ T9125] tipc: Enabling of bearer rejected, failed to enable media [ 423.109413][ T2716] usb 5-1: Invalid ep0 maxpacket: 64 [ 423.199397][ T2766] usb 4-1: device descriptor read/64, error -71 [ 423.259451][ T2716] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 423.487729][ T475] usb 10-1: USB disconnect, device number 10 [ 423.509422][ T2716] usb 5-1: Invalid ep0 maxpacket: 64 [ 423.515055][ T2716] usb usb5-port1: attempt power cycle [ 423.609623][ T2766] usb 4-1: device descriptor read/64, error -71 [ 423.710970][ T9147] exfat: Deprecated parameter 'codepage' [ 423.716686][ T9147] exfat: Bad value for 'codepage' [ 423.899530][ T2766] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 423.929463][ T2716] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 424.139683][ T2716] usb 5-1: Invalid ep0 maxpacket: 64 [ 424.186272][ T9152] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2461'. [ 424.195538][ T2766] usb 4-1: device descriptor read/64, error -71 [ 424.290629][ T2716] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 424.357110][ T24] kauditd_printk_skb: 155 callbacks suppressed [ 424.357129][ T24] audit: type=1326 audit(1751849826.404:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.469466][ T24] audit: type=1326 audit(1751849826.494:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.495350][ T2716] usb 5-1: Invalid ep0 maxpacket: 64 [ 424.503447][ T2716] usb usb5-port1: unable to enumerate USB device [ 424.510885][ T24] audit: type=1326 audit(1751849826.494:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.534718][ T24] audit: type=1326 audit(1751849826.494:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.562768][ T24] audit: type=1326 audit(1751849826.494:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.587119][ T24] audit: type=1326 audit(1751849826.494:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.615136][ T24] audit: type=1326 audit(1751849826.494:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.639021][ T24] audit: type=1326 audit(1751849826.494:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.673646][ T24] audit: type=1326 audit(1751849826.494:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5640da4929 code=0x7ffc0000 [ 424.704071][ T9161] 9pnet: Insufficient options for proto=fd [ 424.718948][ T24] audit: type=1400 audit(1751849826.764:5765): avc: denied { remount } for pid=9160 comm="syz.0.2464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 424.739445][ T2766] usb 4-1: device descriptor read/64, error -71 [ 424.859484][ T2766] usb usb4-port1: attempt power cycle [ 425.269399][ T2766] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 425.439442][ T2766] usb 4-1: device descriptor read/8, error -71 [ 425.689428][ T2766] usb 4-1: device descriptor read/8, error -71 [ 426.188638][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2486'. [ 426.208043][ T9223] tipc: Started in network mode [ 426.223491][ T9223] tipc: Own node identity 0000000000002d210000000000000001, cluster identity 4711 [ 426.241755][ T9223] tipc: Enabling of bearer rejected, failed to enable media [ 426.326538][ T9242] device ipip0 entered promiscuous mode [ 426.475708][ T9247] 9pnet: Insufficient options for proto=fd [ 426.504198][ T9251] IPv4: Oversized IP packet from 127.202.26.0 [ 426.517918][ T475] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 426.589419][ T2766] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 426.689379][ T2766] usb 4-1: Using ep0 maxpacket: 32 [ 426.749493][ T2711] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 426.759376][ T475] usb 10-1: Using ep0 maxpacket: 32 [ 426.809397][ T2766] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 426.817501][ T2766] usb 4-1: config 0 has no interface number 0 [ 426.909439][ T475] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 426.917958][ T475] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 426.926744][ T475] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 426.936039][ T475] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.945885][ T475] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 426.955715][ T475] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.965621][ T475] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 426.975520][ T475] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 426.988717][ T475] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 426.997887][ T475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.999495][ T2766] usb 4-1: New USB device found, idVendor=845d, idProduct=10b5, bcdDevice=3d.68 [ 427.006817][ T475] usb 10-1: config 0 descriptor?? [ 427.015225][ T2711] usb 6-1: Using ep0 maxpacket: 16 [ 427.025799][ T2766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.034029][ T2766] usb 4-1: Product: syz [ 427.038317][ T2766] usb 4-1: Manufacturer: syz [ 427.043232][ T2766] usb 4-1: SerialNumber: syz [ 427.054655][ T2766] usb 4-1: config 0 descriptor?? [ 427.100301][ T2766] usb-storage 4-1:0.20: USB Mass Storage device detected [ 427.139503][ T2711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.169353][ T2711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.179439][ T2711] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.192960][ T2711] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 427.202693][ T2711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.211990][ T9267] netlink: 'syz.4.2498': attribute type 4 has an invalid length. [ 427.212160][ T2711] usb 6-1: config 0 descriptor?? [ 427.242022][ T9266] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2499'. [ 427.290124][ T475] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 427.361951][ T475] usb 10-1: USB disconnect, device number 11 [ 427.382867][ T475] usblp0: removed [ 427.394980][ T9275] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9275 comm=syz.9.2501 [ 427.622278][ T9285] fuse: Bad value for 'fd' [ 428.021322][ T9313] overlayfs: missing 'lowerdir' [ 428.752111][ T9321] syz.0.2516[9321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.752160][ T9321] syz.0.2516[9321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.782948][ T9321] 9pnet: Insufficient options for proto=fd [ 428.950392][ T9332] EXT4-fs (loop9): Ignoring removed oldalloc option [ 428.958571][ T9332] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.2515: inode #15947535: comm syz.9.2515: iget: illegal inode # [ 428.972561][ T9332] EXT4-fs (loop9): Remounting filesystem read-only [ 428.979175][ T9332] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.2515: error while reading EA inode 15947535 err=-117 [ 428.993392][ T9332] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.2515: inode #261888: comm syz.9.2515: iget: illegal inode # [ 429.007165][ T9332] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.2515: error while reading EA inode 261888 err=-117 [ 429.020268][ T9332] EXT4-fs (loop9): 1 orphan inode deleted [ 429.026027][ T9332] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000022,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable, [ 429.049333][ T9332] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #12: comm syz.9.2515: corrupted in-inode xattr [ 429.061534][ T9332] EXT4-fs (loop9): Remounting filesystem read-only [ 429.150099][ T9344] EXT4-fs (loop9): Ignoring removed nobh option [ 429.157931][ T9344] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue [ 429.260751][ T475] usb 4-1: USB disconnect, device number 32 [ 429.476038][ T24] kauditd_printk_skb: 328 callbacks suppressed [ 429.476057][ T24] audit: type=1326 audit(1751850060.523:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faa810ac197 code=0x7ffc0000 [ 429.519250][ T24] audit: type=1326 audit(1751850060.563:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faa810af0ca code=0x7ffc0000 [ 429.545941][ T9348] EXT4-fs (loop5): error: could not find journal device path: error -2 [ 429.649497][ T2711] usbhid 6-1:0.0: can't add hid device: -71 [ 429.655865][ T2711] usbhid: probe of 6-1:0.0 failed with error -71 [ 429.663125][ T24] audit: type=1326 audit(1751850060.713:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa810ac290 code=0x7ffc0000 [ 429.688539][ T2711] usb 6-1: USB disconnect, device number 24 [ 429.706219][ T24] audit: type=1326 audit(1751850060.713:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa810ad52b code=0x7ffc0000 [ 429.729957][ T24] audit: type=1326 audit(1751850060.753:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faa810ac58a code=0x7ffc0000 [ 429.775953][ T24] audit: type=1326 audit(1751850060.753:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa810ad929 code=0x7ffc0000 [ 429.818984][ T24] audit: type=1326 audit(1751850060.753:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa810ac290 code=0x7ffc0000 [ 429.862937][ T24] audit: type=1326 audit(1751850060.753:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa810ad52b code=0x7ffc0000 [ 429.887033][ T24] audit: type=1326 audit(1751850060.753:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa810ad52b code=0x7ffc0000 [ 429.911017][ T24] audit: type=1326 audit(1751850060.753:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.5.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa810ad52b code=0x7ffc0000 [ 429.937642][ T9358] loop3: p1 p3 < p5 p6 > [ 430.026563][ T9373] udc-core: couldn't find an available UDC or it's busy [ 430.057219][ T9373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 430.059381][ T2711] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 430.289362][ T3879] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 430.319438][ T2711] usb 6-1: Invalid ep0 maxpacket: 16 [ 430.469372][ T2711] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 430.489487][ T3892] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 430.559378][ T3879] usb 10-1: device descriptor read/64, error -71 [ 430.729425][ T2711] usb 6-1: Invalid ep0 maxpacket: 16 [ 430.734923][ T2711] usb usb6-port1: attempt power cycle [ 430.929853][ T3892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.941499][ T3892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.951610][ T3892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.964831][ T3892] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.973910][ T3892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.982131][ T3879] usb 10-1: device descriptor read/64, error -71 [ 430.989131][ T3892] usb 4-1: config 0 descriptor?? [ 431.249467][ T3879] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 431.359416][ T2711] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 431.469595][ T2711] usb 6-1: Invalid ep0 maxpacket: 16 [ 431.567435][ T3892] plantronics 0003:047F:FFFF.0015: report is too long [ 431.574794][ T3892] plantronics 0003:047F:FFFF.0015: item 0 4 0 8 parsing failed [ 431.582981][ T3892] plantronics 0003:047F:FFFF.0015: parse failed [ 431.589351][ T3892] plantronics: probe of 0003:047F:FFFF.0015 failed with error -22 [ 431.619733][ T2711] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 431.659408][ T3879] usb 10-1: device descriptor read/64, error -71 [ 431.697556][ T3892] usb 4-1: USB disconnect, device number 33 [ 432.026848][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2541'. [ 432.049754][ T3879] usb 10-1: device descriptor read/64, error -71 [ 432.169851][ T3879] usb usb10-port1: attempt power cycle [ 432.373487][ T9414] EXT4-fs (loop5): Test dummy encryption mode enabled [ 432.385740][ T9414] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 432.622214][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2547'. [ 432.639374][ T3879] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 432.819460][ T3879] usb 10-1: device descriptor read/8, error -71 [ 432.859622][ T2711] usb 6-1: device not accepting address 28, error -71 [ 432.868578][ T2711] usb usb6-port1: unable to enumerate USB device [ 433.169648][ T3879] usb 10-1: device descriptor read/8, error -71 [ 433.569909][ T9481] exfat: Unknown parameter 'ã¸)Ÿ§éó½' [ 433.593216][ T9495] 9pnet: Insufficient options for proto=fd [ 434.164745][ T9511] EXT4-fs (loop3): Ignoring removed orlov option [ 434.172352][ T9511] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 434.236254][ T9514] fuse: Bad value for 'fd' [ 434.254610][ T9511] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 434.313178][ T9508] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2568'. [ 434.378362][ T9535] ------------[ cut here ]------------ [ 434.389149][ T9535] trace type BPF program uses run-time allocation [ 434.396248][ T9535] WARNING: CPU: 0 PID: 9535 at kernel/bpf/verifier.c:10496 check_map_prog_compatibility+0x5d6/0x740 [ 434.407320][ T9535] Modules linked in: [ 434.411484][ T9535] CPU: 0 PID: 9535 Comm: syz.9.2575 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 434.424199][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.424441][ T9537] EXT4-fs (loop3): Test dummy encryption mode enabled [ 434.446554][ T9535] RIP: 0010:check_map_prog_compatibility+0x5d6/0x740 [ 434.456784][ T9535] Code: 85 e9 14 fe ff ff e8 89 f7 ef ff 31 c0 e9 15 fe ff ff e8 7d f7 ef ff c6 05 03 9f 2c 05 01 48 c7 c7 c0 69 05 85 e8 da 61 f8 02 <0f> 0b e9 85 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fa ff [ 434.477040][ T9535] RSP: 0018:ffffc90000ab7468 EFLAGS: 00010246 [ 434.483952][ T9535] RAX: d72fe958dbdbcf00 RBX: 0000000000000001 RCX: 0000000000080000 [ 434.493394][ T9537] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 434.502665][ T9535] RDX: ffffc90006d3f000 RSI: 0000000000002da9 RDI: 0000000000002daa [ 434.509562][ T9537] System zones: 0-5 [ 434.511055][ T9535] RBP: ffffc90000ab74b0 R08: dffffc0000000000 R09: ffffed103ee0a5f8 [ 434.515428][ T9537] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 434.522909][ T9535] R10: ffffed103ee0a5f8 R11: 1ffff1103ee0a5f7 R12: ffff888116ce8000 [ 434.553817][ T9535] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88812ee11800 [ 434.561891][ T9535] FS: 00007f2a88ca86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 434.571200][ T9535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.577798][ T9535] CR2: 000000110c29794e CR3: 000000011573f000 CR4: 00000000003506b0 [ 434.585837][ T9535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.591308][ T24] kauditd_printk_skb: 119 callbacks suppressed [ 434.591319][ T24] audit: type=1400 audit(1751850065.643:6223): avc: denied { create } for pid=9536 comm="syz.3.2574" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 434.593979][ T9535] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.606796][ T24] audit: type=1400 audit(1751850065.653:6224): avc: denied { mounton } for pid=9536 comm="syz.3.2574" path="/274/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.620176][ T9535] Call Trace: [ 434.646702][ T24] audit: type=1400 audit(1751850065.653:6225): avc: denied { remove_name } for pid=9536 comm="syz.3.2574" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.651491][ T9535] ? __fdget+0x1a1/0x230 [ 434.677342][ T24] audit: type=1400 audit(1751850065.653:6226): avc: denied { rename } for pid=9536 comm="syz.3.2574" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 434.694276][ T9535] resolve_pseudo_ldimm64+0x526/0x1020 [ 434.709469][ T9535] ? bpf_check+0xd720/0xd720 [ 434.714093][ T9535] ? kvmalloc_node+0x88/0x130 [ 434.718841][ T9535] bpf_check+0x8db4/0xd720 [ 434.723332][ T2711] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 434.731043][ T9535] ? bpf_get_btf_vmlinux+0x60/0x60 [ 434.736164][ T9535] ? 0xffffffffa002aafc [ 434.740441][ T9535] ? is_bpf_text_address+0x177/0x190 [ 434.745743][ T9535] ? selinux_bpf_prog_alloc+0x51/0x140 [ 434.751431][ T9535] ? __kernel_text_address+0xa0/0x100 [ 434.756848][ T9535] ? unwind_get_return_address+0x4d/0x90 [ 434.765246][ T9535] ? stack_trace_save+0xe0/0xe0 [ 434.770407][ T9535] ? arch_stack_walk+0xee/0x140 [ 434.775281][ T9535] ? stack_trace_save+0x98/0xe0 [ 434.780207][ T9535] ? stack_trace_snprint+0xf0/0xf0 [ 434.787506][ T9535] ? __kasan_slab_alloc+0x69/0xf0 [ 434.799460][ T9535] ? selinux_bpf_prog_alloc+0x51/0x140 [ 434.804965][ T9535] ? __kasan_kmalloc+0xec/0x110 [ 434.819539][ T9535] ? __kasan_kmalloc+0xda/0x110 [ 434.824433][ T9535] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 434.839390][ T9535] ? selinux_bpf_prog_alloc+0x51/0x140 [ 434.851262][ T9535] ? security_bpf_prog_alloc+0x62/0x90 [ 434.856837][ T9535] ? bpf_prog_load+0x949/0x1420 [ 434.861950][ T9535] ? __se_sys_bpf+0x442/0x680 [ 434.866709][ T9535] ? __x64_sys_bpf+0x7b/0x90 [ 434.871523][ T9535] ? do_syscall_64+0x31/0x40 [ 434.876299][ T9535] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 434.882571][ T9535] ? memset+0x35/0x40 [ 434.886574][ T9535] ? bpf_obj_name_cpy+0x193/0x1e0 [ 434.893051][ T9535] bpf_prog_load+0xf5a/0x1420 [ 434.897758][ T9535] ? map_freeze+0x320/0x320 [ 434.903003][ T9535] ? selinux_bpf+0xc7/0xf0 [ 434.907481][ T9535] ? security_bpf+0x82/0xa0 [ 434.912670][ T9535] __se_sys_bpf+0x442/0x680 [ 434.917230][ T9535] ? __x64_sys_bpf+0x90/0x90 [ 434.948827][ T9535] ? fpu__clear_all+0x20/0x20 [ 434.976092][ T9535] __x64_sys_bpf+0x7b/0x90 [ 434.994321][ T9535] do_syscall_64+0x31/0x40 [ 434.998854][ T9535] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 435.095139][ T9535] RIP: 0033:0x7f2a8a63f929 [ 435.101738][ T9563] xt_l2tp: v2 sid > 0xffff: 262144 [ 435.106972][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.159396][ T9535] RSP: 002b:00007f2a88ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.167864][ T9535] RAX: ffffffffffffffda RBX: 00007f2a8a866fa0 RCX: 00007f2a8a63f929 [ 435.189429][ T9535] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 435.191414][ T9569] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2584'. [ 435.203740][ T9535] RBP: 00007f2a8a6c1b39 R08: 0000000000000000 R09: 0000000000000000 [ 435.224534][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.239468][ T9535] R13: 0000000000000000 R14: 00007f2a8a866fa0 R15: 00007ffcf7bb4b28 [ 435.256270][ T9535] ---[ end trace 989a767027f3833b ]--- [ 435.279457][ T2711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 435.301235][ T2711] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 435.319348][ T2711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.335146][ T2711] usb 6-1: config 0 descriptor?? [ 435.369549][ T9541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 435.392974][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2590'. [ 435.395900][ T24] audit: type=1400 audit(1751850066.443:6227): avc: denied { mounton } for pid=9590 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 435.404688][ T9581] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 435.404688][ T9581] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 435.404688][ T9581] [ 435.444835][ T9581] EXT4-fs (loop9): orphan cleanup on readonly fs [ 435.451899][ T9581] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2587: bg 0: block 248: padding at end of block bitmap is not set [ 435.466587][ T9581] Quota error (device loop9): write_blk: dquota write failed [ 435.472643][ T9580] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 435.474572][ T9581] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 435.493283][ T9581] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.2587: Failed to acquire dquot type 1 [ 435.495152][ T9580] EXT4-fs (loop3): failed to initialize system zone (-117) [ 435.505717][ T9581] EXT4-fs (loop9): 1 truncate cleaned up [ 435.513477][ T9580] EXT4-fs (loop3): mount failed [ 435.517921][ T9581] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nouser_xattr,acl,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 435.568124][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.575312][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.583009][ T9590] device bridge_slave_0 entered promiscuous mode [ 435.590379][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.597746][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.605489][ T9590] device bridge_slave_1 entered promiscuous mode [ 435.662709][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.669813][ T9590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.677167][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.684243][ T9590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.699909][ T24] audit: type=1400 audit(1751850066.753:6228): avc: denied { module_request } for pid=9590 comm="syz-executor" kmod="netdev-vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 435.715790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.730539][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.737272][ T24] audit: type=1400 audit(1751850066.783:6229): avc: denied { read } for pid=9574 comm="syz.9.2587" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 435.766260][ T24] audit: type=1400 audit(1751850066.783:6230): avc: denied { read write } for pid=3763 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.793223][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.974103][ T9590] device veth0_vlan entered promiscuous mode [ 435.990778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.000688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.008955][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.017414][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.025329][ T9607] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 436.038075][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.040505][ T9607] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2592: invalid block [ 436.054742][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.065170][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.072614][ T9607] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2592: invalid indirect mapped block 4294967295 (level 1) [ 436.073442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.095037][ T9607] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2592: invalid indirect mapped block 4294967295 (level 1) [ 436.095130][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.109526][ T9607] EXT4-fs (loop3): 2 truncates cleaned up [ 436.116020][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.122140][ T9607] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue [ 436.145821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.154189][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.163986][ T9607] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.3.2592: path /: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 436.192144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.198317][ T3763] EXT4-fs error (device loop3): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 436.207622][ T9590] device veth1_macvtap entered promiscuous mode [ 436.231374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.240062][ T3763] EXT4-fs error (device loop3): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 436.259564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.283378][ T9626] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,norecovery,min_batch_time=0x0000000010000005,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,inode_readahead_blks=0x0000000,errors=continue [ 436.312303][ T2711] usbhid 6-1:0.0: can't add hid device: -71 [ 436.318311][ T2711] usbhid: probe of 6-1:0.0 failed with error -71 [ 436.321492][ T9626] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.2598: missing EA_INODE flag [ 436.326177][ T2711] usb 6-1: USB disconnect, device number 29 [ 436.343162][ T9626] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2598: error while reading EA inode 11 err=-117 [ 436.499451][ T438] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 436.536586][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.543939][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.551771][ T9642] device bridge_slave_0 entered promiscuous mode [ 436.559017][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.566159][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.573797][ T9642] device bridge_slave_1 entered promiscuous mode [ 436.633096][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.640321][ T9642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.647837][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.654951][ T9642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.680243][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.688022][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.696198][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.714423][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.722764][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.729833][ T8664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.737655][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.746117][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.753193][ T8664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.769923][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.780807][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.807624][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.822696][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.831444][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.839251][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.848889][ T9642] device veth0_vlan entered promiscuous mode [ 436.859717][ T438] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.869670][ T2711] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 436.871748][ T9662] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 436.889419][ T438] usb 10-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 436.889439][ T438] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.908076][ T438] usb 10-1: config 0 descriptor?? [ 437.099295][ T9668] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 437.229471][ T2711] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 437.238667][ T2711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.247501][ T2711] usb 6-1: config 0 descriptor?? [ 437.308108][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.319491][ T9642] device veth1_macvtap entered promiscuous mode [ 437.329362][ C1] ------------[ cut here ]------------ [ 437.334844][ C1] refcount_t: addition on 0; use-after-free. [ 437.340936][ C1] WARNING: CPU: 1 PID: 9642 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 437.350311][ C1] Modules linked in: [ 437.354210][ C1] CPU: 1 PID: 9642 Comm: syz-executor Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 437.365679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.375784][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 437.382083][ C1] Code: 04 01 48 c7 c7 00 f8 1f 85 e8 d8 c7 31 02 0f 0b eb df e8 5f 5d 29 ff c6 05 3b 05 66 04 01 48 c7 c7 40 f7 1f 85 e8 bc c7 31 02 <0f> 0b eb c3 e8 43 5d 29 ff c6 05 20 05 66 04 01 48 c7 c7 a0 f7 1f [ 437.401741][ C1] RSP: 0018:ffffc90000170a20 EFLAGS: 00010246 [ 437.407818][ C1] RAX: f69aa6c73c194d00 RBX: 0000000000000002 RCX: ffff888117c962c0 [ 437.415832][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 437.423847][ C1] RBP: ffffc90000170a30 R08: dffffc0000000000 R09: ffffed103ee2a5f8 [ 437.431858][ C1] R10: ffffed103ee2a5f8 R11: 1ffff1103ee2a5f7 R12: ffff888121204208 [ 437.439869][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc90000170be0 [ 437.447858][ C1] FS: 000055557cad6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 437.456969][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.463579][ C1] CR2: 0000001b3071fffc CR3: 00000001234c6000 CR4: 00000000003506a0 [ 437.471587][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.479589][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 437.487558][ C1] Call Trace: [ 437.490878][ C1] [ 437.493752][ C1] tipc_crypto_xmit+0x1927/0x23f0 [ 437.498908][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 437.504171][ C1] ? memcpy+0x56/0x70 [ 437.508178][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 437.513451][ C1] ? __skb_clone+0x469/0x780 [ 437.518065][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 437.523063][ C1] ? skb_clone+0x21c/0x380 [ 437.527500][ C1] tipc_disc_timeout+0x6a2/0x830 [ 437.532517][ C1] ? kmem_cache_alloc+0x165/0x2e0 [ 437.537557][ C1] ? kasan_unpoison+0x67/0x90 [ 437.542295][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 437.547538][ C1] ? __kasan_check_write+0x14/0x20 [ 437.552720][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 437.557772][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 437.563366][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 437.568569][ C1] call_timer_fn+0x38/0x290 [ 437.573107][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 437.578315][ C1] __run_timers+0x639/0x9a0 [ 437.582963][ C1] ? calc_index+0x200/0x200 [ 437.587480][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 437.592376][ C1] run_timer_softirq+0x6a/0xf0 [ 437.597156][ C1] __do_softirq+0x255/0x563 [ 437.601692][ C1] asm_call_irq_on_stack+0xf/0x20 [ 437.606728][ C1] [ 437.609708][ C1] do_softirq_own_stack+0x60/0x80 [ 437.614735][ C1] __irq_exit_rcu+0x128/0x150 [ 437.619438][ C1] irq_exit_rcu+0x9/0x10 [ 437.623692][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 437.629362][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 437.635343][ C1] RIP: 0010:__stack_depot_save+0x1cc/0x4c0 [ 437.641167][ C1] Code: 8b 3d 50 ab 79 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c 44 39 6b 08 <75> f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c c3 18 75 de [ 437.660803][ C1] RSP: 0018:ffffc90000d767b8 EFLAGS: 00000286 [ 437.666867][ C1] RAX: 0000000000000000 RBX: ffff888125eac900 RCX: 0000000000000001 [ 437.674889][ C1] RDX: 0000000000000dc0 RSI: 0000000000000013 RDI: ffffc90000d76820 [ 437.682879][ C1] RBP: ffffc90000d76810 R08: 000000008576df5e R09: 00000000c6598e56 [ 437.690867][ C1] R10: 0000000000000002 R11: 00000000999382af R12: 0000000000000013 [ 437.698835][ C1] R13: 00000000473f3d31 R14: 0000000000000d31 R15: ffff8881f7340000 [ 437.706868][ C1] ? rtnetlink_rcv+0x1c/0x20 [ 437.711503][ C1] ? netlink_unicast+0x87c/0xa40 [ 437.716458][ C1] ? netlink_sendmsg+0x88d/0xb30 [ 437.721453][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 437.726749][ C1] __kasan_kmalloc+0xec/0x110 [ 437.731473][ C1] ? __kasan_kmalloc+0xda/0x110 [ 437.736351][ C1] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 437.741946][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 437.747242][ C1] ? ip_mc_up+0x112/0x1f0 [ 437.751619][ C1] ? inetdev_event+0xc13/0x1030 [ 437.756497][ C1] ? raw_notifier_call_chain+0x90/0x100 [ 437.762120][ C1] ? __dev_notify_flags+0x28f/0x500 [ 437.767340][ C1] ? dev_change_flags+0xe8/0x1a0 [ 437.772320][ C1] ? do_setlink+0xbb4/0x3ab0 [ 437.776929][ C1] ? rtnl_newlink+0x1292/0x1640 [ 437.781818][ C1] ? rtnetlink_rcv_msg+0x9db/0xb90 [ 437.786950][ C1] ? netlink_rcv_skb+0x1e0/0x430 [ 437.791922][ C1] ? rtnetlink_rcv+0x1c/0x20 [ 437.796527][ C1] ? netlink_unicast+0x87c/0xa40 [ 437.801505][ C1] ? netlink_sendmsg+0x88d/0xb30 [ 437.806460][ C1] ? __sys_sendto+0x41d/0x580 [ 437.811174][ C1] ? __x64_sys_sendto+0xe5/0x100 [ 437.816131][ C1] ? do_syscall_64+0x31/0x40 [ 437.820776][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 437.826884][ C1] kmem_cache_alloc_trace+0x184/0x2e0 [ 437.832306][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 437.837619][ C1] ____ip_mc_inc_group+0x190/0x820 [ 437.842762][ C1] ip_mc_up+0x112/0x1f0 [ 437.846928][ C1] inetdev_event+0xc13/0x1030 [ 437.851656][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 437.857467][ C1] ? devinet_exit_net+0x220/0x220 [ 437.862532][ C1] ? __kasan_check_write+0x14/0x20 [ 437.867658][ C1] raw_notifier_call_chain+0x90/0x100 [ 437.873071][ C1] __dev_notify_flags+0x28f/0x500 [ 437.878117][ C1] ? __kasan_check_read+0x11/0x20 [ 437.883195][ C1] ? __dev_change_flags+0x6a0/0x6a0 [ 437.888401][ C1] ? __dev_change_flags+0x4be/0x6a0 [ 437.893640][ C1] ? dev_get_flags+0x1e0/0x1e0 [ 437.898422][ C1] ? __kasan_slab_free+0x11/0x20 [ 437.903499][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 437.909061][ C1] dev_change_flags+0xe8/0x1a0 [ 437.913879][ C1] do_setlink+0xbb4/0x3ab0 [ 437.918333][ C1] ? __kasan_slab_alloc+0x69/0xf0 [ 437.923404][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 437.929616][ C1] ? rtnl_newlink+0x103/0x1640 [ 437.934393][ C1] ? __kasan_kmalloc+0xec/0x110 [ 437.939248][ C1] ? __kasan_kmalloc+0xda/0x110 [ 437.944149][ C1] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 437.949733][ C1] ? rtnl_newlink+0x103/0x1640 [ 437.954497][ C1] ? rtnetlink_rcv_msg+0x9db/0xb90 [ 437.959645][ C1] ? __nla_validate_parse+0x1dbd/0x2670 [ 437.965219][ C1] ? __nla_validate+0x60/0x60 [ 437.969957][ C1] ? __kasan_check_read+0x11/0x20 [ 437.974986][ C1] ? validate_linkmsg+0x38e/0x480 [ 437.980076][ C1] rtnl_newlink+0x1292/0x1640 [ 437.984772][ C1] ? __kasan_check_write+0x14/0x20 [ 437.989918][ C1] ? finish_task_switch+0x1b7/0x5a0 [ 437.995270][ C1] ? rtnl_newlink+0x3e1/0x1640 [ 438.000063][ C1] ? rtnl_setlink+0x3f0/0x3f0 [ 438.004749][ C1] ? memcpy+0x56/0x70 [ 438.008935][ C1] ? cap_capable+0x19c/0x220 [ 438.013568][ C1] ? __kasan_check_write+0x14/0x20 [ 438.018680][ C1] ? mutex_lock+0x8c/0xe0 [ 438.023033][ C1] ? mutex_trylock+0xa0/0xa0 [ 438.027637][ C1] ? ns_capable+0x8c/0xf0 [ 438.032132][ C1] ? netlink_net_capable+0x125/0x160 [ 438.037414][ C1] ? rtnl_setlink+0x3f0/0x3f0 [ 438.042116][ C1] rtnetlink_rcv_msg+0x9db/0xb90 [ 438.047050][ C1] ? rtnetlink_bind+0x80/0x80 [ 438.051743][ C1] ? arch_stack_walk+0xee/0x140 [ 438.056594][ C1] ? stack_trace_save+0x98/0xe0 [ 438.061478][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 438.066713][ C1] ? memcpy+0x56/0x70 [ 438.070719][ C1] ? avc_has_perm+0x234/0x360 [ 438.075400][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 438.080455][ C1] ? slab_post_alloc_hook+0x5d/0x2f0 [ 438.085739][ C1] ? __x64_sys_sendto+0xe5/0x100 [ 438.090702][ C1] ? avc_has_perm_noaudit+0x240/0x240 [ 438.096089][ C1] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 438.101486][ C1] netlink_rcv_skb+0x1e0/0x430 [ 438.106366][ C1] ? rtnetlink_bind+0x80/0x80 [ 438.111070][ C1] ? netlink_ack+0xb80/0xb80 [ 438.115658][ C1] ? __netlink_lookup+0x387/0x3b0 [ 438.120703][ C1] rtnetlink_rcv+0x1c/0x20 [ 438.125125][ C1] netlink_unicast+0x87c/0xa40 [ 438.129913][ C1] netlink_sendmsg+0x88d/0xb30 [ 438.134677][ C1] ? netlink_getsockopt+0x530/0x530 [ 438.139894][ C1] ? security_socket_sendmsg+0x82/0xa0 [ 438.145350][ C1] __sys_sendto+0x41d/0x580 [ 438.150013][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 438.155394][ C1] ? security_file_free+0xc7/0xe0 [ 438.160446][ C1] ? unlock_page_memcg+0x110/0x110 [ 438.165570][ C1] ? ____fput+0x15/0x20 [ 438.169751][ C1] __x64_sys_sendto+0xe5/0x100 [ 438.174511][ C1] do_syscall_64+0x31/0x40 [ 438.178925][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 438.184859][ C1] RIP: 0033:0x7fba266e4763 [ 438.189299][ C1] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d e1 5d 1f 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 438.208954][ C1] RSP: 002b:00007ffee0d86c58 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 438.217399][ C1] RAX: ffffffffffffffda RBX: 00007fba27438620 RCX: 00007fba266e4763 [ 438.225410][ C1] RDX: 000000000000002c RSI: 00007fba27438670 RDI: 0000000000000003 [ 438.233429][ C1] RBP: 0000000000000001 R08: 00007ffee0d86c74 R09: 000000000000000c [ 438.241458][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 438.249466][ C1] R13: 0000000000000000 R14: 00007fba27438670 R15: 0000000000000000 [ 438.257437][ C1] ---[ end trace 989a767027f3833c ]--- [ 438.262931][ C1] ------------[ cut here ]------------ [ 438.268382][ C1] refcount_t: underflow; use-after-free. [ 438.274119][ C1] WARNING: CPU: 1 PID: 9642 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 438.283492][ C1] Modules linked in: [ 438.287380][ C1] CPU: 1 PID: 9642 Comm: syz-executor Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 438.298839][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.308931][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 438.315122][ C1] Code: 04 01 48 c7 c7 40 f7 1f 85 e8 bc c7 31 02 0f 0b eb c3 e8 43 5d 29 ff c6 05 20 05 66 04 01 48 c7 c7 a0 f7 1f 85 e8 a0 c7 31 02 <0f> 0b eb a7 e8 27 5d 29 ff c6 05 01 05 66 04 01 48 c7 c7 c0 f6 1f [ 438.334886][ C1] RSP: 0018:ffffc90000170a20 EFLAGS: 00010246 [ 438.341057][ C1] RAX: f69aa6c73c194d00 RBX: 0000000000000003 RCX: ffff888117c962c0 [ 438.349052][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 438.357059][ C1] RBP: ffffc90000170a30 R08: dffffc0000000000 R09: fffff5200002e075 [ 438.365069][ C1] R10: fffff5200002e075 R11: 1ffff9200002e074 R12: ffff888121204208 [ 438.373086][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 438.381109][ C1] FS: 000055557cad6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 438.390065][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.396659][ C1] CR2: 0000001b3071fffc CR3: 00000001234c6000 CR4: 00000000003506a0 [ 438.404661][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.412988][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.420999][ C1] Call Trace: [ 438.424281][ C1] [ 438.427129][ C1] tipc_crypto_xmit+0x1a71/0x23f0 [ 438.432179][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 438.437376][ C1] ? memcpy+0x56/0x70 [ 438.441386][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 438.446581][ C1] ? __skb_clone+0x469/0x780 [ 438.451335][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 438.456274][ C1] ? skb_clone+0x21c/0x380 [ 438.460720][ C1] tipc_disc_timeout+0x6a2/0x830 [ 438.465658][ C1] ? kmem_cache_alloc+0x165/0x2e0 [ 438.470706][ C1] ? kasan_unpoison+0x67/0x90 [ 438.475377][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 438.480596][ C1] ? __kasan_check_write+0x14/0x20 [ 438.485823][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 438.490880][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 438.496481][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 438.501699][ C1] call_timer_fn+0x38/0x290 [ 438.506197][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 438.511418][ C1] __run_timers+0x639/0x9a0 [ 438.515925][ C1] ? calc_index+0x200/0x200 [ 438.520525][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 438.525383][ C1] run_timer_softirq+0x6a/0xf0 [ 438.530173][ C1] __do_softirq+0x255/0x563 [ 438.534675][ C1] asm_call_irq_on_stack+0xf/0x20 [ 438.539717][ C1] [ 438.542655][ C1] do_softirq_own_stack+0x60/0x80 [ 438.547795][ C1] __irq_exit_rcu+0x128/0x150 [ 438.552503][ C1] irq_exit_rcu+0x9/0x10 [ 438.556743][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 438.562395][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 438.568368][ C1] RIP: 0010:__stack_depot_save+0x1cc/0x4c0 [ 438.574195][ C1] Code: 8b 3d 50 ab 79 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c 44 39 6b 08 <75> f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c c3 18 75 de [ 438.593829][ C1] RSP: 0018:ffffc90000d767b8 EFLAGS: 00000286 [ 438.599929][ C1] RAX: 0000000000000000 RBX: ffff888125eac900 RCX: 0000000000000001 [ 438.607897][ C1] RDX: 0000000000000dc0 RSI: 0000000000000013 RDI: ffffc90000d76820 [ 438.615895][ C1] RBP: ffffc90000d76810 R08: 000000008576df5e R09: 00000000c6598e56 [ 438.623889][ C1] R10: 0000000000000002 R11: 00000000999382af R12: 0000000000000013 [ 438.631900][ C1] R13: 00000000473f3d31 R14: 0000000000000d31 R15: ffff8881f7340000 [ 438.640065][ C1] ? rtnetlink_rcv+0x1c/0x20 [ 438.644665][ C1] ? netlink_unicast+0x87c/0xa40 [ 438.649632][ C1] ? netlink_sendmsg+0x88d/0xb30 [ 438.654704][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 438.660016][ C1] __kasan_kmalloc+0xec/0x110 [ 438.664691][ C1] ? __kasan_kmalloc+0xda/0x110 [ 438.669558][ C1] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 438.675096][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 438.680487][ C1] ? ip_mc_up+0x112/0x1f0 [ 438.684810][ C1] ? inetdev_event+0xc13/0x1030 [ 438.689684][ C1] ? raw_notifier_call_chain+0x90/0x100 [ 438.695227][ C1] ? __dev_notify_flags+0x28f/0x500 [ 438.700446][ C1] ? dev_change_flags+0xe8/0x1a0 [ 438.705382][ C1] ? do_setlink+0xbb4/0x3ab0 [ 438.709990][ C1] ? rtnl_newlink+0x1292/0x1640 [ 438.714836][ C1] ? rtnetlink_rcv_msg+0x9db/0xb90 [ 438.719971][ C1] ? netlink_rcv_skb+0x1e0/0x430 [ 438.724902][ C1] ? rtnetlink_rcv+0x1c/0x20 [ 438.729508][ C1] ? netlink_unicast+0x87c/0xa40 [ 438.734441][ C1] ? netlink_sendmsg+0x88d/0xb30 [ 438.739398][ C1] ? __sys_sendto+0x41d/0x580 [ 438.744084][ C1] ? __x64_sys_sendto+0xe5/0x100 [ 438.749175][ C1] ? do_syscall_64+0x31/0x40 [ 438.753803][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 438.759891][ C1] kmem_cache_alloc_trace+0x184/0x2e0 [ 438.765248][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 438.770549][ C1] ____ip_mc_inc_group+0x190/0x820 [ 438.775834][ C1] ip_mc_up+0x112/0x1f0 [ 438.780024][ C1] inetdev_event+0xc13/0x1030 [ 438.784705][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 438.790525][ C1] ? devinet_exit_net+0x220/0x220 [ 438.795548][ C1] ? __kasan_check_write+0x14/0x20 [ 438.800680][ C1] raw_notifier_call_chain+0x90/0x100 [ 438.806048][ C1] __dev_notify_flags+0x28f/0x500 [ 438.811098][ C1] ? __kasan_check_read+0x11/0x20 [ 438.816124][ C1] ? __dev_change_flags+0x6a0/0x6a0 [ 438.821340][ C1] ? __dev_change_flags+0x4be/0x6a0 [ 438.826535][ C1] ? dev_get_flags+0x1e0/0x1e0 [ 438.831469][ C1] ? __kasan_slab_free+0x11/0x20 [ 438.836411][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 438.841984][ C1] dev_change_flags+0xe8/0x1a0 [ 438.846742][ C1] do_setlink+0xbb4/0x3ab0 [ 438.851181][ C1] ? __kasan_slab_alloc+0x69/0xf0 [ 438.856202][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 438.862376][ C1] ? rtnl_newlink+0x103/0x1640 [ 438.867186][ C1] ? __kasan_kmalloc+0xec/0x110 [ 438.872055][ C1] ? __kasan_kmalloc+0xda/0x110 [ 438.876902][ C1] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 438.882470][ C1] ? rtnl_newlink+0x103/0x1640 [ 438.887230][ C1] ? rtnetlink_rcv_msg+0x9db/0xb90 [ 438.892364][ C1] ? __nla_validate_parse+0x1dbd/0x2670 [ 438.897912][ C1] ? __nla_validate+0x60/0x60 [ 438.902611][ C1] ? __kasan_check_read+0x11/0x20 [ 438.907631][ C1] ? validate_linkmsg+0x38e/0x480 [ 438.912823][ C1] rtnl_newlink+0x1292/0x1640 [ 438.917512][ C1] ? __kasan_check_write+0x14/0x20 [ 438.922647][ C1] ? finish_task_switch+0x1b7/0x5a0 [ 438.927851][ C1] ? rtnl_newlink+0x3e1/0x1640 [ 438.932766][ C1] ? rtnl_setlink+0x3f0/0x3f0 [ 438.937450][ C1] ? memcpy+0x56/0x70 [ 438.941473][ C1] ? cap_capable+0x19c/0x220 [ 438.946069][ C1] ? __kasan_check_write+0x14/0x20 [ 438.951199][ C1] ? mutex_lock+0x8c/0xe0 [ 438.955529][ C1] ? mutex_trylock+0xa0/0xa0 [ 438.960146][ C1] ? ns_capable+0x8c/0xf0 [ 438.964480][ C1] ? netlink_net_capable+0x125/0x160 [ 438.969784][ C1] ? rtnl_setlink+0x3f0/0x3f0 [ 438.974453][ C1] rtnetlink_rcv_msg+0x9db/0xb90 [ 438.979406][ C1] ? rtnetlink_bind+0x80/0x80 [ 438.984078][ C1] ? arch_stack_walk+0xee/0x140 [ 438.988910][ C1] ? stack_trace_save+0x98/0xe0 [ 438.993877][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 438.998989][ C1] ? memcpy+0x56/0x70 [ 439.002993][ C1] ? avc_has_perm+0x234/0x360 [ 439.007662][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 439.012727][ C1] ? slab_post_alloc_hook+0x5d/0x2f0 [ 439.018107][ C1] ? __x64_sys_sendto+0xe5/0x100 [ 439.023083][ C1] ? avc_has_perm_noaudit+0x240/0x240 [ 439.028457][ C1] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 439.033860][ C1] netlink_rcv_skb+0x1e0/0x430 [ 439.038624][ C1] ? rtnetlink_bind+0x80/0x80 [ 439.043319][ C1] ? netlink_ack+0xb80/0xb80 [ 439.047902][ C1] ? __netlink_lookup+0x387/0x3b0 [ 439.052952][ C1] rtnetlink_rcv+0x1c/0x20 [ 439.057361][ C1] netlink_unicast+0x87c/0xa40 [ 439.062148][ C1] netlink_sendmsg+0x88d/0xb30 [ 439.066906][ C1] ? netlink_getsockopt+0x530/0x530 [ 439.072129][ C1] ? security_socket_sendmsg+0x82/0xa0 [ 439.077594][ C1] __sys_sendto+0x41d/0x580 [ 439.082123][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 439.087503][ C1] ? security_file_free+0xc7/0xe0 [ 439.092555][ C1] ? unlock_page_memcg+0x110/0x110 [ 439.097662][ C1] ? ____fput+0x15/0x20 [ 439.101840][ C1] __x64_sys_sendto+0xe5/0x100 [ 439.106608][ C1] do_syscall_64+0x31/0x40 [ 439.111051][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 439.116938][ C1] RIP: 0033:0x7fba266e4763 [ 439.121370][ C1] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d e1 5d 1f 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 439.140997][ C1] RSP: 002b:00007ffee0d86c58 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 439.149440][ C1] RAX: ffffffffffffffda RBX: 00007fba27438620 RCX: 00007fba266e4763 [ 439.157423][ C1] RDX: 000000000000002c RSI: 00007fba27438670 RDI: 0000000000000003 [ 439.165418][ C1] RBP: 0000000000000001 R08: 00007ffee0d86c74 R09: 000000000000000c [ 439.173404][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 439.181419][ C1] R13: 0000000000000000 R14: 00007fba27438670 R15: 0000000000000000 [ 439.189496][ C1] ---[ end trace 989a767027f3833d ]--- [ 439.195728][ C1] ------------[ cut here ]------------ [ 439.201210][ C1] refcount_t: saturated; leaking memory. [ 439.206888][ C1] WARNING: CPU: 1 PID: 9642 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 439.216265][ C1] Modules linked in: [ 439.220180][ C1] CPU: 1 PID: 9642 Comm: syz-executor Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 439.231645][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.241728][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 439.247870][ C1] Code: 04 01 48 c7 c7 c0 f6 1f 85 e8 84 c7 31 02 0f 0b eb 8b e8 0b 5d 29 ff c6 05 e6 04 66 04 01 48 c7 c7 c0 f6 1f 85 e8 68 c7 31 02 <0f> 0b e9 6c ff ff ff e8 ec 5c 29 ff c6 05 cb 04 66 04 01 48 c7 c7 [ 439.267498][ C1] RSP: 0018:ffffc90000170a20 EFLAGS: 00010246 [ 439.273594][ C1] RAX: f69aa6c73c194d00 RBX: 0000000000000001 RCX: ffff888117c962c0 [ 439.281591][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 439.289584][ C1] RBP: ffffc90000170a30 R08: dffffc0000000000 R09: ffffed103ee24e8b [ 439.297552][ C1] R10: ffffed103ee24e8b R11: 1ffff1103ee24e8a R12: ffff888121204208 [ 439.305567][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000170be0 [ 439.313569][ C1] FS: 000055557cad6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 439.322530][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.329112][ C1] CR2: 0000001b3071fffc CR3: 00000001234c6000 CR4: 00000000003506a0 [ 439.337110][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 439.345119][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.353109][ C1] Call Trace: [ 439.356386][ C1] [ 439.359224][ C1] tipc_crypto_xmit+0x1927/0x23f0 [ 439.364274][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 439.369648][ C1] ? memcpy+0x56/0x70 [ 439.373630][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 439.378810][ C1] ? __skb_clone+0x469/0x780 [ 439.383423][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 439.388363][ C1] ? skb_clone+0x21c/0x380 [ 439.392814][ C1] tipc_disc_timeout+0x6a2/0x830 [ 439.397748][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 439.402987][ C1] ? __kasan_check_write+0x14/0x20 [ 439.408096][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 439.413144][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 439.418689][ C1] ? wg_expired_retransmit_handshake+0xd8/0x230 [ 439.424955][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 439.430325][ C1] call_timer_fn+0x38/0x290 [ 439.434827][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 439.440049][ C1] __run_timers+0x639/0x9a0 [ 439.444554][ C1] ? calc_index+0x200/0x200 [ 439.449043][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 439.453917][ C1] run_timer_softirq+0x6a/0xf0 [ 439.458689][ C1] __do_softirq+0x255/0x563 [ 439.463224][ C1] asm_call_irq_on_stack+0xf/0x20 [ 439.468334][ C1] [ 439.471309][ C1] do_softirq_own_stack+0x60/0x80 [ 439.476337][ C1] __irq_exit_rcu+0x128/0x150 [ 439.481034][ C1] irq_exit_rcu+0x9/0x10 [ 439.485276][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 439.490943][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 439.496923][ C1] RIP: 0010:__stack_depot_save+0x1cc/0x4c0 [ 439.502752][ C1] Code: 8b 3d 50 ab 79 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c 44 39 6b 08 <75> f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c c3 18 75 de [ 439.522386][ C1] RSP: 0018:ffffc90000d767b8 EFLAGS: 00000286 [ 439.528444][ C1] RAX: 0000000000000000 RBX: ffff888125eac900 RCX: 0000000000000001 [ 439.536429][ C1] RDX: 0000000000000dc0 RSI: 0000000000000013 RDI: ffffc90000d76820 [ 439.544426][ C1] RBP: ffffc90000d76810 R08: 000000008576df5e R09: 00000000c6598e56 [ 439.552423][ C1] R10: 0000000000000002 R11: 00000000999382af R12: 0000000000000013 [ 439.560416][ C1] R13: 00000000473f3d31 R14: 0000000000000d31 R15: ffff8881f7340000 [ 439.568393][ C1] ? rtnetlink_rcv+0x1c/0x20 [ 439.572996][ C1] ? netlink_unicast+0x87c/0xa40 [ 439.577929][ C1] ? netlink_sendmsg+0x88d/0xb30 [ 439.582892][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 439.588221][ C1] __kasan_kmalloc+0xec/0x110 [ 439.592917][ C1] ? __kasan_kmalloc+0xda/0x110 [ 439.597767][ C1] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 439.603341][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 439.608623][ C1] ? ip_mc_up+0x112/0x1f0 [ 439.612986][ C1] ? inetdev_event+0xc13/0x1030 [ 439.617834][ C1] ? raw_notifier_call_chain+0x90/0x100 [ 439.623406][ C1] ? __dev_notify_flags+0x28f/0x500 [ 439.628595][ C1] ? dev_change_flags+0xe8/0x1a0 [ 439.633552][ C1] ? do_setlink+0xbb4/0x3ab0 [ 439.638143][ C1] ? rtnl_newlink+0x1292/0x1640 [ 439.643026][ C1] ? rtnetlink_rcv_msg+0x9db/0xb90 [ 439.648131][ C1] ? netlink_rcv_skb+0x1e0/0x430 [ 439.653088][ C1] ? rtnetlink_rcv+0x1c/0x20 [ 439.657671][ C1] ? netlink_unicast+0x87c/0xa40 [ 439.662643][ C1] ? netlink_sendmsg+0x88d/0xb30 [ 439.667582][ C1] ? __sys_sendto+0x41d/0x580 [ 439.672285][ C1] ? __x64_sys_sendto+0xe5/0x100 [ 439.677227][ C1] ? do_syscall_64+0x31/0x40 [ 439.681840][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 439.687909][ C1] kmem_cache_alloc_trace+0x184/0x2e0 [ 439.693304][ C1] ? ____ip_mc_inc_group+0x190/0x820 [ 439.698586][ C1] ____ip_mc_inc_group+0x190/0x820 [ 439.703739][ C1] ip_mc_up+0x112/0x1f0 [ 439.707903][ C1] inetdev_event+0xc13/0x1030 [ 439.712611][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 439.718411][ C1] ? devinet_exit_net+0x220/0x220 [ 439.723455][ C1] ? __kasan_check_write+0x14/0x20 [ 439.728562][ C1] raw_notifier_call_chain+0x90/0x100 [ 439.733958][ C1] __dev_notify_flags+0x28f/0x500 [ 439.738979][ C1] ? __kasan_check_read+0x11/0x20 [ 439.744029][ C1] ? __dev_change_flags+0x6a0/0x6a0 [ 439.749217][ C1] ? __dev_change_flags+0x4be/0x6a0 [ 439.754441][ C1] ? dev_get_flags+0x1e0/0x1e0 [ 439.759203][ C1] ? __kasan_slab_free+0x11/0x20 [ 439.764159][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 439.769733][ C1] dev_change_flags+0xe8/0x1a0 [ 439.774486][ C1] do_setlink+0xbb4/0x3ab0 [ 439.778884][ C1] ? __kasan_slab_alloc+0x69/0xf0 [ 439.783927][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 439.790102][ C1] ? rtnl_newlink+0x103/0x1640 [ 439.794855][ C1] ? __kasan_kmalloc+0xec/0x110 [ 439.799727][ C1] ? __kasan_kmalloc+0xda/0x110 [ 439.804576][ C1] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 439.810134][ C1] ? rtnl_newlink+0x103/0x1640 [ 439.814890][ C1] ? rtnetlink_rcv_msg+0x9db/0xb90 [ 439.820019][ C1] ? __nla_validate_parse+0x1dbd/0x2670 [ 439.825563][ C1] ? __nla_validate+0x60/0x60 [ 439.830264][ C1] ? __kasan_check_read+0x11/0x20 [ 439.835285][ C1] ? validate_linkmsg+0x38e/0x480 [ 439.840323][ C1] rtnl_newlink+0x1292/0x1640 [ 439.844994][ C1] ? __kasan_check_write+0x14/0x20 [ 439.850120][ C1] ? finish_task_switch+0x1b7/0x5a0 [ 439.855316][ C1] ? rtnl_newlink+0x3e1/0x1640 [ 439.860096][ C1] ? rtnl_setlink+0x3f0/0x3f0 [ 439.864771][ C1] ? memcpy+0x56/0x70 [ 439.868743][ C1] ? cap_capable+0x19c/0x220 [ 439.873353][ C1] ? __kasan_check_write+0x14/0x20 [ 439.878462][ C1] ? mutex_lock+0x8c/0xe0 [ 439.882809][ C1] ? mutex_trylock+0xa0/0xa0 [ 439.887394][ C1] ? ns_capable+0x8c/0xf0 [ 439.891748][ C1] ? netlink_net_capable+0x125/0x160 [ 439.897027][ C1] ? rtnl_setlink+0x3f0/0x3f0 [ 439.901731][ C1] rtnetlink_rcv_msg+0x9db/0xb90 [ 439.906701][ C1] ? rtnetlink_bind+0x80/0x80 [ 439.911398][ C1] ? arch_stack_walk+0xee/0x140 [ 439.916246][ C1] ? stack_trace_save+0x98/0xe0 [ 439.921118][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 439.926226][ C1] ? memcpy+0x56/0x70 [ 439.930234][ C1] ? avc_has_perm+0x234/0x360 [ 439.934910][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 439.940008][ C1] ? slab_post_alloc_hook+0x5d/0x2f0 [ 439.945293][ C1] ? __x64_sys_sendto+0xe5/0x100 [ 439.950243][ C1] ? avc_has_perm_noaudit+0x240/0x240 [ 439.955613][ C1] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 439.961007][ C1] netlink_rcv_skb+0x1e0/0x430 [ 439.965770][ C1] ? rtnetlink_bind+0x80/0x80 [ 439.970464][ C1] ? netlink_ack+0xb80/0xb80 [ 439.975051][ C1] ? __netlink_lookup+0x387/0x3b0 [ 439.980094][ C1] rtnetlink_rcv+0x1c/0x20 [ 439.984509][ C1] netlink_unicast+0x87c/0xa40 [ 439.989259][ C1] netlink_sendmsg+0x88d/0xb30 [ 439.994135][ C1] ? netlink_getsockopt+0x530/0x530 [ 439.999386][ C1] ? security_socket_sendmsg+0x82/0xa0 [ 440.004846][ C1] __sys_sendto+0x41d/0x580 [ 440.009379][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 440.014759][ C1] ? security_file_free+0xc7/0xe0 [ 440.019814][ C1] ? unlock_page_memcg+0x110/0x110 [ 440.024931][ C1] ? ____fput+0x15/0x20 [ 440.029089][ C1] __x64_sys_sendto+0xe5/0x100 [ 440.033882][ C1] do_syscall_64+0x31/0x40 [ 440.038305][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 440.044215][ C1] RIP: 0033:0x7fba266e4763 [ 440.048625][ C1] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d e1 5d 1f 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 440.068251][ C1] RSP: 002b:00007ffee0d86c58 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 440.076698][ C1] RAX: ffffffffffffffda RBX: 00007fba27438620 RCX: 00007fba266e4763 [ 440.084699][ C1] RDX: 000000000000002c RSI: 00007fba27438670 RDI: 0000000000000003 [ 440.092693][ C1] RBP: 0000000000000001 R08: 00007ffee0d86c74 R09: 000000000000000c [ 440.100702][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 440.108678][ C1] R13: 0000000000000000 R14: 00007fba27438670 R15: 0000000000000000 [ 440.116684][ C1] ---[ end trace 989a767027f3833e ]--- [ 440.126997][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.136623][ T9676] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2603'. [ 440.147876][ T9676] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2603'. [ 440.163862][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2603'. [ 440.168970][ T24] kauditd_printk_skb: 54 callbacks suppressed [ 440.168982][ T24] audit: type=1400 audit(1751850071.213:6285): avc: denied { unlink } for pid=2954 comm="syz-executor" name="bus" dev="tmpfs" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 440.205211][ T9679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9679 comm=syz.0.2611 [ 440.211847][ T9680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9680 comm=syz.0.2611 [ 440.230836][ T2711] usb 6-1: Cannot set autoneg [ 440.235892][ T2711] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 440.246155][ T2711] usb 6-1: USB disconnect, device number 30 [ 440.259462][ T24] audit: type=1400 audit(1751850071.303:6286): avc: denied { create } for pid=9684 comm="syz.9.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.279612][ T438] usbhid 10-1:0.0: can't add hid device: -71 [ 440.286365][ T438] usbhid: probe of 10-1:0.0 failed with error -71 [ 440.295338][ T438] usb 10-1: USB disconnect, device number 16 [ 440.305271][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.319530][ T24] audit: type=1400 audit(1751850071.333:6287): avc: denied { getopt } for pid=9684 comm="syz.9.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.323984][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.376030][ T24] audit: type=1400 audit(1751850071.353:6288): avc: denied { create } for pid=9678 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.437678][ T24] audit: type=1400 audit(1751850071.353:6289): avc: denied { write } for pid=9678 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.492779][ T24] audit: type=1400 audit(1751850071.353:6290): avc: denied { read } for pid=9678 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.547051][ T24] audit: type=1400 audit(1751850071.463:6291): avc: denied { associate } for pid=9689 comm="syz.0.2615" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 440.572041][ T48] tipc: Disabling bearer [ 440.577612][ T48] tipc: Left network mode [ 440.607247][ T24] audit: type=1400 audit(1751850071.503:6292): avc: denied { remount } for pid=9697 comm="syz.0.2616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 440.647851][ T24] audit: type=1400 audit(1751850071.553:6293): avc: denied { create } for pid=9704 comm="syz.0.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.670907][ T24] audit: type=1400 audit(1751850071.553:6294): avc: denied { ioctl } for pid=9704 comm="syz.0.2619" path="socket:[48505]" dev="sockfs" ino=48505 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.671288][ T9685] F2FS-fs (loop5): invalid crc value [ 440.729764][ T48] ------------[ cut here ]------------ [ 440.735262][ T48] refcount_t: saturated; leaking memory. [ 440.741534][ T48] WARNING: CPU: 1 PID: 48 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 440.751497][ T48] Modules linked in: [ 440.755419][ T48] CPU: 1 PID: 48 Comm: kworker/u4:2 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 440.760401][ T9685] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 440.767465][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.811641][ T48] Workqueue: netns cleanup_net [ 440.816752][ T9685] F2FS-fs (loop5): Start checkpoint disabled! [ 440.823178][ T48] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 440.830382][ T9702] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 440.830670][ T48] Code: 04 01 48 c7 c7 a0 f7 1f 85 e8 a0 c7 31 02 0f 0b eb a7 e8 27 5d 29 ff c6 05 01 05 66 04 01 48 c7 c7 c0 f6 1f 85 e8 84 c7 31 02 <0f> 0b eb 8b e8 0b 5d 29 ff c6 05 e6 04 66 04 01 48 c7 c7 c0 f6 1f [ 440.838311][ T9702] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 440.858439][ T48] RSP: 0018:ffffc900009cf7c0 EFLAGS: 00010246 [ 440.870210][ T9685] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 440.872593][ T48] RAX: beb342f7a5eaa600 RBX: 0000000000000000 RCX: ffff888101baa780 [ 440.887841][ T48] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 440.898959][ T9702] F2FS-fs (loop9): invalid crc value [ 440.902884][ T48] RBP: ffffc900009cf7d0 R08: dffffc0000000000 R09: ffffed103ee2a5f8 [ 440.912477][ T48] R10: ffffed103ee2a5f8 R11: 1ffff1103ee2a5f7 R12: 1ffff92000139f04 [ 440.920635][ T48] R13: ffff888121220004 R14: 0000000000000000 R15: 0000000000000cc0 [ 440.928730][ T48] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 440.938289][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.945319][ T48] CR2: ffffffffd66f0000 CR3: 000000011fe27000 CR4: 00000000003506b0 [ 440.953462][ T48] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.953550][ T9702] F2FS-fs (loop9): Found nat_bits in checkpoint [ 440.961569][ T48] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.975909][ T48] Call Trace: [ 440.986763][ T48] nf_nat_masq_schedule+0x421/0x490 [ 441.009685][ T48] ? __kasan_check_write+0x14/0x20 [ 441.021937][ T48] ? nf_nat_masq_schedule+0x490/0x490 [ 441.027424][ T48] ? masq_device_event+0xd0/0xd0 [ 441.032953][ T9702] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 441.040267][ T9702] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 441.047938][ T48] ? nfqnl_rcv_dev_event+0x441/0x470 [ 441.058054][ T48] ? rtnl_is_locked+0x15/0x20 [ 441.062822][ T48] masq_device_event+0x9b/0xd0 [ 441.070917][ T48] raw_notifier_call_chain+0x90/0x100 [ 441.076531][ T48] dev_close_many+0x330/0x4d0 [ 441.081565][ T48] ? __dev_open+0x4c0/0x4c0 [ 441.086425][ T48] ? __mutex_lock+0x853/0xc50 [ 441.091804][ T48] ? __kasan_check_read+0x11/0x20 [ 441.096856][ T48] unregister_netdevice_many+0x44c/0x1980 [ 441.103028][ T48] ? alloc_netdev_mqs+0xc80/0xc80 [ 441.108626][ T48] ? unregister_netdevice_queue+0x1aa/0x360 [ 441.114822][ T48] ? list_netdevice+0x4c0/0x4c0 [ 441.119732][ T48] ? __kasan_check_write+0x14/0x20 [ 441.124962][ T48] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 441.130387][ T48] ? ip6gre_init_net+0x340/0x340 [ 441.135425][ T48] ? ip6gre_init_net+0x340/0x340 [ 441.140413][ T48] cleanup_net+0x5fb/0xb70 [ 441.144842][ T48] ? __kasan_check_write+0x14/0x20 [ 441.150365][ T48] ? ops_init+0x4a0/0x4a0 [ 441.154726][ T48] ? read_word_at_a_time+0x12/0x20 [ 441.159888][ T48] ? strscpy+0x9b/0x290 [ 441.164237][ T48] process_one_work+0x6e1/0xba0 [ 441.169095][ T48] worker_thread+0xa6a/0x13b0 [ 441.174750][ T48] kthread+0x346/0x3d0 [ 441.178842][ T48] ? worker_clr_flags+0x190/0x190 [ 441.184033][ T48] ? kthread_blkcg+0xd0/0xd0 [ 441.188719][ T48] ret_from_fork+0x1f/0x30 [ 441.193237][ T48] ---[ end trace 989a767027f3833f ]--- [ 441.220402][ T9736] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 441.352773][ T807] attempt to access beyond end of device [ 441.352773][ T807] loop5: rw=2049, want=45104, limit=40427 [ 441.399390][ T3892] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 441.590704][ T9746] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 441.598864][ T9746] System zones: 0-2, 18-18, 34-34 [ 441.605194][ T9746] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2629: bg 0: block 248: padding at end of block bitmap is not set [ 441.620186][ T9746] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.2629: Failed to acquire dquot type 1 [ 441.632423][ T9746] EXT4-fs (loop9): 1 truncate cleaned up [ 441.638059][ T9746] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 441.647211][ T9746] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.658023][ T3892] usb 7-1: Using ep0 maxpacket: 8 [ 441.684518][ T9746] netlink: 'syz.9.2629': attribute type 27 has an invalid length. [ 441.700482][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.707708][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.760749][ T48] device vlan2 left promiscuous mode [ 441.766296][ T48] bridge0: port 3(vlan2) entered disabled state [ 441.773087][ T48] device bridge_slave_1 left promiscuous mode [ 441.779514][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.786960][ T48] device bridge_slave_0 left promiscuous mode [ 441.793209][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.801295][ T48] device veth1_macvtap left promiscuous mode [ 441.807294][ T48] device veth0_vlan left promiscuous mode [ 441.809512][ T3892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.823401][ T3892] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.836283][ T3892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.842942][ T3892] usb 7-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 441.852199][ T3892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.861056][ T3892] usb 7-1: config 0 descriptor?? [ 441.900295][ T3892] usbhid 7-1:0.0: can't add hid device: -22 [ 441.906628][ T3892] usbhid: probe of 7-1:0.0 failed with error -22 [ 442.097080][ T9753] overlayfs: conflicting lowerdir path [ 442.135790][ T9755] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 442.145823][ T9755] SELinux: failed to load policy [ 442.580468][ T9769] EXT4-fs (loop5): Test dummy encryption mode enabled [ 443.398619][ T2712] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 443.408336][ T9769] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.2637: inode #1: comm syz.5.2637: iget: illegal inode # [ 443.421808][ T9769] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2637: error while reading EA inode 1 err=-117 [ 443.434337][ T9769] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.2637: inode #1: comm syz.5.2637: iget: illegal inode # [ 443.447669][ T9769] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2637: error while reading EA inode 1 err=-117 [ 443.460553][ T9769] EXT4-fs (loop5): 1 orphan inode deleted [ 443.466359][ T9769] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue [ 443.525608][ T9782] overlayfs: failed to clone upperpath [ 443.574056][ T9791] netlink: 'syz.4.2642': attribute type 27 has an invalid length. [ 443.639461][ T2712] usb 10-1: Using ep0 maxpacket: 32 [ 443.654609][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.661794][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.688051][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2642'. [ 443.700129][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2642'. [ 443.769645][ T2712] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 443.782622][ T2712] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 443.809687][ T2712] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.832057][ T2712] usb 10-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 443.854502][ T2712] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 443.901534][ T9791] tipc: Resetting bearer [ 444.039510][ T2712] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.052822][ T2712] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.069245][ T2712] usb 10-1: Product: syz [ 444.077714][ T2712] usb 10-1: Manufacturer: syz [ 444.087650][ T2712] usb 10-1: SerialNumber: syz [ 444.147795][ T9791] device ipip0 left promiscuous mode [ 444.154023][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 444.194953][ T2716] usb 7-1: USB disconnect, device number 10 [ 444.214064][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2645'. [ 444.243270][ T9805] 9pnet: Insufficient options for proto=fd [ 444.410800][ T2712] usb 10-1: 0:2 : does not exist [ 444.415820][ T2712] usb 10-1: unit 5 not found! [ 444.429903][ T2712] usb 10-1: USB disconnect, device number 17 [ 444.447429][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2654'. [ 444.475586][ T48] ================================================================== [ 444.483706][ T48] BUG: KASAN: use-after-free in tcp_net_metrics_exit_batch+0x93/0x1a0 [ 444.491857][ T48] Read of size 4 at addr ffff888121220004 by task kworker/u4:2/48 [ 444.499651][ T48] [ 444.501989][ T48] CPU: 1 PID: 48 Comm: kworker/u4:2 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 444.513250][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.523298][ T48] Workqueue: netns cleanup_net [ 444.528036][ T48] Call Trace: [ 444.531311][ T48] __dump_stack+0x21/0x24 [ 444.535647][ T48] dump_stack_lvl+0x169/0x1d8 [ 444.540325][ T48] ? show_regs_print_info+0x18/0x18 [ 444.545524][ T48] ? thaw_kernel_threads+0x220/0x220 [ 444.550809][ T48] print_address_description+0x7f/0x2c0 [ 444.556348][ T48] ? tcp_net_metrics_exit_batch+0x93/0x1a0 [ 444.562148][ T48] kasan_report+0xe2/0x130 [ 444.566549][ T48] ? tcp_net_metrics_exit_batch+0x93/0x1a0 [ 444.572341][ T48] kasan_check_range+0x280/0x290 [ 444.577271][ T48] __kasan_check_read+0x11/0x20 [ 444.582109][ T48] tcp_net_metrics_exit_batch+0x93/0x1a0 [ 444.587727][ T48] ? tcp_net_metrics_init+0x120/0x120 [ 444.593085][ T48] cleanup_net+0x5fb/0xb70 [ 444.598012][ T48] ? __kasan_check_write+0x14/0x20 [ 444.603112][ T48] ? ops_init+0x4a0/0x4a0 [ 444.607428][ T48] ? read_word_at_a_time+0x12/0x20 [ 444.612528][ T48] ? strscpy+0x9b/0x290 [ 444.616671][ T48] process_one_work+0x6e1/0xba0 [ 444.621511][ T48] worker_thread+0xa6a/0x13b0 [ 444.626178][ T48] kthread+0x346/0x3d0 [ 444.630233][ T48] ? worker_clr_flags+0x190/0x190 [ 444.635247][ T48] ? kthread_blkcg+0xd0/0xd0 [ 444.639827][ T48] ret_from_fork+0x1f/0x30 [ 444.644224][ T48] [ 444.646540][ T48] Allocated by task 3763: [ 444.650857][ T48] __kasan_slab_alloc+0xbd/0xf0 [ 444.655699][ T48] slab_post_alloc_hook+0x5d/0x2f0 [ 444.660795][ T48] kmem_cache_alloc+0x165/0x2e0 [ 444.665652][ T48] copy_net_ns+0x13f/0x520 [ 444.670064][ T48] create_new_namespaces+0x3a2/0x650 [ 444.675339][ T48] unshare_nsproxy_namespaces+0x120/0x170 [ 444.681043][ T48] ksys_unshare+0x4ac/0x7d0 [ 444.685536][ T48] __x64_sys_unshare+0x38/0x40 [ 444.690287][ T48] do_syscall_64+0x31/0x40 [ 444.694691][ T48] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 444.700560][ T48] [ 444.702877][ T48] Freed by task 48: [ 444.706670][ T48] kasan_set_track+0x4a/0x70 [ 444.711245][ T48] kasan_set_free_info+0x23/0x40 [ 444.716166][ T48] ____kasan_slab_free+0x125/0x160 [ 444.721259][ T48] __kasan_slab_free+0x11/0x20 [ 444.726008][ T48] slab_free_freelist_hook+0xc5/0x190 [ 444.731363][ T48] kmem_cache_free+0x100/0x2d0 [ 444.736114][ T48] cleanup_net+0xae3/0xb70 [ 444.740513][ T48] process_one_work+0x6e1/0xba0 [ 444.745346][ T48] worker_thread+0xa6a/0x13b0 [ 444.750010][ T48] kthread+0x346/0x3d0 [ 444.754065][ T48] ret_from_fork+0x1f/0x30 [ 444.758458][ T48] [ 444.760773][ T48] The buggy address belongs to the object at ffff888121220000 [ 444.760773][ T48] which belongs to the cache net_namespace of size 4672 [ 444.775076][ T48] The buggy address is located 4 bytes inside of [ 444.775076][ T48] 4672-byte region [ffff888121220000, ffff888121221240) [ 444.788238][ T48] The buggy address belongs to the page: [ 444.793864][ T48] page:ffffea0004848800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121220 [ 444.804082][ T48] head:ffffea0004848800 order:3 compound_mapcount:0 compound_pincount:0 [ 444.812394][ T48] flags: 0x4000000000010200(slab|head) [ 444.817842][ T48] raw: 4000000000010200 ffffea000498b600 0000000200000002 ffff888107fdd380 [ 444.826415][ T48] raw: 0000000000000000 0000000000060006 00000001ffffffff 0000000000000000 [ 444.834984][ T48] page dumped because: kasan: bad access detected [ 444.841391][ T48] page_owner tracks the page as allocated [ 444.847103][ T48] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 275, ts 20399706039, free_ts 0 [ 444.865224][ T48] prep_new_page+0x179/0x180 [ 444.869808][ T48] get_page_from_freelist+0x2235/0x23d0 [ 444.875337][ T48] __alloc_pages_nodemask+0x268/0x5f0 [ 444.880695][ T48] new_slab+0x84/0x3f0 [ 444.884747][ T48] ___slab_alloc+0x2a6/0x450 [ 444.889319][ T48] __slab_alloc+0x63/0xa0 [ 444.893636][ T48] kmem_cache_alloc+0x1af/0x2e0 [ 444.898818][ T48] copy_net_ns+0x13f/0x520 [ 444.903231][ T48] create_new_namespaces+0x3a2/0x650 [ 444.908514][ T48] unshare_nsproxy_namespaces+0x120/0x170 [ 444.914221][ T48] ksys_unshare+0x4ac/0x7d0 [ 444.918709][ T48] __x64_sys_unshare+0x38/0x40 [ 444.923460][ T48] do_syscall_64+0x31/0x40 [ 444.927874][ T48] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 444.933751][ T48] page_owner free stack trace missing [ 444.939105][ T48] [ 444.941410][ T48] Memory state around the buggy address: [ 444.947026][ T48] ffff88812121ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 444.955073][ T48] ffff88812121ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 444.963121][ T48] >ffff888121220000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.971162][ T48] ^ [ 444.975214][ T48] ffff888121220080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.983262][ T48] ffff888121220100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 444.991302][ T48] ================================================================== [ 444.999351][ T48] Disabling lock debugging due to kernel taint [ 445.007143][ T3879] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 445.379516][ T3879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.390513][ T3879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.400277][ T3879] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 445.409596][ T3879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.418113][ T3879] usb 6-1: config 0 descriptor?? [ 446.320049][ T3879] hid-led 0003:27B8:01ED.0016: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 446.332353][ T3879] hid-led 0003:27B8:01ED.0016: ThingM blink(1) initialized [ 446.521029][ T9809] udc-core: couldn't find an available UDC or it's busy [ 446.528025][ T9809] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.536217][ T475] usb 6-1: USB disconnect, device number 31