last executing test programs: 43.864765666s ago: executing program 3 (id=4): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) process_vm_writev(r2, &(0x7f0000000e80)=[{&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000c00)=""/173, 0xad}, {&(0x7f0000000cc0)=""/167, 0xa7}, {&(0x7f0000000d80)=""/198, 0xc6}], 0x8, &(0x7f0000000680)=[{&(0x7f0000000f00)=""/220, 0xdc}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r8, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r8, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 42.783618187s ago: executing program 3 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000040000000100200014140000cf296186bfa2e2a33d5fb79ec51e8d5521b9824891d39731f40d9308c953f28a62393da7bc72f9e8cc2c4cb54a7f79e93d5f6032880aaec2656ff13ef24f804839cac3d9f00926df054b6547fa9a6526ced427a89dca18a228972b87c759238dc16e40e4ed762463d73a864cddc63e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = socket$netlink(0x10, 0x3, 0xf) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 41.981702729s ago: executing program 3 (id=16): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@test_dummy_encryption}, {@auto_da_alloc}, {@mb_optimize_scan}, {@dioread_nolock}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$packet(r6, &(0x7f0000000280)="0f30", 0x2, 0x0, 0x0, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRES8=r0, @ANYBLOB="08000100ac1414bbe1f202000a010100"], 0x34}}, 0xea5bc50b6199d77e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sched_switch\x00', r10}, 0x18) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) 41.795746977s ago: executing program 3 (id=18): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000527b7447978032abc4c777cdb06f44a16e4a872156895ad266b5506ef659e105000000000000005597e4ff618c7c5ff155393eff6ac4c3f00a48563dfde7d963d5b8d6f6bc18a75530919d57d012b9d81ce5", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) r4 = socket(0x1e, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r5, 0x0, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000000)={0x40000000}) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="5b685c7e779fbbbbbbbbbbbb86dd6a00000000181100730e00000000000000000000000000aaff0200000000000000000000000000ed4d1d4e20001890780000040000ff0700000000000000"], 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) socket$inet6(0x10, 0x3, 0x0) 41.795234708s ago: executing program 32 (id=18): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000527b7447978032abc4c777cdb06f44a16e4a872156895ad266b5506ef659e105000000000000005597e4ff618c7c5ff155393eff6ac4c3f00a48563dfde7d963d5b8d6f6bc18a75530919d57d012b9d81ce5", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) r4 = socket(0x1e, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r5, 0x0, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000000)={0x40000000}) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="5b685c7e779fbbbbbbbbbbbb86dd6a00000000181100730e00000000000000000000000000aaff0200000000000000000000000000ed4d1d4e20001890780000040000ff0700000000000000"], 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) socket$inet6(0x10, 0x3, 0x0) 28.071925767s ago: executing program 1 (id=110): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000032b29d7683b26d3d89c7ec8d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000006d80500400000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3319bf3ee447a7ce29354000000d4a15e458567520e200949b39f0000fa45e3eb7c6011126e54cdf4bafe"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r1, 0x25, 0x0, @void}, 0x10) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x32) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180020000080000000000000f0ff415f944fe3ffff18110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, ')', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x4f]}, 0x2a) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 26.247454583s ago: executing program 1 (id=118): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xd, 0x0, 0x8000000000000001}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x1ff, 0xffffffff, 0x430, r0, 0x6, '\x00', r2, r0, 0x1, 0x3, 0x3, 0xc}, 0x50) ptrace(0x11, r1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000001c0)={0x0, 0x9}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x17c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9c68}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x84}, 0x840) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000001a80)={0x8, &(0x7f0000001980)=[{0xbf4, 0x89, &(0x7f0000000580)="2eebe1dd0a789f6925e0c85027d0f9f4be4f2e89e549deeb7c36982083ccc7cb983140b61543de29d1857847cc2359371246f587f6050a26d41a05a2df02b9814fd3034bba3af2bb7679e9401cdee26be4c3b239a836de55d3585cdcd693dd0ef6d353831d7dea3968c39eab695d21ed028c78b89bc84d070ab41c24441fbda74422879a3755e45abe", 0x1, 0x1}, {0xc, 0x1000, &(0x7f0000000640)="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", 0x1}, {0x44c2, 0x4e, &(0x7f0000001640)="032c2edfa60a6ac9a62ad0a447f0ab35dd14d5086d86071dc1c826ce4679e2b4aef879c293ffdd5075c5aae7dbd113f16031e0b601fca63e8746e67062b6ab98c1f5b139fd54750055a0f617ea3d", 0x1}, {0x9, 0x1b, &(0x7f00000016c0)="7569d554afae6e2eb5c81176154ebb06d5d7f07dc936bede87f906", 0x1}, {0xd80, 0x43, &(0x7f0000001700)="65dfb7e87ccdb1d04ba490f65c802ae14974ed8ae1f5d3fa38c1f4fc41a179a7d921f9ad9b4889a84879d62f5d89c9bb99a85055b05f7551ecabf05541a15eb95bb193", 0x0, 0x1}, {0x4, 0x4d, &(0x7f0000001780)="f9da24c9c9826b2e88b05ae744f0946795850e70ed69babb7d910f9ccb2868eb93b947d2ef09ea03e4684715f106837337a069a6001e07964b50a90b421584d5b6fd403d3225132028a490b463", 0x1, 0x1}, {0x6c91, 0x4e, &(0x7f0000001800)="dadfc637636f5de1be2da6328cc2d609d6202d6922abf454c7b8e565660e562978291d089d3eba915a1e99c0d329dd5aa0de07c1704c8a68a9ebf357d3908614524a7b4df7fa86ea73a16d746320", 0x0, 0x1}, {0x10, 0xd0, &(0x7f0000001880)="82c69d1caefe067db7450fad27e3ad3be873a9b2c35613037b1928989605af2cd201444676667002069d82414833c42fa2a7618c2c1935c898d8c142a029f09fc8f874f91c8e2485918aa7af063250698c725eaf5d746d60f0d8b01995b9328998e23d3b354724c22d3eb7baadd3641d6dc56fe03dacded0c7323093bd5b73631bebb6169fc3edfffdb1d5c78be36339facfff04bde977384a89acde78a907d0eafacf50a6b7078c4a5f82d4fc1f63473db4da4caaee2ea47368fc6db3dfebb8240d034e0c0f2d16bdfaf1898aac56b9", 0x1, 0x1}]}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001ac0)=0xffffffffffffffff, 0x4) openat2(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0xa8, 0x1}, 0x18) pipe(&(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)=@newlink={0x74, 0x10, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x10009}, [@IFLA_IFNAME={0x14, 0x3, 'pim6reg\x00'}, @IFLA_PHYS_SWITCH_ID={0x7, 0x24, "87e727"}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "58ac2e54ec1a52933d935482457d86c5"}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_MTU={0x8, 0x4, 0x40}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x48085) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001d00)={0x73622a85, 0xb, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x38, r7, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xef}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4040000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000002100)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x88800100}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f00)={0x1b8, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x28, r7, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x6}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x48010) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000002240)=0x65, &(0x7f0000002280)=0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002300)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000002400)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmsg$nl_xfrm(r5, &(0x7f0000002a80)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002500)=@getpolicy={0x520, 0x15, 0x200, 0x70bd2d, 0x25dfdbfb, {{@in6=@empty, @in=@remote, 0x4e20, 0xfe01, 0x4e23, 0x9, 0xa, 0x20, 0xa0, 0x0, r2, r11}, 0x6e6bc0, 0x2}, [@offload={0xc, 0x1c, {r2, 0x3}}, @algo_auth_trunc={0x5a, 0x14, {{'blake2s-128-arm\x00'}, 0x70, 0xc0, "4c3e525de860013c677f713b30be"}}, @migrate={0x180, 0x11, [{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3506, 0xa}, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@loopback, @in6=@loopback, 0xff, 0x4, 0x0, 0x3503, 0xa, 0xa}, {@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0xa1, 0x0, 0x0, 0x3504, 0xa, 0x2}, {@in6=@mcast2, @in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@multicast1, 0x32, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in=@private=0xa010102, @in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2b, 0x3, 0x0, 0x3502, 0x2, 0xa}]}, @algo_comp={0x115, 0x3, {{'lzjh\x00'}, 0x668, "43fe89b4da0c2cb91ac7bd478c8e10ab12f81e5f5dd89a5c8171cfb60ae36dd5d101ba5bbb227c33b1fd34832c64314f015f5da0162f62762243ceb3316ac6b0b37fa4bfe09fc69eb978b94a25249bbb00b9e020cd3fe85384a3c6443813836dd4cad516096c8bbac833e601c8aa6cdafd69104b022917a21db5582e585e990afff7273ba53f76d14e36ca370bba82e38fcf311bb7049ef7e885aefc164ae29c1432b263147d7f107721750ae72e24a54f0c735697815935c930a0c778dbaa87bb32d3a8e4a1f88bdb6d780419"}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 0x4e21, 0x3, 0xa, 0x0, 0x20, 0x3b, r2, r12}, {0x5, 0x3, 0xb151, 0x3ff, 0x0, 0x0, 0x2, 0x2}, {0x8, 0x4, 0x3ff80000000, 0x7fffffffffffffff}, 0xfffffffe, 0x6e6bbd, 0x1, 0x1, 0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2a, 0xe2}}, @mark={0xc, 0x15, {0x350759, 0x1}}, @replay_thresh={0x8, 0xb, 0x2}, @sec_ctx={0xf7, 0x8, {0xf3, 0x8, 0x1, 0x5, 0xeb, "2693609626c4d34c511086fec8bd0438a775c2807a4f2d2c47186cf14cd43a82f31d51195ecaa1633c67a3d5b3cb4ce829af269cec930e5b5b32ad5c1b795131240f44b704962fcd2a005ef565f200ac08aa764b5ed15cf4c535ed6b8184d001f12d6d9c84700573ef404205e779f54825ba496be01ca87482e8c17bc2c269b3712f6cea8f4db4110da6444d4d6a0b9dcb0a085bda0c7b4bedc31bb3511145e019b274a01a2afdc2a2ace9da6f66f0c5c300f52327ab3ac34f73e48b4562b0f7a79e69ca0b11d41b50b51b3e4efb4168f43522bd788d19644d231434037340c4b9def67939871e7f23cdf9"}}]}, 0x520}, 0x1, 0x0, 0x0, 0xc0c5}, 0x80) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r13, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x4040880) 26.246948143s ago: executing program 1 (id=119): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r4) (async) fsync(r4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r6}, 0x18) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be0083626500"], 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)='BB') r9 = syz_usb_connect$cdc_ncm(0x4, 0x8f, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x50, 0xb0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "bc"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x100, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x30}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x2}, @dmm={0x7, 0x24, 0x14, 0xcd9e, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x9, 0x7f, 0xd, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x6, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xce, 0xa1, 0x3e}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xa, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xf7, 0x6e, 0xf, 0x20, 0x5}, 0xc, &(0x7f0000000340)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x7, 0x7}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2016}}, {0xb2, &(0x7f00000004c0)=@string={0xb2, 0x3, "735191a520b799258d47bd4bd89fc68960915fc3eb76472a3622c7fb44b33fb2a216bd881d037c22c20552a82f37476d686247e3882deadc35a9d1ec5a24cef8a042b310ca2eab6305f0482022561e064558c98f66083825125097e112c0f199bf5166b83cd8718724e38469a2e62b5d37ebc23df38f455af1b64d8725bfd0aaef2a03bb3e8598249a81eae172656dcdbcea08092b2b39e78f732611d96135fbbfefcb4241b6018e1a4d69a782c54adc"}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f00000006c0)={0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="20061e0000001e093ec7954f6f601c2b083bdd7bd5874b3aabbd6e61fa9ff03766340b27652ae8506841648f3f8f78d0cee6"], &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x0, 0x13, 0x86, "e9f7f16c04105767121ae51115e63dd0ac9e2d7ef383ca729edbfc726136f4fdcd23df1e36d242704d0e87e71507da69d46c9fb312e5923c37aaa3fda3b11277c2b282a881f53a5f7133bc173846a525d38435f5f5bd5505159234ea1a8fb447f8356459b9faca7474379457700b9ce166ed40ccccc74d8cde5686b163ad362342e6736eda2b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x7, 0x5e3, 0x2, 0xa09, 0xb02, 0xff98, 0xb, 0x7, 0x1, 0x7, 0xe, 0x7}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 23.247407629s ago: executing program 1 (id=137): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x24008841) r5 = socket$inet_icmp(0x2, 0x2, 0x1) accept4$inet(r5, 0x0, 0x0, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000022c0)=ANY=[@ANYBLOB="3c1f6e566cd0d1df8fc8eadb8396b846497254fe13af75d5d0bfbd707d10eccc658c6109e4b9", @ANYRES16=r6, @ANYBLOB="010b26bd7000fddbdf250100000008000100000000000c00060003000000030000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xa800}, 0x4) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x810412, &(0x7f0000002680)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB="15b654a99f19f751b397246870032a5801c8e4333b96ab1cb23ce23cea34d9c9984d7f2093a5a45907dba61a8a10dad320a971c149c3ae5b924272bed0bbb8259f7d1c8363d58a70e85cf54e8c3d3af34d75783a64a11574ee900d013d0751dbb1d686604f133059f40064ad82f88843d0b161aa95aea3ea3b85a600e427fb2ad2bdf623d45d62caf62a7cc3c881998b92bb782a01e939ea70684be5c5c8be63e5e5d580fb71fe083348f0fec1db3c1db7f9b12060d71bcb5235287aa74833654ce9377bfa5a53833545abae85088e166766f1a41b112e04ef4073f8086de44b3cb9781889157c849058411aba465997c8e8db", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX], 0x2, 0x1d8, &(0x7f0000002340)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x80000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/269], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 23.111656913s ago: executing program 1 (id=138): pipe2$9p(0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r6, 0x53, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0xe, 0x7, 0x4, 0x71d, 0x4, 0x5, 0x0, 0xa86, 0x8001, 0x8, 0x2, 0x0, 0x0, 0x10001, 0x1800000000000000, 0x4], 0xd000, 0x10}) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f00000001c0)=0xc176, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32=r1], 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/warn_count', 0x141603, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) (async, rerun: 32) writev(r9, 0x0, 0x0) (rerun: 32) 23.109301103s ago: executing program 1 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000030001000900000001000000", @ANYRES32, @ANYBLOB="e9ff0000000000000000480000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) 23.106872413s ago: executing program 33 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000030001000900000001000000", @ANYRES32, @ANYBLOB="e9ff0000000000000000480000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) 21.701907837s ago: executing program 0 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xf) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xf) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000000300)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000000300)}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() 21.350849903s ago: executing program 0 (id=157): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @mcast2, 0x1}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_pidfd_open(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x682) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) 16.061723622s ago: executing program 0 (id=164): bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @private2}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0xffffffff, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44890}, 0x8840) sched_setscheduler(r1, 0x2, 0x0) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYRES64=r4, @ANYRES16=r10, @ANYBLOB="021000"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000800009500000000000000"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) recvmmsg(r9, &(0x7f0000003780)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/51, 0x40}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f0000002540)=""/196, 0xc4}], 0x4, &(0x7f00000004c0)=""/27, 0x1b}, 0x7ff}, {{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/155, 0x9c}, {&(0x7f0000000ac0)=""/157, 0x9d}], 0x115, &(0x7f0000000bc0)=""/181, 0xb5}, 0x1}, {{&(0x7f0000003980)=@generic, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000d00)=""/8, 0x8}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/215, 0xd7}], 0x6}, 0x80000001}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002040)=""/181, 0xb5}, {&(0x7f0000002100)=""/82, 0x52}, {&(0x7f0000002180)=""/58, 0x3a}, {&(0x7f00000021c0)=""/130, 0x82}, {&(0x7f0000002280)=""/235, 0xeb}, {&(0x7f0000002380)=""/23, 0x17}, {&(0x7f00000023c0)=""/222, 0xde}], 0x7}}, {{0x0, 0x0, &(0x7f00000036c0), 0x4, &(0x7f0000003700)=""/76, 0x4c}, 0x4}], 0x5, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 15.695078669s ago: executing program 0 (id=172): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe4e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000014000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f00000004c0), &(0x7f0000001c40)=r4}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x40000009, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffc00) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='freezer'}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r8}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0xa, 0x0) fsmount(r1, 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 14.065817155s ago: executing program 0 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000a300000000000000a30a000000000000f8ffffffffffffff0400000000000000005f000000000000000000956800000000000000000000000000000000000000080000000000000000000000000000000000000100"/112], 0xb8}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64], 0x48) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wake_lock', 0x400002, 0x13) sendmsg$unix(r6, &(0x7f0000000580)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)="85a74fcdf8af1b09a365cddcb0aac2b7de86c05cd7a3463f501b270a1ebe57472acf52660a27562cac4e04e7f22991e6a636b77cf5b0ec5eae4b0b488121713782a3c803c1df022e9243f007f978ee28d6f70a72642e7998f5115028", 0x5c}, {&(0x7f00000003c0)="c3bad384b5509f4e0c5a8c2a292e8c404432e15bd71becb6da2edd38ed52912f80840471eeff7bb1a1745af96e94ecca5011260d6aaf14f2a025981812868bdc12308f9c05bc75a2755914dd057ba97da51c506dd6da4f237eeefd50dc7c7fb5207c824f08bfe39e1331024c7bd85ed369c2cb0dbc7c8f7332fc64e9ac9d1fd154d18f0f782c2b79a5861d254e1cad32d4e9d43111f8d2cf7ea974e5a8bd1598412cd19e13c16550fadcf8cc3302bd0ec89572b15820b720038255291fd39a658fed24eba3712473b7131eb451f0e083db9fcd13d8d20f3342fa3dad156da58c9ce32e217dd58cc38b120e15", 0xec}, {&(0x7f00000004c0)="3b34fdfc4973b5309207aaad82e8ac6b4652b502278c2a0cc297016e3efdb2be867f83b718dd4793", 0x28}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}], 0x20, 0x5}, 0x20008844) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004ece4cd6569d2c85a111fcb4bd6d4bd2762c6f5e63606758c59576925471310344d538d7678a57f066e53556f1acf5dd664d6aad41493b2a8a201c78a6c31237e98efdffcc7772ac37424c9ef99a2d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 13.987631793s ago: executing program 0 (id=183): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r4, 0x1000006, 0x13, r3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 13.941323018s ago: executing program 34 (id=183): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r4, 0x1000006, 0x13, r3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 7.814713603s ago: executing program 5 (id=237): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write(r0, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18) r2 = open(0x0, 0x14927e, 0x102) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x100000001) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 6.86463241s ago: executing program 5 (id=248): creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(0x0, 0x14507e, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="2c26ac08f0e996f5455e52ffffffffffff00008000000501b1f70c0963d9ff65e389ef978ea1570018120000", @ANYRES8=r0, @ANYBLOB="0000000000000085001a681b000000b70071587e7c100900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES32], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") 6.807685076s ago: executing program 5 (id=249): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x200898, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) (async) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0xb) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x3]}}, &(0x7f0000002cc0)=""/4104, 0x1c, 0x1008, 0x1}, 0x28) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6, @ANYRESDEC=r6, @ANYRESOCT=r6, @ANYBLOB="7125a053061f8fd5"], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) 6.795629987s ago: executing program 5 (id=250): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x80, 0xe, 0x4, 0x0, 0xbffffffd, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x4, 0x80000000, 0x2, 0x1fe, 0xfffffff9, 0xa}}) r1 = gettid() r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES8=r6, @ANYBLOB="6cb29ded8a674c9fcca10cb44f6102eb7653aff4c46148f69157ce959996da4ec4a7d01f3034578090f163b83b92eee9840a397322b84c16b638a304098954a6df6e41f035816648d1ffea", @ANYRES64, @ANYRES16=r7, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) tgkill(r1, r9, 0x29) 6.781863028s ago: executing program 2 (id=251): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0x3605, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9f"], 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d004000060000000400000001000000000000002abb"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000000c0)) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000040)="dd13bc7ef2839f", &(0x7f0000000080)="eec8141c8ec09299a603e8b4490d4823b9f938a510d820d12002"}}, &(0x7f0000bbdffc)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="c4c2e147950600000099ea060000006a0066b829018ed0660f649027a6000066b8b0000f00d8c4c1fa1056100f082e0f01cfdc8db90d0000", 0x38}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 6.351719662s ago: executing program 5 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESOCT=0x0]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000006000000000000000100000d00000000020000000002000000000000615f5f00"/62], &(0x7f0000000100)=""/4096, 0x3e, 0x1000, 0x1}, 0x28) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) 6.27189451s ago: executing program 5 (id=255): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x8) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0x12}) (async) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0x12}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x6, 0x0, [{0x0, 0x0, 0x8}, {0x213, 0x0, 0xf}, {0xb68, 0x0, 0x9}, {0x999, 0x0, 0x7bc}, {0xb9d, 0x0, 0xc}, {0x882, 0x0, 0x10001}]}) (async) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x6, 0x0, [{0x0, 0x0, 0x8}, {0x213, 0x0, 0xf}, {0xb68, 0x0, 0x9}, {0x999, 0x0, 0x7bc}, {0xb9d, 0x0, 0xc}, {0x882, 0x0, 0x10001}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x5}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) dup2(r2, r1) (async) r3 = dup2(r2, r1) connect$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000001c0)=@arm64) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000280)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x35) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x209}) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x209}) r6 = socket$packet(0x11, 0x4, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000340)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000380)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r7, 0x86, 0x18}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r7, 0x86, 0x18}, 0xc) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000004c0)={0x4}) r8 = accept4$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14, 0x800) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000580)={0x1, 0x3}, 0x4) bind$netlink(r3, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x168, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0653c71e85a7"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0x119, 0x2a, [@ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x802c, 0x2, 0x5, 0x0, {0x7fff, 0x0, 0x0, 0x18c, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0x8, 0x6}}, @dsss={0x3, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @tim={0x5, 0xe5, {0x93, 0xb8, 0x1, "574cf03c60f0a0b2a9238080cb414f3ee980e9757008685ee323962e53f7009317ec94673350d1bfb7f4abcadb16b950821e7c140b7ae57e526ff4a42dc0f08928cf81c968dd008a454293b0e5914a01c4cc01497c13d2ad497ed135b0495c6357c062c1f2052fe2cbecb042675646fe2f97bb0fbb4e567d33ee46ff551ce91e2d54dc7dc6b1a730901fca8d3966125eff960a413b6177e5a2950a026b6a9c478f896931c4fc2df9f99101a11ab0782663351892ec3df4414907f572518594e7c9f85c78ac572406cc9338c1fb276e1c2c12c1bd07888cc307ed81a1134ad6cf57f3"}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x44000}, 0x1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000008c0)={0x7, 0x80, 0x432}) (async) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000008c0)={0x7, 0x80, 0x432}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2c00a202}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x55) 6.246796923s ago: executing program 35 (id=255): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x8) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0x12}) (async) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0x12}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x6, 0x0, [{0x0, 0x0, 0x8}, {0x213, 0x0, 0xf}, {0xb68, 0x0, 0x9}, {0x999, 0x0, 0x7bc}, {0xb9d, 0x0, 0xc}, {0x882, 0x0, 0x10001}]}) (async) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x6, 0x0, [{0x0, 0x0, 0x8}, {0x213, 0x0, 0xf}, {0xb68, 0x0, 0x9}, {0x999, 0x0, 0x7bc}, {0xb9d, 0x0, 0xc}, {0x882, 0x0, 0x10001}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x5}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) dup2(r2, r1) (async) r3 = dup2(r2, r1) connect$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000001c0)=@arm64) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000280)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x35) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x209}) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x209}) r6 = socket$packet(0x11, 0x4, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000340)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000380)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r7, 0x86, 0x18}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r7, 0x86, 0x18}, 0xc) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000004c0)={0x4}) r8 = accept4$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14, 0x800) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000580)={0x1, 0x3}, 0x4) bind$netlink(r3, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x168, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0653c71e85a7"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0x119, 0x2a, [@ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x802c, 0x2, 0x5, 0x0, {0x7fff, 0x0, 0x0, 0x18c, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0x8, 0x6}}, @dsss={0x3, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @tim={0x5, 0xe5, {0x93, 0xb8, 0x1, "574cf03c60f0a0b2a9238080cb414f3ee980e9757008685ee323962e53f7009317ec94673350d1bfb7f4abcadb16b950821e7c140b7ae57e526ff4a42dc0f08928cf81c968dd008a454293b0e5914a01c4cc01497c13d2ad497ed135b0495c6357c062c1f2052fe2cbecb042675646fe2f97bb0fbb4e567d33ee46ff551ce91e2d54dc7dc6b1a730901fca8d3966125eff960a413b6177e5a2950a026b6a9c478f896931c4fc2df9f99101a11ab0782663351892ec3df4414907f572518594e7c9f85c78ac572406cc9338c1fb276e1c2c12c1bd07888cc307ed81a1134ad6cf57f3"}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x44000}, 0x1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000008c0)={0x7, 0x80, 0x432}) (async) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000008c0)={0x7, 0x80, 0x432}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2c00a202}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x55) 5.826079075s ago: executing program 2 (id=257): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x4e4f01) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000180), 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) 4.871582503s ago: executing program 2 (id=262): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000440), 0x0, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r9, 0x0, 0x2000000002ffff, 0x0) 3.72649364s ago: executing program 2 (id=274): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = signalfd(r1, &(0x7f0000000080)={[0x2]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x1, 0x5, 0x16, @private1, @mcast2, 0x10, 0x8000, 0xa6ad, 0x5}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = inotify_init() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) inotify_add_watch(r7, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0xffa1) write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87ffe, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x6}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xe2, 0x4, 0x2}], "4bc205b51836c201b8bed1a65c690f8de4b47c07e96c91a1a5669f861e1a4fb2618cd1f596b4139be95cb3b22b4eeb1fa77e5d037d579f80fddcc8ce22f7584f5a0ade8d18b7c9ee069c8235ca04e1be989bdde1f3379446f8c5f9fe84ed4b066be06c6a616ae796b941577ede05"}, 0xe6) close(r6) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x4, 0x18}, 0xc) r10 = signalfd4(r1, &(0x7f0000000640)={[0x20]}, 0x8, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000380)=""/207, 0x41100, 0x4, '\x00', r3, @fallback=0x36, r4, 0x8, &(0x7f0000000580)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x3, 0x81, 0xb}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000680)=[r5, r6, r9, r10], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r11, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000300)}, 0xfffffffffffffe71) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r13}, 0x10) mlockall(0x7) syz_usb_control_io(r0, 0x0, 0x0) 3.579627525s ago: executing program 6 (id=278): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000f00000000000000000000006904"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x100, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x20) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet_udp(0x2, 0x2, 0x0) 3.579305615s ago: executing program 6 (id=279): mkdirat(0xffffffffffffffff, 0x0, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) syz_emit_ethernet(0x52, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x464, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_POLICE={0x434, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x29b4, 0x2, 0x4, 0xfffffff6, 0x3, 0x9, 0x0, 0x1, 0x81, 0x7, 0x4, 0x7, 0x7, 0x9, 0x6, 0xfffffffa, 0x8, 0xfb, 0xb7, 0x1, 0x4, 0x7f, 0x80000000, 0x43391337, 0x80, 0x81, 0x7, 0x7, 0x4, 0x0, 0x1b5, 0x8f, 0x7, 0x5, 0xf9, 0x6, 0x6, 0xd649, 0x1, 0x1, 0xbe, 0x8, 0x99, 0xbc9, 0xffffffff, 0x1, 0x9dec, 0x3, 0x8, 0x1, 0xfffffff7, 0x4, 0x5, 0xb04, 0x10001, 0x17ffffd, 0x5, 0x7, 0x9, 0x1, 0x6, 0x81, 0x79, 0xc, 0x10, 0x414, 0xfa2, 0x6, 0xb82b, 0xfffff4f0, 0x5, 0x1, 0xffffffff, 0xb38, 0x2, 0x7f, 0x8, 0x1, 0x7, 0x7, 0x6d, 0x8, 0x4, 0x18f, 0x1, 0x246bf0f3, 0x6, 0xe, 0x6, 0x6, 0x800, 0x1000, 0xfa, 0x7, 0x9, 0x0, 0x7, 0x400, 0x1ff, 0xa5, 0x5, 0x1, 0x5, 0x1, 0x1, 0xb, 0x0, 0x5, 0x7f, 0x10, 0x81, 0x2, 0x5a86, 0x8, 0x1, 0xffff, 0x48, 0x3, 0xe, 0x9, 0xce6c, 0x1000, 0xfffff668, 0x51a, 0x401, 0x3, 0x54000000, 0x0, 0x81, 0x5, 0x7, 0x5, 0x6, 0xffffff59, 0x8, 0x8, 0x3, 0xa, 0x1, 0x80000000, 0xc, 0x7, 0x7, 0x2, 0x9, 0x80000000, 0x7, 0x10, 0x6, 0x2, 0xccf, 0x5, 0xcb8, 0x76, 0x2, 0x8a, 0xfffff093, 0x10000, 0x5, 0xe, 0x7, 0x6, 0x6, 0x2, 0x7, 0xa, 0xd, 0x5, 0x5, 0x3, 0x3, 0x1, 0x7, 0x7, 0x5, 0x9, 0x8, 0x4, 0x4a, 0x100, 0x2, 0xfffffffe, 0x8, 0x87b, 0x1, 0xfffffffc, 0x6, 0x9, 0x0, 0x9, 0x1, 0x400, 0x8, 0xfc, 0x401, 0x3, 0x6, 0x5, 0xfff, 0x6, 0x5, 0xc8, 0x90, 0x5, 0x6, 0xe96f, 0x8, 0x5, 0x1, 0x7, 0x100, 0x4, 0x8, 0x0, 0x6, 0x4, 0x5818d449, 0x46ea, 0x8000, 0x7ff, 0x6, 0x8, 0x80b, 0x81, 0x1, 0xf4, 0x2, 0xc, 0x8, 0x3ff, 0xdf, 0x0, 0x100, 0x7, 0x9, 0xa, 0x1, 0x80000000, 0x1, 0x5, 0x5, 0x27b, 0x9, 0x6, 0x3, 0x1, 0x0, 0x9, 0x3, 0xc09, 0x3, 0x9, 0xffffffff, 0x401]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff800}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}]}, 0x464}}, 0x24040084) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) 3.152379768s ago: executing program 7 (id=281): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r7}, 0x10) socketpair(0xa, 0x2, 0x5, &(0x7f0000000040)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r5, 0x9, 0x0, @void}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) 2.591336015s ago: executing program 8 (id=287): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="ed129a93b8cf4746fd3475756f9d20ff09390d3e9feb7567844b444a384054cd563eb0d557f2387292cb22b4c7eb7fd4348f6e6f4f2d523a3f0f383720", 0x3d}], 0x1}, 0x0) (async) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x20000000000000b5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800451ef3ad4e07dc000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (rerun: 64) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffff7ffffb, 0x213f85fe, 0x101, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x437}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) (async, rerun: 32) eventfd(0xfffffff9) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.564109438s ago: executing program 6 (id=288): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c910feff"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x985201) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf62) 2.522319573s ago: executing program 4 (id=289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @initdev}, &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x9, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @enum64={0x9, 0x5, 0x0, 0x13, 0x0, 0x0, [{0x7, 0x5, 0x100}, {0x6, 0x0, 0xfffffff7}, {0x6, 0x9, 0x9}, {0xb, 0x9, 0x771accc3}, {0xc, 0x1, 0x3}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @const={0x9, 0x0, 0x0, 0xa, 0x4}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x5d}, @fwd={0xa}, @struct={0x1, 0x3, 0x0, 0x4, 0x1, 0xff, [{0x0, 0x4, 0x7f}, {0xa, 0x5, 0x100}, {0x2, 0x9, 0xc93}]}]}, {0x0, [0x0, 0x2e, 0x4f, 0x5f, 0x2e, 0x61, 0x61]}}, &(0x7f0000000180)=""/96, 0xe5, 0x60, 0x1, 0xfffffff8}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x80000001, 0x94a, 0x7fff, 0x2c212, r2, 0x10, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x80000009, @value=r3}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x602, r4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x68}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) close(r0) 2.471688938s ago: executing program 4 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="07000000040000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x14}}, @address_request}}}}, 0x0) (async) io_setup(0x7, 0x0) (async) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000300)={0x10001, 0x1, 0x6, 0x800, 0x0, "61c1c081350fef5382d63e7a35ba864fb409c7"}) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x0, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "c9cd569be4e9fbd8"}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)={0x0, 0x14, 0x4, "00761663"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep2(r10, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "84e2d97a", {0x3, 0x101, 0x0, 0xff, 0x6, 0xa, 0xd}}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 2.471316558s ago: executing program 4 (id=291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x1c, 0x0, @wg=@initiation={0x1, 0x4, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600"}}}}}}}, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="aabe8bdb0406ed03969d6eeb6993b956d5bf944ee9d318ec97272718ccbb370aa04672d9131e46d0c8de0e88d66189cddfc489100515a9a45a8f8d640de8cc356894bd48717513c7f04645ff33a6ef14543b6c8532b0ee12b4479236d59cc57bcc4c53131492b0ae9bdc68b6586267ccf4cc1398a1f62cbfb647b0b8c6a775d6dd8fb1ca25489a8dad84109f2c3edf96e09b47c29d42529f17cc46a4f8f05a4879a52963b2842a61b429ade856aba7cfae27317f12b21c615e", 0xb9}, {&(0x7f0000000580)="1982af18b7b13dbbc52cab78be42dbff00dcd759360bc0b16db82294e17eda817262530283b3882c1cb3cebcc03e4896dff9bafa51b15bb2c4900f8dec18ed64dee2bd8faf5126fe34e01837676948cff4421ad72a7b9d42dc32bc05daf781116969665d09bd7c815252c02bf81f114e5c376f4ef618fb1cc003ce884e496d4fcb2763dadea2b79a865a5d49dec1805a216f448c529b3ffb9b91fd644c26421d003a85dbee30d22cf329c1d30ac437d6358023cfeb3e405d59a31b124dc524b5c470434a302ac231612d497397fd", 0xce}, {&(0x7f0000000000)="d92b1df845e7553b22b8bd", 0xb}, {&(0x7f0000000080)="4858445ca301d1e1ec21850532b90bc2030b41afbf0ac0c0ed63572149480157c581c4f76ffe61c872a72e094461b80754436393d5be4a75", 0x38}], 0x4) mount$fuseblk(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2020022, &(0x7f0000000280)=ANY=[@ANYBLOB=',a']) 2.467449178s ago: executing program 8 (id=292): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x839d0e9d73dc494b, 0x9, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="efdf24f01584bbbbbbbbbbbb08060321886306020001aaaaaaaaaa3946e6aaaaaaaaaaaa5c0c77233e18e00b"], &(0x7f0000000100)={0x0, 0x4, [0x7e9, 0x67b, 0x3a9, 0xdc2]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000300)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000080000", @ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x32d15422}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x300}, [@generic="3f6c9361bf67d6215b"]}, 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008009}, 0x0) 2.467200248s ago: executing program 4 (id=293): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) socket$netlink(0x10, 0x3, 0xf) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c00, 0x3) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 2.454312609s ago: executing program 4 (id=294): openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x5f}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f00000001c0)={0x100003, 0x0, {[0x7, 0x7fffffffffffffff, 0xf, 0x0, 0x779, 0x3, 0x400000000, 0x5]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f00000001c0)={0x100003, 0x0, {[0x7, 0x7fffffffffffffff, 0xf, 0x0, 0x779, 0x3, 0x400000000, 0x5]}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000280)={&(0x7f0000000240)=""/25, 0x19, 0x9, 0xc}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x428, 0x3f4, 0x800, 0x70bd25, 0x25dfdbfe, {0x3, 0x2, 0x27, [0x1, 0xae, 0x61d1, 0x2cfca53, 0x1000, 0x4, 0xbe2, 0x0, 0x5ed, 0x9, 0x1, 0x2, 0x80, 0x4, 0x0, 0x9, 0x7, 0x8a52, 0x4, 0xfffff000, 0x0, 0x8, 0x1, 0x7fe4, 0x6, 0x4, 0x10, 0xe, 0x6b, 0x8, 0x3b, 0x81, 0x8, 0x2, 0xffffffff, 0x7f8b1198, 0x5, 0xe, 0x0, 0x6, 0x2, 0x9, 0x1000, 0x9, 0x3, 0xfffeffff, 0x9, 0x0, 0x101, 0xfffffe01, 0x10, 0x4, 0x4, 0x2, 0xfe000000, 0x3, 0x58, 0x8, 0x401, 0x0, 0x1, 0x1, 0x36, 0x2], [0x7206, 0x80000001, 0xdf, 0x3, 0xfffffff8, 0x1, 0x9, 0xa701, 0x0, 0x3d1, 0x1, 0x5, 0x8, 0xfff, 0x0, 0x400, 0x2, 0xf6, 0x0, 0x781, 0x9, 0x5, 0x9, 0x3, 0x7, 0x200, 0x3ff, 0xffff, 0xc, 0x9, 0x9, 0x8, 0x2, 0x2, 0x100, 0x0, 0x100, 0x3, 0xd, 0x64, 0x4, 0x8, 0x3, 0x9, 0x4, 0x5, 0x7, 0x3, 0x5, 0x30000000, 0x82, 0x6, 0x2, 0x64f8, 0x9, 0x7, 0xffff, 0x5, 0x10, 0x1, 0x5, 0x6, 0x38], [0x5, 0x8, 0xb6, 0x24, 0x7, 0x7, 0xe944, 0x5, 0xc, 0x4, 0x7, 0x18, 0x1, 0x1, 0x7fff, 0x4f8a3521, 0x9, 0x4, 0x1, 0x1, 0x8972, 0x4, 0x1000, 0x7, 0x7, 0xfffffffb, 0xb3, 0x0, 0x6, 0x9, 0x4, 0x4, 0x1, 0x6, 0x5, 0xc0000, 0xaaf, 0x7, 0x14, 0x6, 0x6, 0x4, 0x52, 0x2, 0xe, 0x7fff, 0x5, 0x6, 0x0, 0xfffffff5, 0xfffffffe, 0xa84e, 0xaa5, 0x3, 0x54, 0x6, 0x2, 0xfffffff8, 0x1, 0x4, 0x1, 0x9, 0x9, 0xfff], [0xfffffffc, 0x0, 0xe5d, 0x6, 0x1d, 0x7, 0xf63, 0x8, 0xff, 0x9a63, 0xd, 0x40, 0xe, 0x1c5, 0x1, 0x0, 0xffff, 0x2, 0xc, 0xffffffff, 0x2, 0x5, 0xcd, 0xfffffff8, 0x1db4, 0x4, 0xffffffff, 0xeb51, 0x40, 0x7, 0x4, 0xff, 0x5, 0xff, 0x3, 0xffff, 0x3ff, 0x7, 0x1, 0x4d, 0x3, 0x2, 0x6, 0x200000, 0x400, 0x80000000, 0x3, 0x4, 0x4, 0x3, 0x2, 0x7, 0x7, 0x800, 0x9, 0x5, 0xffffffff, 0x7, 0x6, 0x779, 0x6, 0xffff8000, 0x3, 0x9], 0x8, ['nl80211\x00']}, ["", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000009c0)='bpf_lsm_secctx_to_secid\x00') r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x81000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0x7, &(0x7f00000007c0)=@raw=[@generic={0x9, 0x6, 0x0, 0x8, 0x3ff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @generic={0x1, 0x2, 0x9, 0x4276, 0xb7}, @call={0x85, 0x0, 0x0, 0x9b}], &(0x7f0000000800)='GPL\x00', 0x1, 0xd9, &(0x7f0000000840)=""/217, 0x40f00, 0x3, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x4, 0x0, 0x1ff, 0x7f}, 0x10, r4, r2, 0x3, &(0x7f0000000a40)=[r0, r5], &(0x7f0000000a80)=[{0x4, 0x1, 0x10, 0x6}, {0x3, 0x4, 0x7, 0x8}, {0x1, 0x3, 0x9, 0x4}], 0x10, 0x5}, 0x94) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_SETMODE(r7, 0x5602, &(0x7f0000000b80)={0x0, 0x64, 0x7f, 0x5, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000bc0)={0x1, r0, 0x1}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000c00)={0xb0000002}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000c00)={0xb0000002}) r9 = getpid() sched_setaffinity(r9, 0x8, &(0x7f0000000c40)) (async) sched_setaffinity(r9, 0x8, &(0x7f0000000c40)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x21, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xac}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x15}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @alu={0x4, 0x0, 0xc, 0x1, 0x1, 0xc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='GPL\x00', 0x2970e372, 0x60, &(0x7f0000000e40)=""/96, 0x41100, 0x2a, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000ec0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000f00)={0x0, 0x9, 0xe0ad, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f40)=[r2], &(0x7f0000000f80)=[{0x1, 0x5, 0x10, 0x8}, {0x4, 0x3, 0x7}, {0x3, 0x4, 0xc, 0x2}, {0x3, 0x5, 0xb, 0x8}], 0x10, 0x80000001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r2}, &(0x7f0000000c80), &(0x7f0000001080)=r10}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001140)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x0, 0x0, 0x2c0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f0000001100), {[{{@ip={@multicast2, @remote, 0xff000000, 0x1fe, 'caif0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x1, 0xb}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e21], [0x4e21, 0x4e21], [0x16b6, 0x9, 0xc, 0x3, 0x10000, 0x6, 0xd, 0x8, 0x3, 0x200, 0x5, 0xffff, 0xb, 0x100, 0x96, 0x5, 0x3, 0x9, 0x6, 0x401, 0x5, 0x9, 0x5, 0x28, 0x5, 0x10001, 0x8000, 0x507, 0x2, 0x0, 0x3, 0x4, 0x2, 0xee, 0x9, 0x401, 0x7, 0x5, 0x41, 0x5, 0x5, 0xfffffff7, 0x53, 0x995, 0xffffffff, 0xf, 0x5, 0x7, 0x3, 0x7, 0x8, 0x10000, 0x6, 0x1, 0x0, 0x4, 0x8001, 0x6099877, 0x7, 0x10000, 0x9, 0x9, 0x8, 0xfffffb9b], 0x0, [{0x14, 0x0, 0x5}, {0x4, 0xe0, 0x4}, {0x4, 0x6, 0x10}, {0x5, 0x10, 0x2}], 0x4, 0x1, 0x6}}, @common=@icmp={{0x28}, {0xc, "de2f"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'macsec0\x00', {0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@local, @private=0xa010101, 0xffffff, 0x0, 'ip6erspan0\x00', 'syz_tun\x00', {}, {0xff}, 0x16, 0x2, 0x42}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x5, 0xe0000000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000015c0)={0x9, 0xc, 0x101, 0x2495, 0x530}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000001600)=0x5) prlimit64(r9, 0xb, &(0x7f0000001640)={0x2, 0x1}, &(0x7f0000001680)) (async) prlimit64(r9, 0xb, &(0x7f0000001640)={0x2, 0x1}, &(0x7f0000001680)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x13, &(0x7f0000001700)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0xb, 0x6, 0x0, 0xffffffffffffffd0, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x6, 0x9, 0xa, 0xfffffffffffffff8, 0x8}], &(0x7f00000017c0)='GPL\x00', 0x2, 0x80, &(0x7f0000001800)=""/128, 0x41100, 0x9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001880)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000018c0)=[r0, r5], &(0x7f0000001900)=[{0x1, 0x2, 0x5, 0x3}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000016c0)='svcrdma_page_overrun_err\x00', r11, 0x0, 0xb}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000016c0)='svcrdma_page_overrun_err\x00', r11, 0x0, 0xb}, 0x18) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 2.391520926s ago: executing program 4 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) getpgid(r3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0xc44, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e0170100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000854, &(0x7f0000000e40)=ANY=[@ANYBLOB="696f010061727365743d63703737352e666d61736b3d30303030303030303030303030303030303030303234302c6572726f72733d72656d6f756e742d726f2c696f636829e65dffa1f311368d61727365743d63703933362c696f636861727365743d69736f383835392d31342c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c6769643d", @ANYBLOB="27b3a34084475edccedd021266068e3810960d0bece775b0b4211490b371df5c79f977a14a9bff46f94a0061fcddba8a0589d6ad268c9b3d40b8374c588972119ac111182375ed209bac6761529afc19126273abf55182c4561ffb4f11e42771b3efe6d9ef2531b5af9772b0a72104b5e48d94b0ad692dd2ab49b10ef9cba859800519a382362a01ed0adc10fdc16cacfbdb221898a17f6105b8cb9d504022b791f0d5e6bd25c967bde8faf8c6a4e6c96d85e2f3dc608230fbc45a", @ANYBLOB=',utf8,errors=continue,dmask=00000000000000000000116,uid=', @ANYRESHEX=r5, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYBLOB=',subj_type=sched_switch\x00,fown%r=', @ANYRESDEC=0x0, @ANYRES32=r2], 0x1, 0x1531, &(0x7f00000037c0)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZMcSUgMuSUNSUguQ3IZQnKZmDTu9/slIUmaJAnJLVn/z8T8nU6d/znnd/odv/9vnu/nsz+z1rv2s/az53nf/e6933fmu67DajWpXb0REcG/BS/9SASAWAAYBADXAUAAAOXjysdljueUmPjvbYT9uR5JudoZsKuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzLTMKXs9L9l34/n92xu///4tklB731brSN3YDiPlnQ7j+///DfyOW6/+/VvDPrMT1z964/tlV7NVOgP0PwK//7CDH3x3h+mdvXH/GsrO/vhccC1f/fvR/eoFI9v4M5Go//xhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/RUKALLaVzsvxhhjjDHGGGOM/Xl8jqudAWOMMcYYY4wxxv77IQiQoCCAGMgBsZATcoEAiMkavx7i4AbICzdCPsgPBaAgxEMhKAwaDFggCKEIFIUo3ATF4GYoDiWgJJQCB6WhDNwCZeFWKAe3QXm4HSrAHVARKkFlqAJ3QlW4C6rB3VAd7oEaUBNqQW24F+rAfVAX7od68ADUhwehATwEDeFhaASPQGN4FJrAY9AUHodm0BxaQEto9V+Kfwl6wsvQC3pDIvSBvvAK9IP+MAAGwiB4FQbDazAEXockGArD4A0YDm/CCHgLRsIoGA1vwxh4B8bCOBgPEyAZJsIkeBcmw3swBabCNJgOKTADZsL7MAtmwxz4AObChzAP5sMCWAip8BEsgsWQBh/DEvgE0mEpLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg+2wA3bCLvgUdsNnsAf2wj74HPbDF/9i/Jm/ie+GgIACBSpUGIMxGIuxmAtzYW7MjXkwD0YwgnEYh3kxL+bDfFgAC2A8xmNhLIwGDRISFsEiGMUoFsNiWByLY0ksiQ4dlsEyWBZvxXJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIX34r3YB+tiXayH9bA+1s+6PYWNsBE2xsbYBJtgU2yKzbAZtsAW2ApbYWtsjW2wDbbDdtge22MH7IAJmIAdsSN2wk7YGTtjF+yCXbErdsPu2D3jpRyAL+PL2BtriD7YF/tiP0zKMQAH4kB8FQfja/gavo5JOBSH4Rv4Br6JI/A0jsRROBpHY1XxDo7FcUhiAiZjMk7CSTgZJ+MUnIpTcTqm4AyciTNxFs7G2fgBzsUP8UOcj/NxIaZiKi7CxZiGabgEz2A6LsVluBxX4EpcgatxDa7Gdbge1+FG3IibcTNuxa24HbfjTtyJn6ICwM9wL+7FJNyP+/EAHsCDeBAP4SHMwAw8jIfxCB7Bo3gUj+ExPI4n8CSewFN4Ck/jGTyLZ/E8nscL+EL8N40/LbE2CUQmJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKvyCvyiXyigCgg4kW8KCwKCyOMIBFmHilEVERFMVFMFBfFRUlRUjjhRBlRRpQVZUU5UU6UF7eLCuIOUVFUEm1dFVFFVBXtXDVxt6guqosaoqaoJWqL2qKOqCPqirqinqgn6ov6ooF4SDQUfXAAPiIyK9NEDMWmYhg2E82FvHyEai1GYBvRVrQTT4lROBI7iNYuQTwrOoqx2En8RYzD50UXMQG7ihdFN9Fd9BAviZ6ijesleosp2Ef0FdOxn+gvBoiBYhbWFB/g3Jy1xOsiSQwVw8QbYiG+KUaIt8RIMUqMFm+LMeIdMVaME+PFBJEsJopJ4l0xWbwnpoipYpqYLlLEDDFTvC9midlijvhAzBUfinlivlggFopU8ZFYJBaLNPGxWCI+EeliqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn2CU+FbvFZ2KP2Cv2ic/FfvGFOCC+FAfFV+KQ+FpkiG/EYfGtOCK+E0fF9+KY+EEcFyfESfGjOCV+EqfFGXFWnBPnxc/igvhFXBRegEQppJRKBjJG5pCxMqfMJa+RuWWQdfyXcfIGmVfeKPPJ/LKALCjjZSFZWGpppJUkQ1lEFpVReZMsJm+WxWUJWVKWkk6WlmXkLbKsvFWWk7fJ8vJ2WUHeISvKSrKyrCLvlFXlXRIil7ZRQ9aUtWRtea9MhPtkXXm/rCcfkPXlg7KBfEg2lA/LRvIR2Vg+KpvIx2RT+bhsJpvLFrKlbCWfkK3lk7KNbCvbyadke/m07CCfkQnyWdlR+stPkedlF/mC7CpflN1kd9lD/iIvSi97yd4S+oDsK1+R/WR/OUAOlIPkq3KwfE0Oka/LJDlUDpNvyOHyTTlCviVHylFytHxbjpHvyLFynBwvJ8hkOVFOku/KyfI9OUVOldPkdJkiZ8gBl2eaI+U/jH/3D+KH/Lr1zXKL3Cq3ye1yh9wpd8lP5W65W+6Re+Q+uU/ul/vlAXlAHpQH5SF5SGbIDHlYHpZH5BF5VB6Vx+QxeVyekOfkj/KU/EmelmfkGXlOnpfn5YXLvwNQqISSSqlAxagcKlblVLnUNSq3ulblUdepiLpexakbVF51o8qn8qsCqqCKV4VUYaWVUVaRClURVVRF1U14+QmjSqpSyqnSqoy65V+JV8XUzaq4KvGb+Kz8Ev9Ofq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdUrqp/qrwaogWqQelVk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXC56NLgpKBbcHBQPSgQlg1KBC0oHZYJbgrLBrUG54LagfHB7UCG4I6gYVAoqB1WCO4OqwV1BteDuoHpwT1AjqBnUCmoH9wZ1gvuCusH9Qb3ggaB+8GDQIHgoaBg8HDQKHgkaB48GTYLHgqbB40GzoHnQImgZtPpT5/f+dP4nXS/dWyfqPrqvfkX30/31AD1QD9Kv6sH6NT1Ev66T9FA9TL+hh+s39Qj9lh6pR+nR+m09Rr+jx+pxeryeoJP1RD1Jv6sn6/f0FD1VT9PTdYqeoWfq9/UsPVvP0R/oufpDPU/P1wv0Qp2qP9KL9GKdpj/WS/QnOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/Snerf+TO/Re/U+/bner7/QB/SX+qD+Sh/SX+sM/Y0+rL/VR/R3+qj+Xh/TP+jj+oQ+qX/Up/RP+rQ+o8/qc/q8/llf0L/oi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3GnuNHeZu8zd5m5zj7nH1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxjxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/svvl97E2pw2l73G5rbX2jz2Ovu3/QK2oI23hWxhq20+m/83fWOtLW5L2JK2lHW2tC1jb/ldv6KtZCvbKvZOW9XeZav9rl/H3mfr2vttPfuArW3v/U2/vn3QNrCP2YaIALa5bWxb2ib2MdvUPm6b2ea2hW1p29unbQf7jE2wz9qO9rnf9RfZxXaNXWvX2fV2j91rz9pz9oj9zp63P9tetrcdZF+1g+1rdoh93SbZob/rj7Zv2zH2HTvWjrPj7YTf9afZ6TbFzrAz7ft2lp39u36q/cjOtWl2np1vF9iFv/Yzc0qzH9sl9hObbgNYZpfbFXalXWVX/99cl9uNdpPdbHfbz+w2u93usDvtrqwTYbvX7rOf2/32C3vYfmsP2q/sIXvUZthvfu1n7t9R+709Zn+wx+0Je9L+aE/Zn1RWdOa+/2h/sRett0BIQJIUBRRDOSiWclIuuoZy07WUh66jCF1PcXQD5aUbKR/lpwJUkOKpEBUmTYYsEYVUhIpSlG6irPRKUilyVJrK0C1Ulm6lcnQblafbqQLdQRWpElWmKnQnVaW7qBrdTdXpHqpBNakW1aZ7qQ7dR3XpfqpHD1B9epAa0EPUkB6mRvQINaZHqQk9Rk3pcWpGzakFtaRW9AS1piepDbWldvQUtaenqQM9Qwn0LHWk56gT/YU60/PUhV6grvQidaPu1INeop70MvWi3pRIfagvvUL9qD8NoIE0iF6lwfQaDaHXKYmG0jB6g4bTmzSC3qKRNIpG09s0ht6hsTSOxtMESqaJNInepcn0Hk2hqTSNplMKzaCZ9D7Notk0hz6gufQhzaP5tIAWUip9RItoMaXRx7SEPqF0WkrLaDmtoJW0ilbTGlpL62g9baCNtIk20xbaSttoO+2gnbSLPqXd9Bntob20jz6n/fQFHaAv6SB9RYfoa8qgb+gwfUtH6Ds6St/73vQDHacTdJJ+pFP0E52mM3SWztF5+pku0C90kTxBiKEIZajCIIwJc4SxYc4wV3hNmDu8NswTXhdGwuvDuPCGMG94Y5gvzB8WCAuG8WGhsHCoQxPakMIwLBIWDaPhTWGx8OaweFgiLBmWCl1YOiwT3hKWDW8Ny4W3heXD28MK4R1hxbBS+NgDVcI7w6rhXWG18O6wenhPWCOsGdYKa4f3hnXC+8K64f1hvfCBsFz4YNggfChsGD4cNgofCRuHj4ZNwsfCpuHjYbOwedgibBm2Cp8IW4dPhm3CtmG78Jqwffh02CF8JkwInw07hs/9Ov7g4qzxp343nhj2CfuGr4SvhN7fLxdEF0ZTox9FF0UXR9OiH0eXRD+JpkeXRpdFl0dXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e9r50DHDrhpFMucDEuh4t1OV0ud43L7a51edx1LuKud3HuBpfX3ejyufyugCvo4l0hV9hpZ5x15EJXxBV1UXeTK+ZudsVdCVfSlXLOlXZlXEvXyrVyrd2Tro1r69q5p9xT7mn3tHvGPeOedR3dc66T+4vr7J53XdwL7gX3ouvmurse7iXX003Mc+k1mej6ur6un+vnBrgBbpAb5Aa7wW6IG+KSXJIb5oa54W64G+FGuJFupBvtRrsxbowb68a68W68S3bJbpKb5Ca7yW6Km+KmuWkuxaW4mW6mm+VmuaqzL21lnpvnFrgFLtWlukUu85wxzS1xS1y6S3fL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcLvcLrfb7XZ7/HWXJnX73QF3wB10B90h97XLcN+4w+5bd8R95466790x94M77k64k+5Hd8r95E67M+6sO+fOu5/dBfeLu+i8S45MjEyKvBuZHHkvMiUyNTItMj2SEpkRmRl5PzIrMjsyJ/JBZG7kw8i8yPzIgsjCSGrko8iiyOJIWuTjyJLIJ5H0yNLIssjyyIrIyoj3hbaFvogv6qP+Jl/M3+yL+xK+pC/lnS/ty/hbfFl/qy/nb/Pl/e2+gr/DV/SVfGX/uG/mm/sWvqVv5Z/wrf2Tvo1v69v5p3x7/7Tv4J/xCf5Z39E/5zv5v/jO/nnfxb/gu/oXfTff3ffwL/me/mXfy/f2ib6P7+tf8f18fz/AD/SD/Kt+sH/ND/Gv+yQ/1A/zb/jh/k0/wr/lR/pRfnTM235M1iUyTPDJfqKf5N/1k/17foqf6qf56T7Fz/Az/ft+lp/t5/gP/Fz/oZ/n5/sFfqFP9R/5RX6xT/Mf+yX+E5/ul2bdNPar/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w+/0u/ynfrf/zO/xe/0+/7nf77/wB/yX/qD/yh/yX/sM/40/7L/1R/x3/qj/3h/zP/jj/oQ/6X/0p/xP/rQ/48/6c/68/9lf8L/4i/w3a4wxxhhj/5SJV5rityOXbuf3+YOYzBVzXW73BYBrtxfM+OvxzDPKDfkutfuL+PYRAHi2d9dHspYaNRITEy+vmy4hKDofIOuToEy/fvXgcn8ptIOnIQHaQtk/zL+/6H6e/sH80duv5Jsp9q/yvzL/lwCY+AfzP/HU6EUVwrNx/4/55wMUL3olJidc6S+Fdr/eX2kL5f5O/vlb/4P8c36VDNDmr2Jyw5X+lfzLwJPwHCT8Zk3GGGOMMcYYY+yS/qJy56zrz6xvfP7R9Xm8uhKTA670/9H1OWOMMcYYY4wxxq6+57v3eOaJhIS2nf/1RrX/UtQ/3WgK/10zc+MPG94DZD2iAODfnBAgsyH/k3ux9T+yraTLL52/HVpxzgfwP6OUf0bjKh+YGGOMMcYYY3+6Kyf9v31cXa2EGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOg/8e/ErvY+MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1fb/wkAAP//uq4AJQ==") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@oldalloc}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f00000009c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x20}}], 0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@report={0x54, 0x20, 0x400, 0x70bd25, 0x25dfdbff, {0xff, {@in6=@private0, @in=@multicast2, 0x4e21, 0xe, 0x4e23, 0x1ff, 0xa, 0x20, 0x80, 0x3b, 0x0, r10}}, [@proto={0x5, 0x19, 0x3c}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000814}, 0x48080) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$fuse(0x0, &(0x7f0000000240)='./file2\x00', &(0x7f00000002c0), 0x180420, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}], [{@subj_user={'subj_user', 0x3d, 'cpuacct.usage_percpu\x00'}}]}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106a05150000000000000109022400010000c00009"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2.021216534s ago: executing program 7 (id=296): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940), &(0x7f0000001680), 0x0, 0x3e, &(0x7f00000019c0), 0x0, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x93, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="182f30da68b414a79e4ec396b4cec218c7c4fa275055309e794e5d84e17d4184b50a40522e229947a324ebbda08604fa9ee2a135e72f84b07f9ede53240ebf7aea0e560fbdcbbaa0bc3b0d5a9e15bbb9c4e09d1f0f1a01c20680880321d5220dad1106329a13258ca321ee40466a4cb3e01eb9956d0b6c6c7360d3c4e34176d55c327152cc67285eabfbd910a81cc86f687c4a260a0a7dd0d117ac1ac511b3ca101dd565b82125a92329b4f8436ce61236b9c9c00050accffab93a38c055382e1e0945f962f66ba6abcc336cc7c13651d5ca82db62a3f685207d13d3e7ff8d98c764a002fdfb8ba4c92e4e2c2c3e9d678f37", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0xfc, &(0x7f0000001d80)=""/252, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001e80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001ec0)={0x5, 0x6, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[r1], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x1e, 0x17, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000004000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008536f8ff100000001858000001000000000000000000f6ffb7a9020000000000cd16010008000000850000007e000000185a00000e0000000000000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000007187441e773c1af7a458801a180752d8a6658d6bebd668835b939c89a90b8cc3a65a0355c3abdb0b314aeeb4aa7b4e360daf079788cf9985"], &(0x7f0000000500)='GPL\x00', 0x72b, 0xb1, &(0x7f0000001880)=""/177, 0x41000, 0x27, '\x00', 0x0, @fallback=0x17, r2, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x2, 0x7, 0x4}, 0x10, r3, r4, 0x1, &(0x7f0000002000)=[r1, r1], &(0x7f0000002040)=[{0x0, 0x2, 0x6, 0x4}], 0x10, 0xfffffffa}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0xac, 0xffffffff, 0x10, @private0, @remote, 0x7800, 0x7807, 0x1, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="1e395b245300000000080000010001000100004fc47cc81d", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0400000003000000010000000900"/28], 0x50) prlimit64(r0, 0x13, &(0x7f0000000040)={0x7, 0x400000002008e}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async, rerun: 32) r6 = getpid() (rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x2c, 0x0, &(0x7f0000000280)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) (async) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async, rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r8, @ANYRES32=r10, @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r10}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r13}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.849511451s ago: executing program 2 (id=297): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(0x3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040800000000000000d951cc00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e) bind$unix(r3, &(0x7f0000000240)=@abs={0x1}, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.75968101s ago: executing program 7 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xfffffffffffffc61, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x3, [0x945, 0xa5a, 0xd1, 0x734]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800157fff000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000a7829904007f000100000000120000004ee16fb6b0309b9611491d96b8e626f768b5d7102a52b5a7d0aa5c018c3a339dfcf21858cf9624a3f0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18798cc48a000000003000a3a71537168001ce00", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0025000000000800fe450004000000000000000000000080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000800) sendmsg$nl_xfrm(r8, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.436457513s ago: executing program 6 (id=299): prctl$PR_SET_DUMPABLE(0x4, 0x2) (async, rerun: 64) prctl$PR_SET_DUMPABLE(0x4, 0x0) (rerun: 64) prctl$PR_SET_DUMPABLE(0x4, 0x2) (async, rerun: 32) prctl$PR_SET_DUMPABLE(0x4, 0x2) (async, rerun: 32) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x3) (async) prctl$PR_SET_DUMPABLE(0x4, 0x6) prctl$PR_SET_DUMPABLE(0x4, 0x3) (async, rerun: 64) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async, rerun: 64) prctl$PR_SET_DUMPABLE(0x4, 0x2) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async, rerun: 32) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async, rerun: 32) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="a8656846fb760309410f20ac471787545a18fbbd5b9d6d7a144957b2347e92c0423aa27e21be6590f86f0b2cac56d3300e9f2131eb73f93994b4f3ed42451d6bfe349433dcf6fd29d7f6d453eb5e2813d07a04025d2e4bb5e7f647150ed440822022078d66d52d10f4a3aacb316e8889551d5a977de3228b97ae66011a4fec67f31d255615272cee2fb3c37b652023d1a62ff6e67a4142d8aed3456b8e53736a7534") (async, rerun: 64) prctl$PR_SET_DUMPABLE(0x4, 0x1) (rerun: 64) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async, rerun: 32) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async, rerun: 32) prctl$PR_SET_DUMPABLE(0x4, 0x2) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async, rerun: 64) prctl$PR_SET_DUMPABLE(0x4, 0x2) (rerun: 64) 1.435939383s ago: executing program 8 (id=300): r0 = userfaultfd(0x1) (async) close(0x3) r1 = socket(0x28, 0x801, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000160000000002000a571f009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r5, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000d0000000200000000000000", @ANYRES32, @ANYBLOB="fbff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00'], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r10, r9, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) unshare(0x20000400) (async) fcntl$setstatus(r0, 0x4, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x18b) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x2, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x2710, @host}, 0x10) io_setup(0x8, &(0x7f0000004200)) 1.387763548s ago: executing program 6 (id=301): open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) syz_usb_disconnect(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setrlimit(0xb, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x668, 0x2000c004) getrlimit(0x9, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) 1.311633536s ago: executing program 8 (id=302): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r1, 0x4, 0x6, 0x6, 0x2, 0x50, @mcast1, @mcast1, 0x8, 0x10, 0xd4, 0x3}}) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008"], 0x20}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3a521c259b538a2bf2a117dc2eeec0a080946430505d3c86", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 1.310324916s ago: executing program 8 (id=303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x51) unlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141a42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe3b, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev}, &(0x7f00000003c0)=0xc) bind$packet(r1, &(0x7f0000000400)={0x11, 0x1, r5, 0x1, 0x1, 0x6, @local}, 0x14) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa84458331c624269c0180c2000000d22045000024000049000011907800004e200010907822060000000000000000"], 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x1, 0x26b, &(0x7f0000000580)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 819.968447ms ago: executing program 8 (id=304): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x55, 0xce, 0x50, 0x20, 0x403, 0xbcda, 0x377a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x67, 0x80, 0x0, 0xdd, 0x9, 0xbb, 0x81}}, {{0x9, 0x4, 0xb7, 0x2a, 0x0, 0xcb, 0xcb, 0x94}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1ff}, {0x2, 0xfd, 0x4c, 0x7ffffcb9}, {0x5, 0x9, 0x80, 0x9}]}) 817.352096ms ago: executing program 7 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = dup(r3) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000006c0)={@void, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @gre={{0x2d, 0x4, 0x0, 0x4, 0xfe, 0x68, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@rr={0x7, 0x7, 0x6d, [@multicast1]}, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x8, [{@multicast1, 0xfffffff9}, {@private=0xa010102, 0x9}, {@multicast2, 0xffffffab}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffc00}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xcf}, {@empty, 0x3}]}, @end, @ssrr={0x89, 0x17, 0x22, [@empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @multicast2]}, @generic={0x44, 0x2}, @ssrr={0x89, 0x27, 0xcf, [@multicast2, @local, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @rr={0x7, 0xf, 0xcd, [@private=0xa010101, @local, @remote]}, @timestamp={0x44, 0x14, 0xa2, 0x0, 0x0, [0x0, 0x27fb, 0x0, 0xf2]}]}}, {{}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x7, 0x1, 0x7, 0x3, 0x1, 0x0, 0x0, 0x7}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0xc, 0x3, 0x1, 0x3, 0x6, 0x6}, 0x2, {0x2f0, 0x3, 0x0, 0x4, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x803, "7db8b4a04b33"}}}}}}}, 0x10c) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sched_setscheduler(r8, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty, 0x0, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r11, 0x4, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) r12 = dup(r1) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) 816.510527ms ago: executing program 2 (id=306): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) getsockopt$inet_opts(r0, 0x0, 0x12, 0x0, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(r4, 0x5417, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e", @ANYRESOCT], 0x0) 730.948636ms ago: executing program 7 (id=307): syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaba00000000000008004e0b004c0268b106d16fa0b202d342114b5295330000090690780a010102ac1414aa86230000000102078bc1273ce0060d40cd2f3b", @ANYRES32=0x41424344], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x6}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r4, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = gettid() ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000580)={0x2, 0x114000}) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000380)={0x6, 0x0, [{0xa, 0x1, 0x2, 0x3, 0x9, 0x9, 0xffffffff}, {0x23711b0fdb9a08, 0x8, 0x2, 0x8000, 0x6, 0x1, 0x4}, {0x80000019, 0x7, 0x6, 0x4, 0x3, 0xc}, {0x80000007, 0x99, 0x2, 0x824, 0x1, 0x7, 0x2}, {0x80000001, 0x9, 0x2, 0x800000, 0x4, 0x5, 0x6}, {0x4, 0x0, 0x2, 0x84, 0x36b8, 0x1, 0x401}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000a0a01040000000063000c400000000508000f40000000060900020073797a310000000050980100667764004fddd492080001400000dcfede2aa171fb63f5a788a26166438cd3808faeb3618933354edb55936471f243c7d13ef3fb5ca4aed15de24baecea89337f5b799c76d90e897d30e17295fda80e362abad1db18ac9d9d4c621de5064efcd28fec80cc27fa2f846aab38eae0afcba9b146ab7ed8872726d723a1f000000000000000000000000e1ff00"/208], 0x64}, 0x1, 0x0, 0x0, 0x24010085}, 0x10) 619.641087ms ago: executing program 7 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}]}}]}, 0x38}}, 0x24040084) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000400)}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030309021200010100000009040000000206"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="000a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}]}}]}, 0x38}}, 0x24040084) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000400)}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030309021200010100000009040000000206"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="000a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 0s ago: executing program 6 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0x2, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 12.035410][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 12.035419][ T24] audit: type=1400 audit(1768161496.009:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.041261][ T24] audit: type=1400 audit(1768161496.009:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.045056][ T24] audit: type=1400 audit(1768161496.009:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[14014]" dev="pipefs" ino=14014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.048363][ T24] audit: type=1400 audit(1768161496.009:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.051754][ T24] audit: type=1400 audit(1768161496.009:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 18.584996][ T24] audit: type=1400 audit(1768161502.559:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.585999][ T267] cgroup: Unknown subsys name 'net' [ 18.589367][ T24] audit: type=1400 audit(1768161502.559:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.593640][ T24] audit: type=1400 audit(1768161502.569:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.593790][ T267] cgroup: Unknown subsys name 'devices' [ 18.742283][ T267] cgroup: Unknown subsys name 'hugetlb' [ 18.747896][ T267] cgroup: Unknown subsys name 'rlimit' [ 18.914670][ T24] audit: type=1400 audit(1768161502.889:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.937891][ T24] audit: type=1400 audit(1768161502.889:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.943157][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.962972][ T24] audit: type=1400 audit(1768161502.889:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.994556][ T24] audit: type=1400 audit(1768161502.949:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.020056][ T24] audit: type=1400 audit(1768161502.949:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.054470][ T24] audit: type=1400 audit(1768161503.029:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.080257][ T24] audit: type=1400 audit(1768161503.029:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.106387][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.706823][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.714099][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.721646][ T275] device bridge_slave_0 entered promiscuous mode [ 20.728434][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.735595][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.742947][ T275] device bridge_slave_1 entered promiscuous mode [ 20.779446][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.786613][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.794103][ T276] device bridge_slave_0 entered promiscuous mode [ 20.801586][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.808622][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.815974][ T276] device bridge_slave_1 entered promiscuous mode [ 20.889936][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.896999][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.904251][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.911301][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.940614][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.947887][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.955333][ T278] device bridge_slave_0 entered promiscuous mode [ 20.964870][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.971949][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.979175][ T277] device bridge_slave_0 entered promiscuous mode [ 20.985896][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.993046][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.000394][ T278] device bridge_slave_1 entered promiscuous mode [ 21.027620][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.034694][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.042165][ T277] device bridge_slave_1 entered promiscuous mode [ 21.095278][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.102664][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.110503][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.118110][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.125673][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.132717][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.139925][ T279] device bridge_slave_0 entered promiscuous mode [ 21.167294][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.174571][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.181899][ T279] device bridge_slave_1 entered promiscuous mode [ 21.221881][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.229985][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.237031][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.244819][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.253078][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.260098][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.286424][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.295649][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.313605][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.321476][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.338153][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.346373][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.353418][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.361269][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.381666][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.389390][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.397710][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.404755][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.412435][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.420614][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.427669][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.435374][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.443592][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.450599][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.457965][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.466140][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.473171][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.480543][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.488700][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.495720][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.504813][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.512573][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.526691][ T275] device veth0_vlan entered promiscuous mode [ 21.533963][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.541946][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.549270][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.557050][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.566159][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.587130][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.594954][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.603128][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.611382][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.618397][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.626257][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.634704][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.641736][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.649088][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.657026][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.665079][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.681408][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.689843][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.697903][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.710286][ T275] device veth1_macvtap entered promiscuous mode [ 21.722545][ T277] device veth0_vlan entered promiscuous mode [ 21.732021][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.740402][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.748710][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.757087][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.765303][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.773288][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.781341][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.789174][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.797813][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.806141][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.814152][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.822227][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.830528][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.841346][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.848801][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.859837][ T278] device veth0_vlan entered promiscuous mode [ 21.866645][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.874748][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.892181][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.899607][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.899898][ T275] request_module fs-gadgetfs succeeded, but still no fs? [ 21.907531][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.922581][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.931128][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.939345][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.949672][ T277] device veth1_macvtap entered promiscuous mode [ 21.960486][ T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.965243][ T279] device veth0_vlan entered promiscuous mode [ 21.976904][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.985180][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.996160][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.008912][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.017317][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.025682][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.034466][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.042949][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.051033][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.059108][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.066820][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.074427][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.081981][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.089858][ T276] device veth0_vlan entered promiscuous mode [ 22.101408][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.109527][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.127465][ T276] device veth1_macvtap entered promiscuous mode [ 22.143876][ T279] device veth1_macvtap entered promiscuous mode [ 22.154455][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.162631][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.171396][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.179762][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.188327][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.197320][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.205633][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.213846][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.226729][ T278] device veth1_macvtap entered promiscuous mode [ 22.238291][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.246812][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.255828][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.264491][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.272992][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.298050][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.306428][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.314897][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.323905][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.332354][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.340576][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.349026][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.357454][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.365839][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.374102][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.382507][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 22.390477][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 22.399161][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 22.407367][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 22.415570][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 22.423627][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 22.431905][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 22.440414][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 22.551615][ T317] fuse: Bad value for 'fd' [ 22.677343][ T327] hub 6-0:1.0: USB hub found [ 22.682476][ T327] hub 6-0:1.0: 1 port detected [ 22.915935][ T329] binder: 321:329 ioctl c0306201 200000000300 returned -11 [ 23.494582][ T337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.548781][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 23.567467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 23.584614][ T340] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.602490][ T340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 23.610522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 23.631422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 23.639695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 23.659909][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 23.668459][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 23.673208][ T340] EXT4-fs (loop3): 1 truncate cleaned up [ 23.690916][ T340] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue [ 23.691214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 23.728900][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 23.728909][ T24] audit: type=1400 audit(1768161507.699:124): avc: denied { mount } for pid=339 comm="syz.3.11" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.963914][ T349] EXT4-fs (loop1): filesystem is read-only [ 23.995708][ T24] audit: type=1400 audit(1768161507.719:125): avc: denied { write } for pid=339 comm="syz.3.11" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.017156][ T24] audit: type=1400 audit(1768161507.719:126): avc: denied { add_name } for pid=339 comm="syz.3.11" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.037567][ T24] audit: type=1400 audit(1768161507.719:127): avc: denied { create } for pid=339 comm="syz.3.11" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.057409][ T24] audit: type=1400 audit(1768161507.719:128): avc: denied { mounton } for pid=339 comm="syz.3.11" path="/1/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.080089][ T24] audit: type=1400 audit(1768161507.719:129): avc: denied { write } for pid=339 comm="syz.3.11" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.101691][ T24] audit: type=1400 audit(1768161507.719:130): avc: denied { add_name } for pid=339 comm="syz.3.11" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.121915][ T24] audit: type=1400 audit(1768161507.719:131): avc: denied { setattr } for pid=339 comm="syz.3.11" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.143621][ T24] audit: type=1400 audit(1768161507.719:132): avc: denied { create } for pid=339 comm="syz.3.11" name="#1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.149434][ T316] F2FS-fs (loop0): fault_type options not supported [ 24.167160][ T24] audit: type=1400 audit(1768161507.719:133): avc: denied { remove_name } for pid=339 comm="syz.3.11" name="#1" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 24.179546][ T316] F2FS-fs (loop0): invalid crc value [ 24.198741][ T316] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.225287][ T332] F2FS-fs (loop2): invalid crc value [ 24.235365][ T332] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.235663][ T316] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 24.251078][ T316] F2FS-fs (loop0): Start checkpoint disabled! [ 24.263624][ T316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 24.275272][ T332] F2FS-fs (loop2): Start checkpoint disabled! [ 24.289628][ T332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 24.324929][ T296] attempt to access beyond end of device [ 24.324929][ T296] loop2: rw=2049, want=40976, limit=40427 [ 24.361640][ T276] EXT4-fs error (device loop3): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 24.594366][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.601713][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.609124][ T369] device bridge_slave_0 entered promiscuous mode [ 24.617946][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.625406][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.632980][ T369] device bridge_slave_1 entered promiscuous mode [ 24.691045][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.698127][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.705404][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.712435][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.734757][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.744121][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.751858][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.760185][ T383] sch_fq: defrate 4294967295 ignored. [ 24.770271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.778655][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.785711][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.801633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.809974][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.817049][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.825223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.841269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.855762][ T369] device veth0_vlan entered promiscuous mode [ 24.862129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.870508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.878548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.885976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.897773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.983584][ T369] device veth1_macvtap entered promiscuous mode [ 25.002511][ T386] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 25.032328][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.261267][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.721124][ T286] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 25.806349][ T407] Zero length message leads to an empty skb [ 25.873332][ T413] ====================================================== [ 25.873332][ T413] WARNING: the mand mount option is being deprecated and [ 25.873332][ T413] will be removed in v5.15! [ 25.873332][ T413] ====================================================== [ 25.961791][ T413] EXT4-fs (loop5): Ignoring removed bh option [ 25.978781][ T413] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro, [ 26.024505][ T413] overlayfs: missing 'lowerdir' [ 26.083299][ T286] usb 5-1: device descriptor read/64, error -71 [ 26.092314][ T192] device bridge_slave_1 left promiscuous mode [ 26.099102][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.108095][ T192] device bridge_slave_0 left promiscuous mode [ 26.114521][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.122955][ T192] device veth1_macvtap left promiscuous mode [ 26.131674][ T192] device veth0_vlan left promiscuous mode [ 26.211548][ T435] EXT4-fs (loop2): Ignoring removed orlov option [ 26.242287][ T435] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,data_err=ignore,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nombcache,lazytime,,errors=continue [ 26.470808][ T286] usb 5-1: device descriptor read/64, error -71 [ 26.483931][ T453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'. [ 26.707584][ T459] FAT-fs (loop1): bogus number of reserved sectors [ 26.714274][ T459] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 26.724083][ T459] FAT-fs (loop1): Can't find a valid FAT filesystem [ 26.740782][ T286] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 26.770710][ T15] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.851381][ T464] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 26.866019][ T464] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 26.874057][ T464] FAT-fs (loop0): Filesystem has been set read-only [ 26.880812][ T464] attempt to access beyond end of device [ 26.880812][ T464] loop0: rw=524288, want=2073, limit=128 [ 26.892137][ T464] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 26.900101][ T464] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 26.908236][ T464] attempt to access beyond end of device [ 26.908236][ T464] loop0: rw=0, want=2073, limit=128 [ 26.919946][ T464] attempt to access beyond end of device [ 26.919946][ T464] loop0: rw=0, want=2073, limit=128 [ 26.920038][ T469] overlayfs: failed to resolve './file1': -2 [ 26.931013][ T464] attempt to access beyond end of device [ 26.931013][ T464] loop0: rw=0, want=2073, limit=128 [ 26.947709][ T464] attempt to access beyond end of device [ 26.947709][ T464] loop0: rw=0, want=2073, limit=128 [ 26.958665][ T464] attempt to access beyond end of device [ 26.958665][ T464] loop0: rw=0, want=2073, limit=128 [ 26.969523][ T464] attempt to access beyond end of device [ 26.969523][ T464] loop0: rw=0, want=2073, limit=128 [ 26.980628][ T464] attempt to access beyond end of device [ 26.980628][ T464] loop0: rw=0, want=2073, limit=128 [ 26.991583][ T464] attempt to access beyond end of device [ 26.991583][ T464] loop0: rw=0, want=2073, limit=128 [ 27.010756][ T286] usb 5-1: device descriptor read/64, error -71 [ 27.020686][ T15] usb 3-1: Using ep0 maxpacket: 8 [ 27.160788][ T15] usb 3-1: config 162 has an invalid interface number: 48 but max is 1 [ 27.169153][ T15] usb 3-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 27.179467][ T15] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 27.188531][ T15] usb 3-1: config 162 has no interface number 0 [ 27.194855][ T15] usb 3-1: too many endpoints for config 162 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 27.206153][ T15] usb 3-1: config 162 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 27.219498][ T15] usb 3-1: config 162 interface 48 has no altsetting 0 [ 27.380895][ T15] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.e1 [ 27.389963][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.398449][ T15] usb 3-1: Product: syz [ 27.402756][ T15] usb 3-1: Manufacturer: syz [ 27.407379][ T15] usb 3-1: SerialNumber: syz [ 27.420699][ T286] usb 5-1: device descriptor read/64, error -71 [ 27.551471][ T286] usb usb5-port1: attempt power cycle [ 27.691985][ T15] usb 3-1: USB disconnect, device number 2 [ 27.712676][ T479] 9pnet: Insufficient options for proto=fd [ 27.779491][ T497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 27.970722][ T286] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 28.070770][ T53] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 28.140810][ T286] usb 5-1: device descriptor read/8, error -71 [ 28.357019][ T509] virtiofs: Unexpected value for 'dax' [ 28.570948][ T286] usb 5-1: device descriptor read/8, error -71 [ 28.749078][ T24] kauditd_printk_skb: 187 callbacks suppressed [ 28.749096][ T24] audit: type=1400 audit(1768161512.719:321): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.140994][ T24] audit: type=1400 audit(1768161512.909:322): avc: denied { create } for pid=512 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.219665][ T393] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.243304][ T24] audit: type=1400 audit(1768161512.909:323): avc: denied { create } for pid=512 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.268244][ T24] audit: type=1400 audit(1768161512.919:324): avc: denied { listen } for pid=512 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.333425][ T524] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 29.523348][ T24] audit: type=1400 audit(1768161512.919:325): avc: denied { bind } for pid=512 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.524328][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.542591][ T24] audit: type=1400 audit(1768161512.919:326): avc: denied { write } for pid=512 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.553460][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.591482][ T528] fuse: Bad value for 'user_id' [ 29.596438][ T24] audit: type=1400 audit(1768161513.139:327): avc: denied { read } for pid=517 comm="syz.4.53" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 29.621017][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.621184][ T53] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 29.636447][ T24] audit: type=1400 audit(1768161513.139:328): avc: denied { open } for pid=517 comm="syz.4.53" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 29.660792][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.675462][ T53] usb 1-1: config 0 descriptor?? [ 29.680545][ T24] audit: type=1400 audit(1768161513.219:329): avc: denied { watch watch_reads } for pid=519 comm="syz.5.54" path="/4" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.703056][ T24] audit: type=1400 audit(1768161513.569:330): avc: denied { mounton } for pid=527 comm="syz.2.55" path="/15/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 29.730703][ T393] usb 2-1: Using ep0 maxpacket: 16 [ 30.151673][ T53] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 30.159323][ T53] hid-rmi 0003:1532:011D.0001: hidraw0: USB HID v0.08 Device [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 30.170799][ T393] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 30.179914][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.188159][ T393] usb 2-1: Product: syz [ 30.192546][ T393] usb 2-1: Manufacturer: syz [ 30.197196][ T393] usb 2-1: SerialNumber: syz [ 30.361383][ T501] SELinux: policydb magic number 0x40046304 does not match expected magic number 0xf97cff8c [ 30.371744][ T501] SELinux: failed to load policy [ 30.390958][ T15] usb 1-1: USB disconnect, device number 2 [ 30.450741][ T393] r8152 2-1:1.0: Unknown version 0x0000 [ 30.477478][ T543] EXT4-fs (loop2): dax option not supported [ 30.580739][ T502] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 30.657720][ T15] usb 2-1: USB disconnect, device number 2 [ 30.731049][ T553] EXT4-fs (loop2): Invalid journal IO priority (must be 0-7) [ 30.739793][ T553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.62'. [ 30.820693][ T502] usb 6-1: Using ep0 maxpacket: 8 [ 31.210765][ T502] usb 6-1: unable to get BOS descriptor or descriptor too short [ 31.292766][ T502] usb 6-1: config 0 has no interfaces? [ 31.638236][ T286] Bluetooth: hci0: command 0x1003 tx timeout [ 31.647964][ T525] Bluetooth: hci0: sending frame failed (-49) [ 31.771267][ T576] F2FS-fs (loop2): fault_injection options not supported [ 31.780796][ T502] usb 6-1: string descriptor 0 read error: -22 [ 31.787089][ T576] F2FS-fs (loop2): invalid crc value [ 31.792510][ T502] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 31.802232][ T502] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 31.811126][ T502] usb 6-1: config 0 descriptor?? [ 31.818900][ T576] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.861324][ T576] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.890505][ T576] overlayfs: failed to resolve './file1': -2 [ 31.903117][ T278] handle_bad_sector: 55768 callbacks suppressed [ 31.903127][ T278] attempt to access beyond end of device [ 31.903127][ T278] loop2: rw=2049, want=45112, limit=40427 [ 32.055894][ T303] usb 6-1: USB disconnect, device number 2 [ 32.101494][ T584] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 32.108898][ T584] EXT4-fs (loop2): Ignoring removed oldalloc option [ 32.115560][ T584] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.135224][ T588] device bridge0 entered promiscuous mode [ 32.144183][ T584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 32.151928][ T588] bridge0: port 3(macsec1) entered blocking state [ 32.152444][ T584] System zones: 0-1, 3-36 [ 32.158977][ T588] bridge0: port 3(macsec1) entered disabled state [ 32.171047][ T584] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,oldalloc,,errors=continue [ 32.196371][ T588] device bridge0 left promiscuous mode [ 32.208618][ T589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=589 comm=syz.0.69 [ 32.339214][ T602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=602 comm=syz.1.73 [ 32.361725][ T604] 9pnet: Insufficient options for proto=fd [ 32.701700][ T616] Alternate GPT is invalid, using primary GPT. [ 32.711817][ T616] loop5: p1 p2 p3 [ 32.861326][ T609] F2FS-fs (loop1): Unrecognized mount option "diskard_unit=section" or missing value [ 32.902535][ T353] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.917142][ T353] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.928299][ T353] Buffer I/O error on dev loop5p1, logical block 8, async page read [ 32.936325][ T353] blk_update_request: I/O error, dev loop5, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.947386][ T353] Buffer I/O error on dev loop5p1, logical block 9, async page read [ 32.955405][ T353] blk_update_request: I/O error, dev loop5, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.966653][ T353] Buffer I/O error on dev loop5p1, logical block 10, async page read [ 32.974787][ T353] blk_update_request: I/O error, dev loop5, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.985911][ T353] Buffer I/O error on dev loop5p1, logical block 11, async page read [ 32.994053][ T353] blk_update_request: I/O error, dev loop5, sector 112 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.005073][ T353] Buffer I/O error on dev loop5p1, logical block 12, async page read [ 33.013176][ T353] blk_update_request: I/O error, dev loop5, sector 113 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.024208][ T353] Buffer I/O error on dev loop5p1, logical block 13, async page read [ 33.032304][ T353] blk_update_request: I/O error, dev loop5, sector 114 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.043332][ T353] Buffer I/O error on dev loop5p1, logical block 14, async page read [ 33.051482][ T353] blk_update_request: I/O error, dev loop5, sector 115 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.062581][ T353] Buffer I/O error on dev loop5p1, logical block 15, async page read [ 33.092330][ T390] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 33.099718][ T359] Buffer I/O error on dev loop5p3, logical block 8, async page read [ 33.111682][ T369] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 33.125340][ T390] Buffer I/O error on dev loop5p2, logical block 8, async page read [ 33.147733][ T624] sch_fq: defrate 53322 ignored. [ 33.176929][ T621] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 33.186139][ T621] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.283301][ T632] fuse: Unknown parameter 'euid>00000000000000000000' [ 33.284291][ T634] fuse: Bad value for 'user_id' [ 33.290700][ T630] syz.0.84 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.307645][ T630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.84'. [ 33.316471][ T630] netlink: 67 bytes leftover after parsing attributes in process `syz.0.84'. [ 33.350076][ T637] Unknown ioctl 37381 [ 33.461810][ T636] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 33.468214][ T636] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 33.477504][ T636] F2FS-fs (loop0): invalid crc value [ 33.484063][ T636] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 33.504481][ T636] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 33.511573][ T636] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.529944][ T279] attempt to access beyond end of device [ 33.529944][ T279] loop0: rw=2049, want=45112, limit=40427 [ 33.645755][ T644] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.86: inode #1: comm syz.0.86: iget: illegal inode # [ 33.658585][ T644] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.86: error while reading EA inode 1 err=-117 [ 33.671107][ T644] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.684218][ T644] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.86: inode #1: comm syz.0.86: iget: illegal inode # [ 33.702106][ T644] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.86: error while reading EA inode 1 err=-117 [ 33.714205][ T303] Bluetooth: hci0: command 0x1001 tx timeout [ 33.714434][ T644] EXT4-fs (loop0): 1 orphan inode deleted [ 33.720216][ T525] Bluetooth: hci0: sending frame failed (-49) [ 33.726045][ T644] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,barrier=0x0000000000000002,noblock_validity,noquota,,errors=continue [ 33.761243][ T648] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 33.781591][ T648] EXT4-fs (loop5): 1 truncate cleaned up [ 33.787302][ T648] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 33.824699][ T648] fscrypt (loop5, inode 18): Direct key flag not allowed with different contents and filenames modes [ 33.915832][ T657] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue [ 33.937984][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 33.938033][ T24] audit: type=1400 audit(1768161517.909:391): avc: denied { relabelfrom } for pid=656 comm="syz.5.90" name="" dev="pipefs" ino=15311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 33.999658][ T663] serio: Serial port ttyS3 [ 34.080742][ T502] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.100723][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.117262][ T24] audit: type=1400 audit(1768161518.089:392): avc: denied { unlink } for pid=278 comm="syz-executor" name="file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.143520][ T666] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.92' sets config #0 [ 34.144356][ T24] audit: type=1400 audit(1768161518.119:393): avc: denied { bind } for pid=665 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.152744][ T667] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.92' sets config #0 [ 34.172201][ T24] audit: type=1400 audit(1768161518.119:394): avc: denied { setopt } for pid=665 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.200471][ T24] audit: type=1400 audit(1768161518.119:395): avc: denied { append } for pid=665 comm="syz.2.92" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.223272][ T24] audit: type=1326 audit(1768161518.119:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16f216749 code=0x7ffc0000 [ 34.246491][ T24] audit: type=1326 audit(1768161518.119:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fa16f216749 code=0x7ffc0000 [ 34.269673][ T24] audit: type=1326 audit(1768161518.119:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16f216749 code=0x7ffc0000 [ 34.293024][ T24] audit: type=1326 audit(1768161518.119:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa16f216749 code=0x7ffc0000 [ 34.316267][ T24] audit: type=1326 audit(1768161518.119:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=665 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16f216749 code=0x7ffc0000 [ 34.340733][ T502] usb 2-1: Using ep0 maxpacket: 16 [ 34.375658][ T303] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 34.390772][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 34.662014][ T671] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 34.800849][ T303] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 34.809418][ T303] usb 6-1: config 0 has no interface number 0 [ 34.816585][ T303] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 35.020951][ T303] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 35.032685][ T303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.041517][ T303] usb 6-1: Product: syz [ 35.045745][ T303] usb 6-1: Manufacturer: syz [ 35.050400][ T303] usb 6-1: SerialNumber: syz [ 35.071108][ T303] usb 6-1: config 0 descriptor?? [ 35.110732][ T663] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 35.193433][ T303] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, b6:f0:59:97:e8:b2 [ 35.300803][ T15] usb 1-1: config 0 has no interfaces? [ 35.306779][ T15] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.315961][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.324642][ T15] usb 1-1: config 0 descriptor?? [ 35.340814][ T502] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 61, changing to 7 [ 35.351867][ T502] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 35.520758][ T502] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.529872][ T502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.538115][ T502] usb 2-1: Product: Ў [ 35.542341][ T502] usb 2-1: Manufacturer: ⎠팠雍豏ɶᔴꢢᤱ䐞ꙴ⪦듔䄹槍쿳瓸즚ᐿ쳶鹰밨醶镎㺥㱰댹쇯衖ㅅ왃젙鈤앓禕ꖣ绦Ȥ賭㚁⻻⯰뷋婙䕄嘝ퟟ竎谾ꩣ੬膬斃商술㠸輦ፍ醴侑鿗鰪뙑꺃㛗븱婆艷㸓릩煡䎖㕤 [ 35.568655][ T655] udc-core: couldn't find an available UDC or it's busy [ 35.575908][ T502] usb 2-1: SerialNumber: 㝂뗸逨곈♳煉壬像憹Ⳓ逭ఀꀧ⤹붠खଢ଼訆륖ᩏꪾܯ⧕㲧鵁랯餮詻ኙ뇎卒惄ﮋ兯 [ 35.590474][ T655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 35.791838][ T286] Bluetooth: hci0: command 0x1009 tx timeout [ 35.919276][ T15] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.290743][ T15] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 36.301705][ T15] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 36.480761][ T15] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.489830][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.497837][ T15] usb 3-1: Product: syz [ 36.502026][ T15] usb 3-1: Manufacturer: syz [ 36.506595][ T15] usb 3-1: SerialNumber: syz [ 37.008731][ T393] usb 6-1: USB disconnect, device number 3 [ 37.016876][ T699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 37.026674][ T393] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 37.093600][ T5] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.103324][ T5] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.121463][ T502] usb 2-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 37.130129][ T711] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 37.152937][ T502] usb 2-1: found format II with max.bitrate = 2, frame size=65528 [ 37.153841][ T718] netlink: 'syz.0.98': attribute type 29 has an invalid length. [ 37.172852][ T711] EXT4-fs (loop5): 1 orphan inode deleted [ 37.178613][ T711] EXT4-fs (loop5): 1 truncate cleaned up [ 37.184449][ T711] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota, [ 37.203814][ T502] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 37.222867][ T5] usb 1-1: USB disconnect, device number 3 [ 37.234793][ T502] usb 2-1: USB disconnect, device number 3 [ 37.374132][ T15] usb 3-1: USB disconnect, device number 3 [ 37.381839][ T735] udc-core: couldn't find an available UDC or it's busy [ 37.389014][ T735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.581585][ T725] udevd[725]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.598564][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 37.625377][ T745] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 37.662640][ T745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 37.797565][ T752] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue [ 37.813197][ T752] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.861586][ T748] EXT4-fs error (device loop1): ext4_acquire_dquot:6224: comm syz.1.100: Failed to acquire dquot type 0 [ 38.076708][ T769] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 38.090997][ T769] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 38.105823][ T769] F2FS-fs (loop5): invalid crc value [ 38.118510][ T769] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 38.131215][ T784] exfat: Bad value for 'uid' [ 38.141068][ T769] F2FS-fs (loop5): recover fsync data on readonly fs [ 38.148070][ T769] F2FS-fs (loop5): Try to recover 2th superblock, ret: -30 [ 38.155340][ T769] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 38.580716][ T683] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 38.690685][ T286] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.759171][ T794] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 38.777192][ T794] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.112: bg 0: block 104: invalid block bitmap [ 38.789742][ T794] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 38.798831][ T794] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.112: invalid indirect mapped block 1 (level 1) [ 38.813398][ T794] EXT4-fs (loop5): 1 truncate cleaned up [ 38.821921][ T794] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 38.887709][ T725] print_req_error: 98 callbacks suppressed [ 38.887723][ T725] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.905335][ T725] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.916777][ T725] buffer_io_error: 86 callbacks suppressed [ 38.916785][ T725] Buffer I/O error on dev loop5p1, logical block 8, async page read [ 38.930776][ T725] blk_update_request: I/O error, dev loop5, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.942022][ T683] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 38.950101][ T683] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 38.960200][ T725] Buffer I/O error on dev loop5p1, logical block 9, async page read [ 38.968348][ T725] blk_update_request: I/O error, dev loop5, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.979435][ T725] Buffer I/O error on dev loop5p1, logical block 10, async page read [ 38.979462][ T683] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.987756][ T286] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 38.994966][ T725] blk_update_request: I/O error, dev loop5, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.005248][ T800] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 39.021038][ T725] Buffer I/O error on dev loop5p1, logical block 11, async page read [ 39.029199][ T725] blk_update_request: I/O error, dev loop5, sector 112 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.035729][ T800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.040758][ T725] Buffer I/O error on dev loop5p1, logical block 12, async page read [ 39.050570][ T800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.056627][ T725] blk_update_request: I/O error, dev loop5, sector 113 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.073992][ T725] Buffer I/O error on dev loop5p1, logical block 13, async page read [ 39.082357][ T725] blk_update_request: I/O error, dev loop5, sector 114 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.087563][ T800] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.093672][ T725] Buffer I/O error on dev loop5p1, logical block 14, async page read [ 39.100427][ T800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.108942][ T725] blk_update_request: I/O error, dev loop5, sector 115 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.127692][ T725] Buffer I/O error on dev loop5p1, logical block 15, async page read [ 39.142407][ T619] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.155548][ T353] Buffer I/O error on dev loop5p3, logical block 8, async page read [ 39.163833][ T683] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 39.172954][ T502] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 39.182325][ T725] Buffer I/O error on dev loop5p1, logical block 8, async page read [ 39.184304][ T286] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 39.195725][ T683] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 39.198429][ T286] usb 1-1: can't read configurations, error -61 [ 39.210151][ T683] usb 2-1: Product: syz [ 39.216777][ T683] usb 2-1: Manufacturer: syz [ 39.221526][ T683] usb 2-1: SerialNumber: syz [ 39.226701][ T683] usb 2-1: config 0 descriptor?? [ 39.271246][ T683] hub 2-1:0.0: bad descriptor, ignoring hub [ 39.277257][ T683] hub: probe of 2-1:0.0 failed with error -5 [ 39.283633][ T683] usb 2-1: selecting invalid altsetting 0 [ 39.360732][ T286] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.477235][ T789] binfmt_misc: register: failed to install interpreter file ./file0 [ 39.560781][ T502] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 39.568902][ T502] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.579006][ T502] usb 6-1: config 0 has no interface number 0 [ 39.585117][ T502] usb 6-1: config 0 interface 34 has no altsetting 0 [ 39.591832][ T502] usb 6-1: New USB device found, idVendor=3db8, idProduct=01ed, bcdDevice= 0.00 [ 39.601162][ T502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.609656][ T502] usb 6-1: config 0 descriptor?? [ 39.614849][ T393] usb 2-1: USB disconnect, device number 4 [ 39.660785][ T286] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 39.673536][ T810] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.116: inode has both inline data and extents flags [ 39.686806][ T810] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.116: couldn't read orphan inode 15 (err -117) [ 39.699655][ T810] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 39.763323][ T24] kauditd_printk_skb: 83 callbacks suppressed [ 39.763332][ T24] audit: type=1326 audit(1768161523.739:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 39.792840][ T286] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 39.826330][ T24] audit: type=1326 audit(1768161523.739:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 39.849858][ T286] usb 1-1: can't read configurations, error -61 [ 39.860201][ T286] usb usb1-port1: attempt power cycle [ 39.862237][ T24] audit: type=1326 audit(1768161523.739:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 39.888775][ T24] audit: type=1326 audit(1768161523.739:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc01440af90 code=0x7ffc0000 [ 39.912006][ T24] audit: type=1326 audit(1768161523.739:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc01440df77 code=0x7ffc0000 [ 39.935458][ T24] audit: type=1326 audit(1768161523.739:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 39.958502][ T24] audit: type=1326 audit(1768161523.739:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc01440df77 code=0x7ffc0000 [ 39.981740][ T24] audit: type=1326 audit(1768161523.739:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc01440b3aa code=0x7ffc0000 [ 40.004680][ T24] audit: type=1326 audit(1768161523.739:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 40.027906][ T24] audit: type=1326 audit(1768161523.739:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 40.067855][ T820] udc-core: couldn't find an available UDC or it's busy [ 40.074979][ T820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.130749][ T502] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.310706][ T286] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.330706][ T683] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.440769][ T286] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 40.500759][ T502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.511718][ T502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.522049][ T502] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.535301][ T502] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.544378][ T502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.560428][ T502] usb 3-1: config 0 descriptor?? [ 40.570829][ T286] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 40.578639][ T286] usb 1-1: can't read configurations, error -61 [ 40.600806][ T683] usb 2-1: device descriptor read/64, error -71 [ 40.730709][ T286] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.763127][ T832] F2FS-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value [ 40.910729][ T286] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 40.922807][ T840] udc-core: couldn't find an available UDC or it's busy [ 40.929810][ T840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.990689][ T683] usb 2-1: device descriptor read/64, error -71 [ 41.032227][ T502] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 41.041503][ T502] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 41.050761][ T286] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 41.061476][ T286] usb 1-1: can't read configurations, error -61 [ 41.067887][ T286] usb usb1-port1: unable to enumerate USB device [ 41.087883][ T844] netlink: 104 bytes leftover after parsing attributes in process `syz.4.124'. [ 41.207337][ T847] tmpfs: Unknown parameter '::4FP}ľI]QQX#]6mόg >%NdUp?j [ 41.207337][ T847] :ȡr uFj)6΅6PM|kt-qr{YRSbי{ W@:Ы4nkdA?/AIJ[E0x0000000000000000' [ 41.260744][ T683] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.451086][ T851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 41.518316][ T851] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 41.540702][ T683] usb 2-1: device descriptor read/64, error -71 [ 41.940691][ T683] usb 2-1: device descriptor read/64, error -71 [ 41.953213][ T502] usb 6-1: USB disconnect, device number 4 [ 42.070764][ T683] usb usb2-port1: attempt power cycle [ 42.390692][ T502] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 42.480824][ T683] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.504143][ T866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 42.531570][ T393] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 42.650810][ T683] usb 2-1: device descriptor read/8, error -71 [ 42.670699][ T502] usb 6-1: device descriptor read/64, error -71 [ 42.904420][ T875] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 42.950858][ T683] usb 2-1: device descriptor read/8, error -71 [ 43.080762][ T502] usb 6-1: device descriptor read/64, error -71 [ 43.172652][ T882] erofs: (device loop1): erofs_read_inode: unsupported chunk format 0 of nid 36 [ 43.288669][ T885] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.296387][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.303948][ T885] device bridge_slave_0 entered promiscuous mode [ 43.313757][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.320860][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.328238][ T885] device bridge_slave_1 entered promiscuous mode [ 43.350810][ T502] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 43.365064][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.372101][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.379361][ T885] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.386393][ T885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.404102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.412147][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.419385][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.430522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.438674][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.445708][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.454746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.463003][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.470027][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.477721][ T890] sch_fq: defrate 6 ignored. [ 43.502683][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.521526][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.530130][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.539893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.548014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.556900][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.565381][ T885] device veth0_vlan entered promiscuous mode [ 43.571671][ T893] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.589144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.592524][ T893] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,block_validity,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 43.622781][ T502] usb 6-1: device descriptor read/64, error -71 [ 43.632403][ T885] device veth1_macvtap entered promiscuous mode [ 43.638210][ T893] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3342: comm syz.0.142: Allocating blocks 497-513 which overlap fs metadata [ 43.652863][ T893] EXT4-fs (loop0): pa ffff88811a7e47e0: logic 128, phys. 385, len 8 [ 43.660918][ T893] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 43.673617][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.692150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.723137][ T330] usb 3-1: USB disconnect, device number 4 [ 43.824127][ T922] xt_hashlimit: max too large, truncated to 1048576 [ 43.856537][ T192] device bridge_slave_1 left promiscuous mode [ 43.862955][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.873237][ T192] device bridge_slave_0 left promiscuous mode [ 43.885412][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.904550][ T919] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.913552][ T919] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.935780][ T192] device veth1_macvtap left promiscuous mode [ 43.941871][ T192] device veth0_vlan left promiscuous mode [ 44.186252][ T502] usb 6-1: device descriptor read/64, error -71 [ 44.320748][ T502] usb usb6-port1: attempt power cycle [ 44.730818][ T502] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 44.742470][ T942] SELinux: Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped). [ 44.821911][ T24] kauditd_printk_skb: 247 callbacks suppressed [ 44.821921][ T24] audit: type=1400 audit(1768161528.799:739): avc: denied { bind } for pid=940 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.860782][ T24] audit: type=1400 audit(1768161528.819:740): avc: denied { listen } for pid=940 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.904671][ T502] usb 6-1: device descriptor read/8, error -71 [ 45.018154][ T725] print_req_error: 53 callbacks suppressed [ 45.018167][ T725] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 45.037446][ T725] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.051246][ T619] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 45.063771][ T353] blk_update_request: I/O error, dev loop5, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 45.075858][ T353] blk_update_request: I/O error, dev loop5, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.087760][ T619] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.098817][ T725] buffer_io_error: 46 callbacks suppressed [ 45.098824][ T725] Buffer I/O error on dev loop5p1, logical block 8, async page read [ 45.104891][ T619] Buffer I/O error on dev loop5p2, logical block 8, async page read [ 45.122368][ T353] Buffer I/O error on dev loop5p3, logical block 8, async page read [ 45.130464][ T353] blk_update_request: I/O error, dev loop5, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.142361][ T502] usb 6-1: device descriptor read/8, error -71 [ 45.148656][ T353] Buffer I/O error on dev loop5p3, logical block 9, async page read [ 45.157030][ T619] blk_update_request: I/O error, dev loop5, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.168348][ T353] blk_update_request: I/O error, dev loop5, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 47.925057][ T24] audit: type=1400 audit(1768161531.899:741): avc: denied { rmdir } for pid=885 comm="syz-executor" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ipmi_device_t:s0" [ 47.960482][ T619] Buffer I/O error on dev loop5p2, logical block 9, async page read [ 47.969288][ T725] blk_update_request: I/O error, dev loop5, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.105125][ T353] Buffer I/O error on dev loop5p3, logical block 10, async page read [ 48.113636][ T619] Buffer I/O error on dev loop5p2, logical block 10, async page read [ 48.273020][ T619] Buffer I/O error on dev loop5p2, logical block 11, async page read [ 48.309700][ T725] Buffer I/O error on dev loop5p1, logical block 9, async page read [ 48.340564][ T619] Buffer I/O error on dev loop5p2, logical block 12, async page read [ 48.510206][ T982] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.159: bg 0: block 393: padding at end of block bitmap is not set [ 48.525730][ T982] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 48.536234][ T982] EXT4-fs (loop6): 2 truncates cleaned up [ 48.542004][ T982] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 49.849899][ T987] EXT4-fs (loop5): Ignoring removed orlov option [ 49.860865][ T24] audit: type=1400 audit(1768161533.839:742): avc: denied { mount } for pid=997 comm="syz.2.160" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 49.884860][ T998] process 'syz.2.160' launched '/dev/fd/4/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 49.885777][ T987] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 49.886614][ T24] audit: type=1400 audit(1768161533.859:743): avc: denied { create } for pid=997 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.035192][ T24] audit: type=1400 audit(1768161534.009:744): avc: denied { setattr } for pid=985 comm="syz.5.162" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.125441][ T725] print_req_error: 44 callbacks suppressed [ 50.125455][ T725] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.144702][ T619] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.156459][ T619] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.157643][ T353] blk_update_request: I/O error, dev loop5, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.167822][ T619] buffer_io_error: 38 callbacks suppressed [ 50.167830][ T619] Buffer I/O error on dev loop5p2, logical block 8, async page read [ 50.193641][ T619] blk_update_request: I/O error, dev loop5, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.194201][ T725] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.204977][ T619] Buffer I/O error on dev loop5p2, logical block 9, async page read [ 50.224316][ T353] blk_update_request: I/O error, dev loop5, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.242546][ T619] blk_update_request: I/O error, dev loop5, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.245494][ T725] Buffer I/O error on dev loop5p1, logical block 8, async page read [ 50.255496][ T353] Buffer I/O error on dev loop5p3, logical block 8, async page read [ 50.269822][ T619] Buffer I/O error on dev loop5p2, logical block 10, async page read [ 50.278123][ T619] blk_update_request: I/O error, dev loop5, sector 61 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.289973][ T353] blk_update_request: I/O error, dev loop5, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.301871][ T619] Buffer I/O error on dev loop5p2, logical block 11, async page read [ 50.310337][ T353] Buffer I/O error on dev loop5p3, logical block 9, async page read [ 50.327416][ T619] Buffer I/O error on dev loop5p2, logical block 12, async page read [ 50.335686][ T619] Buffer I/O error on dev loop5p2, logical block 13, async page read [ 50.338846][ T353] Buffer I/O error on dev loop5p3, logical block 10, async page read [ 50.354851][ T1019] syz.4.169 uses obsolete (PF_INET,SOCK_PACKET) [ 50.577912][ T24] audit: type=1400 audit(1768161534.489:745): avc: denied { execute } for pid=1013 comm="syz.5.167" name="file1" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.600265][ T24] audit: type=1400 audit(1768161534.489:746): avc: denied { execute_no_trans } for pid=1013 comm="syz.5.167" path="/23/file1" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.706594][ T1031] capability: warning: `syz.0.172' uses deprecated v2 capabilities in a way that may be insecure [ 50.922400][ T24] audit: type=1400 audit(1768161534.899:747): avc: denied { mounton } for pid=1030 comm="syz.0.172" path="/36/file2/file0" dev="loop0" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 52.273428][ T279] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 52.290881][ T279] FAT-fs (loop0): Filesystem has been set read-only [ 52.306011][ T1057] netlink: 60 bytes leftover after parsing attributes in process `syz.5.178'. [ 52.315498][ T1065] erofs: dax options not supported [ 52.363113][ T1057] EXT4-fs (loop5): Ignoring removed orlov option [ 52.373864][ T1057] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 52.425952][ T24] audit: type=1400 audit(1768161536.399:748): avc: denied { unmount } for pid=885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 52.483586][ T1072] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.523389][ T1072] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 52.533028][ T1072] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 52.548101][ T24] audit: type=1400 audit(1768161536.519:749): avc: denied { mounton } for pid=1071 comm="syz.2.185" path="/44/bus/file0/file0" dev="loop2" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.650703][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.657807][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.665043][ T24] audit: type=1400 audit(1768161536.549:750): avc: denied { write } for pid=1071 comm="syz.2.185" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.688712][ T1075] device bridge_slave_0 entered promiscuous mode [ 52.851312][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.864702][ T24] audit: type=1400 audit(1768161536.549:751): avc: denied { add_name } for pid=1071 comm="syz.2.185" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.916477][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.925067][ T1075] device bridge_slave_1 entered promiscuous mode [ 52.989573][ T1093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.189'. [ 53.050008][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.057091][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.064366][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.071394][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.102284][ T1099] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 53.153774][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.163606][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.172432][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.222384][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.231082][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.238136][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.246400][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.284099][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.291178][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.298744][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.311323][ T1109] IPv6: syztnl0: Disabled Multicast RS [ 53.322871][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.338667][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.347375][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.360437][ T1075] device veth0_vlan entered promiscuous mode [ 53.372067][ T1107] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 53.380404][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.381150][ T1107] EXT4-fs (loop6): orphan cleanup on readonly fs [ 53.388785][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.404763][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.411065][ T1107] EXT4-fs error (device loop6): ext4_free_blocks:5685: comm syz.6.192: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.412777][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.438471][ T1075] device veth1_macvtap entered promiscuous mode [ 53.444985][ T1107] EXT4-fs (loop6): 1 orphan inode deleted [ 53.451041][ T1107] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 53.451199][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.483352][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.494688][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.503161][ T9] device bridge_slave_1 left promiscuous mode [ 53.509557][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.517404][ T9] device bridge_slave_0 left promiscuous mode [ 53.524072][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.540063][ T9] device veth1_macvtap left promiscuous mode [ 53.546232][ T9] device veth0_vlan left promiscuous mode [ 53.878918][ T683] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.889601][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.898053][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.915499][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.926945][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.271413][ T683] usb 3-1: Using ep0 maxpacket: 16 [ 54.324415][ T1135] F2FS-fs (loop7): invalid crc value [ 54.330517][ T1135] F2FS-fs (loop7): Wrong journal entry on segno 255 [ 54.337167][ T1135] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117) [ 54.472544][ T683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.488190][ T683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.498289][ T683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.511368][ T683] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 54.520435][ T683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.530008][ T1136] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 54.569776][ T1136] EXT4-fs (loop6): Test dummy encryption mode enabled [ 54.587249][ T1136] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 54.625097][ T683] usb 3-1: config 0 descriptor?? [ 54.894802][ T1151] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 54.900719][ T5] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.910040][ T1151] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 54.918651][ T1151] EXT4-fs error (device loop7): ext4_clear_blocks:880: inode #13: comm syz.7.203: attempt to clear invalid blocks 2 len 1 [ 54.931726][ T1151] EXT4-fs error (device loop7): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 54.945992][ T330] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 54.946101][ T1151] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz.7.203: invalid indirect mapped block 1819239214 (level 0) [ 54.967657][ T1151] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz.7.203: invalid indirect mapped block 1819239214 (level 1) [ 54.982174][ T1151] EXT4-fs (loop7): 1 truncate cleaned up [ 54.987798][ T1151] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue [ 55.277382][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.285021][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.292499][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.297011][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 55.297023][ T24] audit: type=1400 audit(1768161539.119:755): avc: denied { quotaon } for pid=1150 comm="syz.7.203" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.299903][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.335461][ T5] usb 7-1: Using ep0 maxpacket: 16 [ 55.335644][ T24] audit: type=1326 audit(1768161539.309:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.341260][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.371776][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.379422][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.384408][ T24] audit: type=1326 audit(1768161539.339:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.387491][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.412595][ T1112] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 55.420892][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.424930][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.432425][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.443143][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.451130][ T1112] EXT4-fs (loop2): Test dummy encryption mode enabled [ 55.460403][ T330] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 55.467365][ T5] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.476489][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.488611][ T683] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0 [ 55.498437][ T330] usb 6-1: config 0 descriptor?? [ 55.503799][ T1112] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 55.507689][ T24] audit: type=1326 audit(1768161539.349:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.518493][ T5] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.541107][ T24] audit: type=1326 audit(1768161539.349:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.574288][ T24] audit: type=1326 audit(1768161539.349:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.574744][ T683] hid-generic 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 55.598393][ T24] audit: type=1326 audit(1768161539.349:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.609437][ T5] usb 7-1: config 0 interface 0 has no altsetting 0 [ 55.639513][ T24] audit: type=1326 audit(1768161539.349:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.663932][ T24] audit: type=1326 audit(1768161539.349:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.693697][ T24] audit: type=1326 audit(1768161539.349:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1157 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01440c749 code=0x7ffc0000 [ 55.717725][ T5] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 55.727969][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.736812][ T5] usb 7-1: config 0 descriptor?? [ 55.809596][ T1149] udc-core: couldn't find an available UDC or it's busy [ 55.816711][ T1149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.824295][ T1149] udc-core: couldn't find an available UDC or it's busy [ 55.831253][ T1149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.838869][ T1149] udc-core: couldn't find an available UDC or it's busy [ 55.845820][ T1149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.853363][ T1149] udc-core: couldn't find an available UDC or it's busy [ 55.860275][ T1149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.867844][ T1149] udc-core: couldn't find an available UDC or it's busy [ 55.874961][ T1149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.922280][ T619] print_req_error: 286 callbacks suppressed [ 55.922292][ T619] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 55.922331][ T719] blk_update_request: I/O error, dev loop5, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.930961][ T619] blk_update_request: I/O error, dev loop5, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.941249][ T301] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 55.973439][ T1112] fuse: Bad value for 'fd' [ 55.978257][ T719] buffer_io_error: 254 callbacks suppressed [ 55.978267][ T719] Buffer I/O error on dev loop5p3, logical block 8, async page read [ 56.002473][ T719] blk_update_request: I/O error, dev loop5, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.003078][ T619] Buffer I/O error on dev loop5p1, logical block 8, async page read [ 56.021776][ T301] blk_update_request: I/O error, dev loop5, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.022406][ T330] usbhid 6-1:0.0: can't add hid device: -71 [ 56.038725][ T719] Buffer I/O error on dev loop5p3, logical block 9, async page read [ 56.046750][ T301] Buffer I/O error on dev loop5p2, logical block 8, async page read [ 56.049905][ T1112] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.060755][ T719] blk_update_request: I/O error, dev loop5, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.062984][ T330] usbhid: probe of 6-1:0.0 failed with error -71 [ 56.081494][ T1112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.083777][ T301] blk_update_request: I/O error, dev loop5, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.088700][ T1112] IPv6: NLM_F_CREATE should be set when creating new route [ 56.112038][ T330] usb 6-1: USB disconnect, device number 9 [ 56.118041][ T619] blk_update_request: I/O error, dev loop5, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.120136][ T719] Buffer I/O error on dev loop5p3, logical block 10, async page read [ 56.131366][ T619] Buffer I/O error on dev loop5p1, logical block 9, async page read [ 56.145552][ T301] Buffer I/O error on dev loop5p2, logical block 9, async page read [ 56.148730][ T619] blk_update_request: I/O error, dev loop5, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.163816][ T301] Buffer I/O error on dev loop5p2, logical block 10, async page read [ 56.170028][ T303] usb 3-1: USB disconnect, device number 5 [ 56.175672][ T1167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.206'. [ 56.182709][ T619] Buffer I/O error on dev loop5p1, logical block 10, async page read [ 56.187672][ T719] Buffer I/O error on dev loop5p3, logical block 11, async page read [ 56.220984][ T5] hid (null): unknown global tag 0xd [ 56.226313][ T5] hid (null): invalid report_size 241615277 [ 56.247162][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.209'. [ 56.250626][ T5] hid (null): unknown global tag 0xe [ 56.264697][ T5] hid (null): unknown global tag 0x11 [ 56.278897][ T5] hid (null): global environment stack underflow [ 56.295540][ T5] hid (null): global environment stack underflow [ 56.305607][ T5] hid (null): global environment stack underflow [ 56.319117][ T5] hid (null): usage index exceeded [ 56.340726][ T5] hid (null): unknown global tag 0xc [ 56.346094][ T5] hid (null): unknown global tag 0xd [ 56.359489][ T5] hid (null): global environment stack underflow [ 56.366136][ T5] hid (null): global environment stack underflow [ 56.373890][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.381523][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.389071][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.396625][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.405748][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.418723][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.426542][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.434180][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.442026][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.449682][ T5] hid-generic 0003:060B:500A.0005: unknown main item tag 0x0 [ 56.459115][ T5] hid-generic 0003:060B:500A.0005: unknown global tag 0xd [ 56.475322][ T5] hid-generic 0003:060B:500A.0005: item 0 2 1 13 parsing failed [ 56.483321][ T5] hid-generic: probe of 0003:060B:500A.0005 failed with error -22 [ 56.501680][ T1164] F2FS-fs (loop7): Unrecognized mount option "01777777777777777777777017777777777777777777770xffffffffffffffff" or missing value [ 56.760845][ T303] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 57.330138][ T303] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.500994][ T5] usb 7-1: USB disconnect, device number 2 [ 57.515935][ T303] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 57.525087][ T303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.533413][ T303] usb 6-1: Product: syz [ 57.537809][ T303] usb 6-1: Manufacturer: syz [ 57.542437][ T303] usb 6-1: SerialNumber: syz [ 57.554648][ T303] usb 6-1: config 0 descriptor?? [ 57.646277][ T303] usb-storage 6-1:0.0: USB Mass Storage device detected [ 57.654283][ T303] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 57.770591][ T1243] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 57.788646][ T1248] overlayfs: failed to clone upperpath [ 57.789929][ T1243] F2FS-fs (loop6): invalid crc value [ 57.800317][ T1243] F2FS-fs (loop6): invalid crc value [ 57.806988][ T1243] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 57.816253][ T303] usb 6-1: USB disconnect, device number 10 [ 57.917113][ T1257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 57.930261][ T1257] HTB: quantum of class 80030004 is small. Consider r2q change. [ 58.000772][ T1257] 9pnet: p9_errstr2errno: server reported unknown error @cF S00000000000000000003 [ 58.032145][ T1259] erofs: Unknown parameter 'D-ڶbqi)XJEm߱W$-W7.nWWL 7ȝOqsx(n^󭋞' [ 58.090332][ T1263] overlayfs: missing 'lowerdir' [ 58.104232][ T15] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.190593][ T1265] overlayfs: failed to resolve './file0': -2 [ 58.208856][ T1267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1267 comm=syz.4.227 [ 58.440123][ T1271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 58.453489][ T1271] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.474999][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 58.499271][ T1271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.234'. [ 58.515275][ T1271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 58.681098][ T15] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 58.689936][ T15] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 58.700309][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.907169][ T1297] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 58.938679][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.958143][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.966371][ T15] usb 8-1: Product: syz [ 58.969716][ T1297] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 58.979834][ T15] usb 8-1: Manufacturer: syz [ 58.984518][ T15] usb 8-1: SerialNumber: syz [ 58.995628][ T1297] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 59.003817][ T1297] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 59.012617][ T1294] capability: warning: `syz.4.240' uses 32-bit capabilities (legacy support in use) [ 59.023226][ T1297] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 59.042959][ T1297] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 59.052663][ T1297] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 59.099802][ T1302] netlink: 'syz.2.241': attribute type 8 has an invalid length. [ 59.267948][ T5] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 59.359412][ T1318] fuse: Unknown parameter 'hash' [ 59.364478][ T15] usb 8-1: 0:2 : does not exist [ 59.380288][ T15] usb 8-1: USB disconnect, device number 2 [ 59.572946][ T1331] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.585030][ T1331] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:163: inode #17: comm syz.5.250: inline data xattr refers to an external xattr inode [ 59.600903][ T1331] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.250: couldn't read orphan inode 17 (err -117) [ 59.612974][ T1331] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue [ 59.710256][ T5] usb 7-1: unable to get BOS descriptor or descriptor too short [ 59.891148][ T5] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.905159][ T5] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.947853][ T369] VFS: Lookup of '.' in ext4 loop5 would have caused loop [ 59.969360][ T369] VFS: Lookup of '.' in ext4 loop5 would have caused loop [ 60.014473][ T1347] tipc: Started in network mode [ 60.028862][ T1347] tipc: Own node identity 7f000001, cluster identity 4711 [ 60.049469][ T1347] tipc: Enabling of bearer rejected, failed to enable media [ 60.086723][ T1347] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 60.121838][ T1347] tipc: Enabled bearer , priority 10 [ 60.206079][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.213796][ T5] usb 7-1: string descriptor 0 read error: -22 [ 60.221154][ T5] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.234384][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.247204][ T5] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.258638][ T1351] device bridge_slave_0 entered promiscuous mode [ 60.276092][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.283243][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.291028][ T1351] device bridge_slave_1 entered promiscuous mode [ 60.307372][ T5] usb 7-1: cannot find UAC_HEADER [ 60.316597][ T5] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 60.383300][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.390373][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.397644][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.404684][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.469468][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.488541][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.505812][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.585382][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.594602][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.601734][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.626153][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.634988][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.642043][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.866704][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.887126][ T1315] usb 7-1: USB disconnect, device number 3 [ 60.895348][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.918473][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.947541][ T1351] device veth0_vlan entered promiscuous mode [ 60.954278][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.965668][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.973793][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.987750][ T1351] device veth1_macvtap entered promiscuous mode [ 60.998022][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.016157][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.024901][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.060099][ T9] device bridge_slave_1 left promiscuous mode [ 61.073067][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.083704][ T9] device bridge_slave_0 left promiscuous mode [ 61.090472][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.100735][ T9] device veth1_macvtap left promiscuous mode [ 61.106994][ T9] device veth0_vlan left promiscuous mode [ 61.237435][ T502] tipc: 32-bit node address hash set to 100007f [ 61.250352][ T1371] netlink: 'syz.8.259': attribute type 4 has an invalid length. [ 61.258077][ T1371] netlink: 'syz.8.259': attribute type 5 has an invalid length. [ 61.265903][ T1371] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.259'. [ 61.277816][ T1372] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 61.464610][ T24] kauditd_printk_skb: 205 callbacks suppressed [ 61.464622][ T24] audit: type=1400 audit(1768161544.309:970): avc: denied { connect } for pid=1383 comm="syz.6.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.552890][ T24] audit: type=1326 audit(1768161544.388:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.576823][ T24] audit: type=1326 audit(1768161544.388:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.600878][ T24] audit: type=1326 audit(1768161544.388:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.624516][ T24] audit: type=1326 audit(1768161544.388:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.661217][ T24] audit: type=1326 audit(1768161544.397:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.685162][ T24] audit: type=1326 audit(1768161544.397:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.708523][ T24] audit: type=1326 audit(1768161544.397:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.731788][ T24] audit: type=1326 audit(1768161544.397:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.755391][ T24] audit: type=1326 audit(1768161544.397:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1389 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05eb6749 code=0x7ffc0000 [ 61.856185][ T1399] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.868123][ T1400] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.883152][ T1400] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 61.896134][ T1399] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.906544][ T1400] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 61.921005][ T1399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 61.930150][ T1399] FAT-fs (loop7): Filesystem has been set read-only [ 62.360471][ T1415] cgroup: syz.7.270 (1415) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 62.376785][ T1415] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 62.888742][ T286] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 63.584253][ T286] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.624320][ T286] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.670501][ T286] usb 3-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 63.687426][ T286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.713162][ T286] usb 3-1: config 0 descriptor?? [ 63.830831][ T1485] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.195821][ T1512] device ip6gretap0 entered promiscuous mode [ 64.578330][ T286] usbhid 3-1:0.0: can't add hid device: -71 [ 64.584412][ T286] usbhid: probe of 3-1:0.0 failed with error -71 [ 64.592035][ T286] usb 3-1: USB disconnect, device number 6 [ 65.024152][ T1541] loop8: p1 < > p4 [ 65.028686][ T1541] loop8: p4 size 8388608 extends beyond EOD, truncated [ 65.533502][ T1547] netlink: 'syz.2.306': attribute type 4 has an invalid length. [ 65.619011][ T1552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.307'. [ 65.808315][ T381] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 65.818518][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.950984][ T286] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.195534][ T286] usb 8-1: Using ep0 maxpacket: 16 [ 66.205797][ T381] usb 9-1: config 0 has an invalid interface number: 103 but max is 1 [ 66.214015][ T25] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 66.222779][ T381] usb 9-1: config 0 has an invalid interface number: 183 but max is 1 [ 66.231061][ T25] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 66.241475][ T381] usb 9-1: config 0 has no interface number 0 [ 66.247595][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.256448][ T381] usb 9-1: config 0 has no interface number 1 [ 66.262687][ T25] usb 3-1: config 1 has no interface number 0 [ 66.268807][ T381] usb 9-1: config 0 interface 103 has no altsetting 0 [ 66.275592][ T25] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 66.286351][ T381] usb 9-1: config 0 interface 183 has no altsetting 0 [ 66.293660][ T25] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 66.346201][ T1557] ================================================================== [ 66.354299][ T1557] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 66.362426][ T1557] Read of size 8 at addr ffff888118198fc0 by task syz.6.309/1557 [ 66.370136][ T1557] [ 66.372471][ T1557] CPU: 1 PID: 1557 Comm: syz.6.309 Not tainted syzkaller #0 [ 66.379727][ T1557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.389768][ T1557] Call Trace: [ 66.393055][ T1557] __dump_stack+0x21/0x24 [ 66.397363][ T1557] dump_stack_lvl+0x169/0x1d8 [ 66.402018][ T1557] ? show_regs_print_info+0x18/0x18 [ 66.407208][ T1557] ? thaw_kernel_threads+0x220/0x220 [ 66.412559][ T1557] print_address_description+0x7f/0x2c0 [ 66.418087][ T1557] ? tc_setup_flow_action+0x842/0x3280 [ 66.423521][ T1557] kasan_report+0xe2/0x130 [ 66.427908][ T1557] ? flow_action_cookie_create+0x28/0x90 [ 66.433522][ T1557] ? tc_setup_flow_action+0x842/0x3280 [ 66.438956][ T1557] __asan_report_load8_noabort+0x14/0x20 [ 66.444565][ T1557] tc_setup_flow_action+0x842/0x3280 [ 66.449825][ T1557] ? __kmalloc+0x1a7/0x330 [ 66.454213][ T1557] ? flow_rule_alloc+0x32/0x2c0 [ 66.459034][ T1557] mall_replace_hw_filter+0x293/0x810 [ 66.464378][ T1557] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 66.470425][ T1557] ? mall_set_parms+0x410/0x410 [ 66.475253][ T1557] ? tcf_exts_destroy+0xb0/0xb0 [ 66.480087][ T1557] ? pcpu_alloc+0xf8a/0x16b0 [ 66.484656][ T1557] ? mall_set_parms+0x19d/0x410 [ 66.489512][ T1557] mall_change+0x528/0x750 [ 66.493907][ T1557] ? __kasan_check_write+0x14/0x20 [ 66.498993][ T1557] ? mall_get+0xa0/0xa0 [ 66.503126][ T1557] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 66.508992][ T1557] ? nla_strcmp+0xf4/0x140 [ 66.513384][ T1557] tc_new_tfilter+0x13f6/0x1a10 [ 66.518215][ T1557] ? mall_get+0xa0/0xa0 [ 66.522348][ T1557] ? tcf_gate_entry_destructor+0x20/0x20 [ 66.527957][ T1557] ? security_capable+0x87/0xb0 [ 66.532788][ T1557] ? ns_capable+0x8c/0xf0 [ 66.537385][ T1557] ? netlink_net_capable+0x125/0x160 [ 66.542653][ T1557] ? tcf_gate_entry_destructor+0x20/0x20 [ 66.548265][ T1557] rtnetlink_rcv_msg+0x800/0xb90 [ 66.553184][ T1557] ? rtnetlink_bind+0x80/0x80 [ 66.557874][ T1557] ? arch_stack_walk+0xee/0x140 [ 66.562719][ T1557] ? stack_trace_save+0x98/0xe0 [ 66.567552][ T1557] ? stack_trace_snprint+0xf0/0xf0 [ 66.572680][ T1557] ? memcpy+0x56/0x70 [ 66.576669][ T1557] ? avc_has_perm+0x234/0x360 [ 66.581423][ T1557] ? __kasan_slab_alloc+0xbd/0xf0 [ 66.586514][ T1557] ? slab_post_alloc_hook+0x5d/0x2f0 [ 66.591777][ T1557] ? ___sys_sendmsg+0x1f0/0x260 [ 66.596608][ T1557] ? avc_has_perm_noaudit+0x240/0x240 [ 66.601963][ T1557] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 66.607316][ T1557] netlink_rcv_skb+0x1e0/0x430 [ 66.612057][ T1557] ? rtnetlink_bind+0x80/0x80 [ 66.616716][ T1557] ? netlink_ack+0xb80/0xb80 [ 66.621293][ T1557] ? __netlink_lookup+0x387/0x3b0 [ 66.626316][ T1557] rtnetlink_rcv+0x1c/0x20 [ 66.630709][ T1557] netlink_unicast+0x876/0xa40 [ 66.635449][ T1557] netlink_sendmsg+0x88d/0xb30 [ 66.640193][ T1557] ? netlink_getsockopt+0x530/0x530 [ 66.645367][ T1557] ? security_socket_sendmsg+0x82/0xa0 [ 66.650810][ T1557] ? netlink_getsockopt+0x530/0x530 [ 66.655984][ T1557] ____sys_sendmsg+0x5a2/0x8c0 [ 66.660722][ T1557] ? __sys_sendmsg_sock+0x40/0x40 [ 66.665726][ T1557] ? import_iovec+0x7c/0xb0 [ 66.670202][ T1557] ___sys_sendmsg+0x1f0/0x260 [ 66.674856][ T1557] ? __sys_sendmsg+0x250/0x250 [ 66.679594][ T1557] ? __sys_setsockopt+0x2fa/0x460 [ 66.684597][ T1557] ? __fdget+0x1a1/0x230 [ 66.688826][ T1557] __x64_sys_sendmsg+0x1e2/0x2a0 [ 66.693744][ T1557] ? __kasan_check_write+0x14/0x20 [ 66.698832][ T1557] ? ___sys_sendmsg+0x260/0x260 [ 66.703687][ T1557] ? __kasan_check_read+0x11/0x20 [ 66.708703][ T1557] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 66.714319][ T1557] do_syscall_64+0x31/0x40 [ 66.718716][ T1557] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 66.724589][ T1557] RIP: 0033:0x7f9805c5b749 [ 66.728994][ T1557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.748620][ T1557] RSP: 002b:00007f98046c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.757022][ T1557] RAX: ffffffffffffffda RBX: 00007f9805eb1fa0 RCX: 00007f9805c5b749 [ 66.764973][ T1557] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 66.772921][ T1557] RBP: 00007f9805cdff91 R08: 0000000000000000 R09: 0000000000000000 [ 66.780868][ T1557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.788817][ T1557] R13: 00007f9805eb2038 R14: 00007f9805eb1fa0 R15: 00007ffc40f696d8 [ 66.796763][ T1557] [ 66.799067][ T1557] Allocated by task 1557: [ 66.803377][ T1557] __kasan_kmalloc+0xda/0x110 [ 66.808032][ T1557] __kmalloc+0x1a7/0x330 [ 66.812275][ T1557] tcf_idr_create+0x5f/0x790 [ 66.816836][ T1557] tcf_idr_create_from_flags+0x61/0x70 [ 66.822266][ T1557] tcf_gact_init+0x2b4/0x520 [ 66.826827][ T1557] tcf_action_init_1+0x3e1/0x670 [ 66.831741][ T1557] tcf_action_init+0x1e6/0x700 [ 66.836489][ T1557] tcf_exts_validate+0x215/0x510 [ 66.841402][ T1557] mall_set_parms+0x4b/0x410 [ 66.846099][ T1557] mall_change+0x45c/0x750 [ 66.850495][ T1557] tc_new_tfilter+0x13f6/0x1a10 [ 66.855411][ T1557] rtnetlink_rcv_msg+0x800/0xb90 [ 66.860328][ T1557] netlink_rcv_skb+0x1e0/0x430 [ 66.865071][ T1557] rtnetlink_rcv+0x1c/0x20 [ 66.869467][ T1557] netlink_unicast+0x876/0xa40 [ 66.874212][ T1557] netlink_sendmsg+0x88d/0xb30 [ 66.878954][ T1557] ____sys_sendmsg+0x5a2/0x8c0 [ 66.883694][ T1557] ___sys_sendmsg+0x1f0/0x260 [ 66.888341][ T1557] __x64_sys_sendmsg+0x1e2/0x2a0 [ 66.893249][ T1557] do_syscall_64+0x31/0x40 [ 66.897638][ T1557] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 66.903498][ T1557] [ 66.905803][ T1557] The buggy address belongs to the object at ffff888118198f00 [ 66.905803][ T1557] which belongs to the cache kmalloc-192 of size 192 [ 66.919834][ T1557] The buggy address is located 0 bytes to the right of [ 66.919834][ T1557] 192-byte region [ffff888118198f00, ffff888118198fc0) [ 66.933421][ T1557] The buggy address belongs to the page: [ 66.939044][ T1557] page:ffffea0004606600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118198 [ 66.949277][ T1557] flags: 0x4000000000000200(slab) [ 66.954277][ T1557] raw: 4000000000000200 ffffea00045c3140 0000000a0000000a ffff888100043380 [ 66.962832][ T1557] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 66.971387][ T1557] page dumped because: kasan: bad access detected [ 66.977867][ T1557] page_owner tracks the page as allocated [ 66.983564][ T1557] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 103, ts 4592605277, free_ts 0 [ 66.998550][ T1557] prep_new_page+0x179/0x180 [ 67.003120][ T1557] get_page_from_freelist+0x2235/0x23d0 [ 67.008637][ T1557] __alloc_pages_nodemask+0x268/0x5f0 [ 67.013977][ T1557] new_slab+0x84/0x3f0 [ 67.018018][ T1557] ___slab_alloc+0x2a6/0x450 [ 67.022577][ T1557] __slab_alloc+0x63/0xa0 [ 67.026880][ T1557] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 67.032225][ T1557] kernfs_fop_open+0x343/0xb30 [ 67.036965][ T1557] do_dentry_open+0x793/0x1090 [ 67.041698][ T1557] vfs_open+0x73/0x80 [ 67.045649][ T1557] path_openat+0x27ad/0x3160 [ 67.050214][ T1557] do_filp_open+0x1b3/0x3e0 [ 67.054688][ T1557] do_sys_openat2+0x14c/0x6d0 [ 67.059343][ T1557] __x64_sys_openat+0x136/0x160 [ 67.064339][ T1557] do_syscall_64+0x31/0x40 [ 67.068728][ T1557] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 67.074606][ T1557] page_owner free stack trace missing [ 67.079946][ T1557] [ 67.082251][ T1557] Memory state around the buggy address: [ 67.087873][ T1557] ffff888118198e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.095909][ T1557] ffff888118198f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.104117][ T1557] >ffff888118198f80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 67.112149][ T1557] ^ [ 67.118271][ T1557] ffff888118199000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.126332][ T1557] ffff888118199080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 67.134380][ T1557] ================================================================== [ 67.142413][ T1557] Disabling lock debugging due to kernel taint [ 67.155219][ T24] kauditd_printk_skb: 312 callbacks suppressed [ 67.155230][ T24] audit: type=1400 audit(1768161549.882:1292): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.183475][ T24] audit: type=1400 audit(1768161549.882:1293): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.205438][ T24] audit: type=1400 audit(1768161549.882:1294): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.227152][ T24] audit: type=1400 audit(1768161549.882:1295): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.248253][ T24] audit: type=1400 audit(1768161549.882:1296): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.269034][ T24] audit: type=1400 audit(1768161549.882:1297): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.292380][ T24] audit: type=1400 audit(1768161549.882:1298): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.386406][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.395701][ T381] usb 9-1: New USB device found, idVendor=0403, idProduct=bcda, bcdDevice=37.7a [ 67.405331][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.413376][ T381] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.421392][ T25] usb 3-1: Product: syz [ 67.425526][ T25] usb 3-1: Manufacturer: syz [ 67.430247][ T381] usb 9-1: Product: syz [ 67.434393][ T381] usb 9-1: Manufacturer: syz [ 67.439072][ T25] usb 3-1: SerialNumber: syz [ 67.443966][ T381] usb 9-1: SerialNumber: syz [ 67.449716][ T381] usb 9-1: config 0 descriptor?? [ 67.488426][ T25] cdc_ncm 3-1:1.1: bind() failure [ 67.508348][ T286] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.517439][ T286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.525481][ T286] usb 8-1: Product: syz [ 67.529678][ T286] usb 8-1: Manufacturer: syz [ 67.534253][ T286] usb 8-1: SerialNumber: syz [ 67.694270][ T25] usb 3-1: USB disconnect, device number 7 [ 67.732289][ T381] ftdi_sio 9-1:0.103: FTDI USB Serial Device converter detected [ 67.740247][ T381] usb 9-1: Detected FT2232C [ 67.762527][ T381] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 67.782854][ T381] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 67.790258][ T381] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 67.799245][ T381] ftdi_sio 9-1:0.183: FTDI USB Serial Device converter detected [ 67.807349][ T381] usb 9-1: Detected FT2232C [ 67.826037][ T286] usb 8-1: USB disconnect, device number 3 [ 67.832651][ T381] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 67.854100][ T381] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 67.861302][ T381] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 67.870694][ T381] usb 9-1: USB disconnect, device number 2 [ 67.877246][ T381] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 67.886828][ T381] ftdi_sio 9-1:0.103: device disconnected [ 67.893148][ T381] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 67.902825][ T381] ftdi_sio 9-1:0.183: device disconnected