last executing test programs: 6m17.97943532s ago: executing program 32 (id=86): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x20) 5m20.389497115s ago: executing program 5 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f91af6e7c27f0731a48ba69bf838bb1d73266303f4dbd186c1502fee0399feb8e800000000651370cadd105cc5a1110d4b02277067f28a06550074ceaf7c1a8e7d580ca77f74d168c462168329ce3b3a7c1ddb6154608d35b8e4fad460b5bc2dd4e176d82ab96263ac5693a5c917a3b74913"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x17c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000dc0)=ANY=[], 0x1, 0x1207, &(0x7f0000003000)="$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") creat(0x0, 0xa1) open(0x0, 0x66842, 0x19) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m19.141807698s ago: executing program 5 (id=447): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000008000850000001b000000b70000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 5m18.946044956s ago: executing program 5 (id=448): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x7, &(0x7f0000000080)={0xb, 0x10}, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r2, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") 5m18.922343327s ago: executing program 5 (id=449): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffff84, 0x20001fffffff9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mmap(&(0x7f0000853000/0x3000)=nil, 0x3000, 0xa, 0x810, r0, 0xfd3a3000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8970, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) iopl(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5m18.550605314s ago: executing program 5 (id=452): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f00000095c0)={0xc, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000001000000000009500008000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x76, 0x5, 0x8001}) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4040000) recvmmsg(r2, &(0x7f0000009380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000640)=""/225, 0xe1}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000740)=""/172, 0xac}], 0x4, &(0x7f0000000800)=""/67, 0x43}, 0x101}, {{&(0x7f0000000880)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000900)=""/53, 0x35}], 0x1, &(0x7f0000000980)=""/4096, 0x1000}, 0x1c}, {{&(0x7f0000001980), 0x80, &(0x7f0000003b40)=[{&(0x7f0000001a00)=""/48, 0x30}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/84, 0x54}, {&(0x7f0000002ac0)=""/99, 0x63}, {&(0x7f0000002b40)=""/4096, 0x1000}], 0x5, &(0x7f0000003bc0)=""/50, 0x32}, 0x1be1}, {{&(0x7f0000003c00)=@phonet, 0x80, &(0x7f0000004000)=[{&(0x7f0000003c80)=""/254, 0xfe}, {&(0x7f0000003d80)=""/246, 0xf6}, {&(0x7f0000003e80)=""/238, 0xee}, {&(0x7f0000003f80)=""/127, 0x7f}], 0x4, &(0x7f0000004040)=""/15, 0xf}, 0xcb3b}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000004080)=""/198, 0xc6}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/173, 0xad}], 0x3, &(0x7f0000005280)=""/192, 0xc0}, 0xe}, {{&(0x7f0000005340)=@tipc, 0x80, &(0x7f0000006940)=[{&(0x7f00000053c0)=""/91, 0x5b}, {&(0x7f0000005440)=""/204, 0xcc}, {&(0x7f0000005540)=""/166, 0xa6}, {&(0x7f0000005600)}, {&(0x7f0000005640)=""/253, 0xfd}, {&(0x7f0000005740)=""/4096, 0x1000}, {&(0x7f0000006740)=""/232, 0xe8}, {&(0x7f0000006840)=""/195, 0xc3}], 0x8, &(0x7f00000069c0)=""/41, 0x29}, 0x32d2e363}, {{&(0x7f0000006a00)=@generic, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006a80)=""/195, 0xc3}, {&(0x7f0000006b80)=""/133, 0x85}, {&(0x7f0000006c40)=""/233, 0xe9}], 0x3}, 0x5}, {{&(0x7f0000006d80)=@alg, 0x80, &(0x7f0000008140)=[{&(0x7f0000006e00)=""/42, 0x2a}, {&(0x7f0000006e40)=""/236, 0xec}, {&(0x7f0000006f40)=""/252, 0xfc}, {&(0x7f0000007040)=""/19, 0x13}, {&(0x7f0000007080)=""/135, 0x87}, {&(0x7f0000007140)=""/4096, 0x1000}], 0x6}, 0x1}, {{0x0, 0x0, &(0x7f0000009280)=[{&(0x7f00000081c0)=""/67, 0x43}, {&(0x7f0000008240)=""/7, 0x7}, {&(0x7f0000008280)=""/4096, 0x1000}], 0x3, &(0x7f00000092c0)=""/150, 0x96}, 0x400}], 0x9, 0x12002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x400000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) r7 = open(0x0, 0x143142, 0x80) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r8, 0x0, r8) (async) sendfile(r7, r7, 0x0, 0x1000000201003) (async) r9 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 5m17.047137828s ago: executing program 5 (id=458): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000008000850000001b000000b70000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 5m16.971076942s ago: executing program 33 (id=458): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000008000850000001b000000b70000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 5m2.033639823s ago: executing program 1 (id=543): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x1) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x18802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="3eaa000000000000791038000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 5m0.660402772s ago: executing program 1 (id=548): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000000000006111200000000040180000000000000000000000002000ec009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) setresgid(0xee00, 0xee01, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, 0xdf, 0x0, 0x0, 0x3, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0bfe0000008b000000050000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x0, 0x34}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000140), 0x0}, 0x20) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) userfaultfd(0x801) close(0x3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0x7ff, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000080)) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000780)=""/4096) 5m0.558598947s ago: executing program 1 (id=549): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000380)) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000380)) (async) 5m0.431627942s ago: executing program 1 (id=550): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r6 = eventfd(0x0) io_submit(r5, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xbf, r6, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) io_destroy(r5) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010007000000000004000200000000001000060000000000200007"], 0x24, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x80000001, 0x0, 0x0) rt_sigprocmask(0x3, &(0x7f0000000400)={[0x7f]}, 0x0, 0x8) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x29c, 0x0, 0x0) 5m0.339969646s ago: executing program 1 (id=551): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), &(0x7f0000000100)={'U+', 0x8}, 0x16, 0x1) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x20, 0x31, 0x4, "c93e33dd"}, 0x0, 0x0}) 5m0.278906629s ago: executing program 1 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5m0.229451071s ago: executing program 34 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m3.59206012s ago: executing program 6 (id=1049): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x60) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r8, 0x0, 0xf, 0x8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001280)={r9, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) 2m2.67208216s ago: executing program 6 (id=1052): syz_pidfd_open(0x0, 0x0) 2m2.555789835s ago: executing program 6 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x8010550e) (async) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/50}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m2.552193175s ago: executing program 6 (id=1054): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000800)={[{@noquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv0, 0x0}, {@usrjquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noacl}, {@resgid}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f8, &(0x7f0000000200)="$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") unshare(0x22020600) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(0x0, 0x8) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x64}}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)=0x1007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000000180)=""/49, 0x2d) getdents(r9, 0xfffffffffffffffd, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r11, &(0x7f0000002000)=[{{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000a40)="d2647097099d5ffc7e077b8f8d58f304d9bdf80b87577c25a049b69a72706614a2ccfb0237e327d3dc1921c4c1bdf05de5d2e0b01926a3377555892aada2a1942f375cbe823f08d0d2b4e3a6d183080f72a952a2e49a8b245a024eeeb9ad73d4f755e647b82c3ea116a5eed6751e86f74c2b5ce85c1b0a8c107c8a2c581e775aa296234479a3756ed41111fd95078708ae3d919044cdcba2b080c0ead6fd344251402485762c283acedad683017c44d3e424", 0xb2}, {&(0x7f0000000b00)="41a77e341b6b072909f04f8613b04ec42e7b322dbe22045b60eabdb2c53480c814a5104aaa899933973d8819164920f1b1d441a7a7c28b7b92fb58206bf6cdd338a12e3a2245e89f914fc787874f5855a81251c2f2e4efd743bac4ad57a39010db5d70aeccc2492786752ff440987fc439f8f1c0", 0x74}], 0x2, 0x0, 0x0, 0x404001c}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e80)="7ed02d0d93ec159518dc7b24535d7ea7fff1e8f74c3f77cb4ceceecbe81309e9df8ee37f677b329fa6db33ccecffc8148658345a40895e1bbf5ecbc698001761bb8f6c1504d4699500fab5ff0268b90e90f3b1cd2415b537fe1505ea0cdb6bd93411adf8cdef6896606092374db6e3239c89a568080880ee809dae7b81e5722469cd3a3bd242fc1734bc2cbd0054fa11335d827223c7a2b9d8c548cd8981361d1b82b784a74a79f68bf6cdc04329adcdc08976", 0xb3}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000a5a57e9102db70d1be6d09bfb151be000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x55}}], 0x2, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x5f89c00b, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000fc0)='xen_mmu_set_pud\x00', r3, 0x0, 0xffffffffffff8001}, 0x18) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d00)="a8af8c50d352790731d0b44ffd0cbb444cd9a74dbfa1e70363247e65a786006854cf6c7d7fe0ee9bf493ba2060bdead7c79a21573c8492f8fb38344926b3038ec1edfed0c83fe0548ae84b70cb2019f05ebc6ab608837976473249fbde347a3d7ef3fcba8dc5eb34ef8f53620953042dfd5f811523fbb571c47b05bb3402dff046b793b256ea2c8824b369bc576bd6dc77f4aa912ed67b2928088842c04d1592bb1776828b6f1b871da29d69bdf158a11e297e8ff0618e59c583b9a231bfc2ae83", 0xc1}, {&(0x7f0000000100)="07d0dc9472f6f15b14b7991eac8525ddd3ef02132619176c029c00058fbcc9a84e331b689b92428d16807d77cdc063e5", 0x30}, {&(0x7f0000000b80)="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", 0x177}], 0x3, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x200460c4) write$P9_RREADLINK(r2, &(0x7f0000000f80)={0x10, 0x17, 0xf000, {0x7, './file0'}}, 0x10) 2m2.507366667s ago: executing program 6 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000319000000192263c445269b6cddddb3744d01869ff0949ce187921fabfd0d57553b2dcd7963c88adfe012d0066bc269c8c275b21b32bf6753fcf993db952fb8a71a1b609d9c19148825c6b7e2e2c89338839703a2a4384fff879ecbf36d44ea4c6179cfcea7302955891f3c7637967da9c389af324aa8db782c573c31fe51c516c114eaea7ddf627291062b326bd0d24ce8"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) 2m2.302323186s ago: executing program 6 (id=1056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000300)=0x1, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) read$FUSE(r0, &(0x7f0000003a80)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001bd000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x1, &(0x7f0000000180), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060002000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3eb9, 0x6e, &(0x7f0000000380)=""/110, 0x41000, 0x3a, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x2, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r0, r0, r0], &(0x7f0000000540)=[{0x5, 0x1, 0x3, 0x6}, {0x2, 0x3, 0x0, 0x1}, {0x3, 0x5, 0x7, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x3, 0x1, 0xb, 0xa}, {0x1, 0x4, 0x2, 0x9}, {0x2, 0x5, 0xc, 0x2}, {0x0, 0x4, 0x8}, {0x1, 0x2, 0x1}], 0x10, 0x80}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x112, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x255, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 2m2.266862377s ago: executing program 35 (id=1056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000300)=0x1, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) read$FUSE(r0, &(0x7f0000003a80)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001bd000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x1, &(0x7f0000000180), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060002000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3eb9, 0x6e, &(0x7f0000000380)=""/110, 0x41000, 0x3a, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x2, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r0, r0, r0], &(0x7f0000000540)=[{0x5, 0x1, 0x3, 0x6}, {0x2, 0x3, 0x0, 0x1}, {0x3, 0x5, 0x7, 0x2}, {0x2, 0x1, 0x2, 0xc}, {0x3, 0x1, 0xb, 0xa}, {0x1, 0x4, 0x2, 0x9}, {0x2, 0x5, 0xc, 0x2}, {0x0, 0x4, 0x8}, {0x1, 0x2, 0x1}], 0x10, 0x80}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x112, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x255, &(0x7f00000017c0)="$eJzs3U1oFGcYB/BnZnebJllK2l4KpR9QSmkCIb0VekkvLQRKCKUUWiEi4kVJhJjgLfHkxYOeVXLyEsSb0aPkErwogqeoOcSLoMGDwYMeVnYngXysH3HjjmR+P5idmd2ZeWaY+b+zh513AyisnogYjIhSRPRFRCUiks0LfJ8NPeuzs52LoxG12t9Pk8Zy2XxmY73uiJiJiF8jYiFN4mg5Ymr+/5XnS3/+dGay8uOl+f8623qQ61ZXlv9auzh8+urQL1O37z4eTmIwqluOa+8lTd4rJxFffIhiH4mknPce8C5GTl65V8/9lxHxQyP/lUgjO3lnJz5ZqETvhdete+7Jna/bua/A3qvVKvV74EwNKJw0IqqRpP0RkU2naX9/9h3+fqkrPTY+caLvyPjk2OG8Wypgr1Qjlv+43nGte1v+H5Wy/AP7Vz3//4zMPahPr5Xy3hugLb7JRvX89x2c/jnkHwpH/qG45B+KS/6huOQfiuvN+W/2q1Vgv3D/h+KSfyiIJs9jyT8UVzV65R8KavP9HwAollpH3k8gA3nJu/0BAAAAAAAAAAAAAAAAAAB2mu1cHN0Y2lXz5vmI1d+z/gl31i81/o844tPGa9ezZEs3hknzbg135cB3LW6gRZdzfvr6s4f51r/1bb71p8ciZk5FxEC5vPP6S9avv/f3+Vs+rxxqscAube/V/7d/21t/u5dz+dYfWoq4UW9/Bpq1P2l81Rg3b3+q9fPXYv3jL1rcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3zKgAA//90r212") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 2m1.415890494s ago: executing program 7 (id=1059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x80000003) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m0.255669514s ago: executing program 7 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e26}, 0x6e) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700303a"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local, 0xfffffffe}, 0x0, {[0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2704b295]}}, 0x5c) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c5a16c7bb3dd1df097ea138369be9b659508eda3eb3f0d48c3963507b6670b99d3d73b7762aec7f9840438d9f62de101258e8a0535fcb82f69050fbe193b65a872bf4f1143006a583e8e869177ec7573abeb6fb4", @ANYRES16=r7, @ANYBLOB="000326bd7000ffdbdf2501000000080004000900000005000500020000000800030005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x43205c9925d6b47e}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042dbd7035830bba9686ba9c7f13c56f00fedbdf2506000000080003000600000008000400090000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044811}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$igmp6(0xa, 0x3, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x80000) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m0.115858749s ago: executing program 7 (id=1063): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@bh}, {@user_xattr}, {@nobh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_usb_connect(0x3, 0x51b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000244be8c1003040ce8bafb010203030902"], 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000035c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x5, r2, 0x0, 0x0, 0x2b0}]) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400000000000151, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000640)={{0x33, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0xffffffff, 'none\x00', 0x10, 0x9, 0x70}, {@remote, 0x4e24, 0x4, 0x7c5, 0x0, 0x8}}, 0x44) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) 1m57.052431881s ago: executing program 7 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="220000000011000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c0002800500010000000000080007400000000144001080"], 0xa8}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x2040400) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r8, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m56.249041706s ago: executing program 7 (id=1093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000e1000000000000000002e88400c003332c9ff67f5998de740000cfcffabaac"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40002004}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x6, &(0x7f0000000280)=0x9896) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x1, './bus\x00'}, 0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r4, 0x4, 0x400) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'syzkaller1\x00', @ifru_map={0x2, 0x3c1c, 0x1, 0x9, 0x1, 0x14}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000300)=0x200) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000640)={0xa, 0xfffe, 0x80, @local, 0x5597bac7}, 0x1c) sendto$inet6(r8, &(0x7f0000000000)="80003724090000ce", 0x8, 0x4804, &(0x7f0000000040)={0xa, 0x4e24, 0xe, @mcast1, 0x9}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@noload}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") 1m55.331807755s ago: executing program 7 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), &(0x7f0000000100)={'U+', 0x8}, 0x16, 0x1) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x20, 0x31, 0x4, "c93e33dd"}, 0x0, 0x0}) 1m40.31897651s ago: executing program 36 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), &(0x7f0000000100)={'U+', 0x8}, 0x16, 0x1) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x20, 0x31, 0x4, "c93e33dd"}, 0x0, 0x0}) 38.379352211s ago: executing program 9 (id=1583): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x44}}, 0x4000) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)='gretap0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000380)="652e0f23bd66ba2100ec0f011ab9800000c00f3235010000000f3066baf80cb88c1fcf89ef66bafc0ced66b835018ee00fc71e0f234ff30fc7b607000000c4c2c999f2", 0x43}], 0x1, 0x2, &(0x7f0000000440)=[@cr0={0x0, 0xc}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5a79}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x300, 0xae, 0x25, 0x3}]}, 0x10) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000640)={0x0, 0x0, 0x8001}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a40)={r5, "b1191e102c63aac82e5f903e6042ba67"}) lseek(r1, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f0000001a40)={'#! ', './file0', [{0x20, '{'}, {0x20, '#.\\#'}], 0xa, "66e756ed5054278bb41c5c35f1a916051b761d23dfc0bec28d773afc8e51e4b4a77ce7ff1536a4a351eaf8bf9baefa3feb4437fa2aa2bfea13d86a6fac2773987a69a154509c7d864301d7c11af714e1607222a722e7d5e7f1e124719ecca74524985d5e350f13aed90faa6dab00f92b83ac9d70c27a08dca625d566aa50e1c5557ddcacd9d180d10f92375d019d33d0967f8d790838c80638639a4e71dfce3cc47287"}, 0xb5) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) r8 = syz_io_uring_complete(0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002c80)={r8, &(0x7f0000001b80)="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", &(0x7f0000002b80)=""/234}, 0x20) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002d00), r6) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, r9, 0x8, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x40040) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000002e00)=0x8, &(0x7f0000002e40)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000002e80)) lseek(r6, 0x1, 0x1) accept4$inet6(r8, &(0x7f0000002ec0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002f00)=0x1c, 0x800) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000002f40), 0x4) add_key$keyring(&(0x7f0000002f80), &(0x7f0000002fc0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000003000)=""/230, &(0x7f0000003100)=0xe6) 38.367768652s ago: executing program 9 (id=1584): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="188000000000631e008000000000f995000000000000000500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x6, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_settime(r1, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="300000002e0003"], 0x30}], 0x1, 0x0, 0x0, 0x4040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x210008, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0x0) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private0, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) getgroups(0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0xee01, 0x0]) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500f8ff00000000bfa100000000000007010000f8ff4b1842eb089dffffb702000000000000b70300000000000085000100720000009500000000d37596c7116e922f83f520d63913d475ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) setregid(0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)='./file0/../file0\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 38.266006596s ago: executing program 9 (id=1587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x80000003) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.018904483s ago: executing program 9 (id=1596): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125499, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x3047c4a, 0x0) 35.937692036s ago: executing program 9 (id=1598): r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 35.910667988s ago: executing program 9 (id=1600): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000600000001000000ffbfffff010000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$userns(0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x34, r3, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000007}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000500)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast}}}], 0x20}}], 0x1, 0x28000004) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) 35.822908412s ago: executing program 37 (id=1600): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000600000001000000ffbfffff010000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$userns(0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x34, r3, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000007}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000500)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast}}}], 0x20}}], 0x1, 0x28000004) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) 5.542108352s ago: executing program 3 (id=1803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x80000003) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 4.057852746s ago: executing program 8 (id=1819): r0 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/174, 0xae}], 0x1}, 0xffffffff}], 0x1, 0x102, 0x0) sendto$inet(r0, &(0x7f0000001400)="d733ae6716c93d1a372bb774152f503c74d14f89", 0x14, 0x20040000, &(0x7f0000000100)={0x2, 0x4e34, @local}, 0x10) 4.057219096s ago: executing program 8 (id=1820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000680)="668995da8b9413350fff9ffc047c", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.056932446s ago: executing program 3 (id=1821): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000013c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0x1, 0xfff3}, {0x7, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 4.054428447s ago: executing program 3 (id=1822): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000001e40)={0x2020}, 0x2020) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r5, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYRES32=0x0], 0xfffffe07) sendfile(r1, r5, &(0x7f0000000180), 0x8) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000080)='\x00\x00', 0x2, 0x480c0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r7, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r5, 0x40, 0x4, 0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) syz_emit_ethernet(0x9a, &(0x7f0000001680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1286dd600101000064110000000000000000000000000082d59e92238e6218e6df589c00000000ff02000000000000000000000000000100004e2200649078020000000000000000000000eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70ac14bf573e6cc566d768d5f177c14a5cd359c721417b883ecdcaba159514b06796dbf2ea9e520f1475c8f65b"], 0x0) fcntl$setpipe(r9, 0x407, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r8) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42208242}, 0xc, &(0x7f0000000280)={&(0x7f0000001540)=ANY=[@ANYBLOB="20010000", @ANYRESOCT=r3, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x44004}, 0x4000001) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xff, 0x291, &(0x7f0000000580)="$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") syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) getpid() 3.901990963s ago: executing program 0 (id=1824): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1, r3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 3.207182332s ago: executing program 8 (id=1827): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r0}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x80000000000725) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x800000000005) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000380)="f00fbab70c0000006d66b8f1008ed0430f01f266470ffdae78000000260f01c5400faf2d0000008066460f38824982260fe8726948b8f87f0000000000000f23d00f21f8353000000a0f23f8f3460f07", 0x50}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000005c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x381000, 0x0) readahead(r6, 0x6, 0x1000009) sched_setscheduler(0x0, 0x2, 0x0) getpid() 3.108973917s ago: executing program 8 (id=1828): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x5573, &(0x7f0000005c80)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000740)={0x0, 0x0, "9227fc407fa99d604d8b2387ab8a101d"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_connect(0x3, 0x62, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2405"], 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x1c}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x40080}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="021b9100"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x40042, 0x0) 3.024993461s ago: executing program 0 (id=1829): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x1d59, 0x4) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x10800, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x7}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x9, 0x602) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) 1.891614439s ago: executing program 0 (id=1831): r0 = syz_io_uring_setup(0x47a4, &(0x7f0000000300)={0x0, 0x161b, 0x390, 0x1, 0x400201}, &(0x7f0000003400), &(0x7f0000000080)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r0}, 0x0, 0x0) (async) syz_io_uring_setup(0x10278e, &(0x7f0000000280)={0x0, 0x87974, 0x10, 0x0, 0x8, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000180)) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xa) (async) io_uring_enter(r0, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) (async, rerun: 64) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 1.819902842s ago: executing program 0 (id=1833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x80000003) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x50) 1.753401315s ago: executing program 3 (id=1836): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0xf, "f42a97b96d02674f51eae4da000000"}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="08006560eb78c69ca305b08a09ee66034ed6dbd82489826a8a935d0aedffcf69a0d18d429f94f738b4f61fbe82606e778ff9956cd80647e85c3864ef43aae5d7ca7c3ab50476a040801145712027c6ab732f735ae09fdec643a3c4aeaee4a97f33a94f29a42ce8f937b1f543459170ac9fe95b4dad4f3208a87866f6034ae3eb514445ea2053a695794de81ab87abc87b4e36223f92f06", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) fcntl$setlease(r1, 0x400, 0x2) 1.579450973s ago: executing program 3 (id=1839): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1, r3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 1.317292334s ago: executing program 8 (id=1841): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000046b6655f94f8c03c5aa890000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRESDEC=r0, @ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='xprtrdma_frwr_maperr\x00', r2, 0x0, 0xf}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x12) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r5) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c98803e8f6f3d", @ANYRESHEX=r7, @ANYBLOB=',\x00']) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x402c010}, 0x40010) pipe(0x0) 1.183262449s ago: executing program 2 (id=1843): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x34) pwrite64(r0, &(0x7f0000000180)='+', 0x1, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/176) r2 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000100)={0x19980330, r2}, &(0x7f0000000240)={0x2, 0xe7, 0x5, 0x5, 0x438, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000000000003000000000400000004000000030000000000080000000003000000000100000005000000389800000061613000"], &(0x7f00000005c0)=""/161, 0x4d, 0xa1, 0x1, 0x5f}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001b00)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000005000000080000007a00000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100d13af80000000000000000000000000000000020000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000008000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.18204213s ago: executing program 2 (id=1844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600007d5ccd23fe56275300ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r6 = socket(0x1e, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x26000, 0x0) write$binfmt_misc(r6, &(0x7f0000000400), 0x2000011a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010829bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="28806c288887701900a88fd49fbd00288036ec"], 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x10001, 0xb9, &(0x7f0000000380)=""/185, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1], 0x0, 0x10, 0x200}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 988.781548ms ago: executing program 4 (id=1845): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000013c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0x1, 0xfff3}, {0x7, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 963.414949ms ago: executing program 4 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={0x0}}, 0x44080) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 899.834832ms ago: executing program 0 (id=1847): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x84483, 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 32) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (rerun: 32) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) 853.001874ms ago: executing program 0 (id=1848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa00000000c20000000800450000b00000000000119078004904367b79af3cf0439f47b70000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012be74efb9f49fcdb8f080c26a04883ad5c8c825f6fd1207c3903bbde2db4979f35c6fab8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b53669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc100"/190], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{0x0}, {&(0x7f00000005c0)=""/18, 0x12}, {&(0x7f0000000e00)=""/199, 0xc7}], 0x3}, 0xff}], 0x1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 758.649488ms ago: executing program 3 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008024eec6f856aaabff8674e92e72bbf62dcfdbe8434ae2987430120a87d87db304fb0b295c2d3879b4424cf439083562de7c58e25eeb18c568db61c6b450999676438e2ec69344d68a9d5994c36b00e2fffffffffc427e7ac89f11ed8f1d0d37289d9130b07fca6c802ac45a000043e406851190fed46933", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="db009b45b4ec7cd8b04858e84567e0fac47323d29c3fde23e3d8adc4f36a8ab95221ac3b73ae09d4f938781d1a461e16178ae7f388665cd62c625901f8586d6c278d57965ecf2bbf4166ff833bc7e9d23fa82ecf71703216e81ea749", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a24010000000201020524040000090500000000000000072501f65422340725010000000009050000000000000009"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 415.723483ms ago: executing program 8 (id=1850): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0xd9d7, 0x5) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x6305) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0x4c922638, 0x7ff, 0x9, 0x10000, 0x6, 0x0, 0x0, 0x4}}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x435, 0x0, 0x0, 0xb, 0x0, "79820fde98abdd00b771eecbbba14d848fe8cfcf2d39005755e339df2e3474d107e13a2627ce2bb3dc9f78349e903821e81be586a7285644943e9a00", "ba646f857993f0c578e89e261b671e6140900226f22536df22213419a59993776ead1d59f992c43c0e45ac5209ccdc7bae82c18100", "e46151dd3200c500020000eb0000000000000000000000000e00", [0xfffffffffffffffe, 0xfffffffffffffffc]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)}, 0x4000001) recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102) close(r5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82) openat$ptp0(0xffffffffffffff9c, 0x0, 0x161300, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 412.090973ms ago: executing program 4 (id=1851): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x1, 0x6, 0x1) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$netlink(0x10, 0x3, 0xc) futex_waitv(&(0x7f0000001980)=[{0xfff, &(0x7f0000000000)=0x10000, 0x82}, {0x2, &(0x7f0000000040)=0x8, 0x82}, {0x8, &(0x7f0000000080)=0x8, 0x80}, {0x5, &(0x7f00000000c0)=0x1ff, 0x2}, {0x2cad0270, &(0x7f0000000100)=0x7, 0x82}, {0x4, &(0x7f0000000140)=0x1, 0x2}, {0xfffffffffffffffc, &(0x7f0000000180)=0x5b, 0x2}, {0x4, &(0x7f00000001c0)=0x80000000, 0x2}, {0x7f, &(0x7f0000000200)=0x7, 0x2}, {0x2, &(0x7f0000000240)=0x6, 0x82}, {0x9, &(0x7f0000000280)=0x25ca, 0x2}, {0x3, &(0x7f00000002c0)=0x1, 0x82}, {0xffffffff, &(0x7f0000000300)=0x8000000000000001, 0x82}, {0x2, &(0x7f0000000340)=0x2, 0x82}, {0xff, &(0x7f0000000380)=0x3273a021, 0x82}, {0x9, &(0x7f00000003c0)=0x9, 0x82}, {0xffff, &(0x7f0000000400)=0xbf3, 0x2}, {0x7490, &(0x7f0000000440)=0x2, 0x2}, {0x1, &(0x7f0000000480)=0x8, 0x2}, {0x2, &(0x7f00000004c0)=0x6}, {0xf8, &(0x7f0000000500)=0x3cc64891, 0x2}, {0x8000000000000001, &(0x7f0000000540)=0x8, 0x82}, {0x9, &(0x7f0000000580)=0x6, 0x82}, {0x5, &(0x7f00000005c0)=0x2, 0x82}, {0x8, &(0x7f0000000600)=0x5, 0x3}, {0x5, &(0x7f0000000640)=0x7, 0x2}, {0x2, &(0x7f0000000680)=0xffffffffffffffff, 0x2}, {0x16, &(0x7f00000006c0)=0x2, 0x2}, {0x8, &(0x7f0000000700)=0x100000001, 0x2}, {0x0, &(0x7f0000000740)=0x7, 0x2}, {0x6, &(0x7f0000000780)=0x40, 0x2}, {0x7fffffff, &(0x7f00000007c0)=0x1, 0x2}, {0x7, &(0x7f0000000800)=0xb, 0x106}, {0x7, &(0x7f0000000840)=0x1, 0x2}, {0x0, &(0x7f0000000880)=0x7, 0x2}, {0x7fff, &(0x7f00000008c0)=0x80000000, 0x2}, {0x288, &(0x7f0000000900)=0x4e, 0x82}, {0x6, &(0x7f0000000940)=0x3ee, 0x2}, {0x6, &(0x7f0000000980)=0xea9, 0x82}, {0x1, &(0x7f00000009c0)=0xd, 0x2}, {0x2, &(0x7f0000000a00)=0x80, 0x2}, {0x6606, &(0x7f0000000a40)=0x8, 0x82}, {0x5, &(0x7f0000000a80)=0xd09, 0x2}, {0xb6e5, &(0x7f0000000ac0)=0xe64f, 0x82}, {0xfffffffffffffff8, &(0x7f0000000b00)=0x101, 0x2}, {0xd79, &(0x7f0000000b40)=0x1, 0x82}, {0xfffffffffffffd00, &(0x7f0000000b80)=0x9, 0x82}, {0x8000000000000, &(0x7f0000000bc0)=0x9, 0x82}, {0x8, &(0x7f0000000c00)=0xa, 0x82}, {0xe1, &(0x7f0000000c40)=0x2, 0x2}, {0x1ff, &(0x7f0000000c80)=0x8, 0x2}, {0x100000000, &(0x7f0000000cc0)=0x9, 0x2}, {0x10, &(0x7f0000000d00)=0x20e0, 0x2}, {0x64, &(0x7f0000000d40)=0x200, 0x82}, {0x3, &(0x7f0000000d80)=0x3, 0x82}, {0x800, &(0x7f0000000dc0)=0x5, 0x2}, {0x5, &(0x7f0000000e00)=0x8, 0x2}, {0x3, &(0x7f0000000e40)=0x2, 0x82}, {0x3ff, &(0x7f0000000e80)=0x4, 0x82}, {0x7, &(0x7f0000000ec0)=0xf, 0x2}, {0x3, &(0x7f0000000f00)=0xffffffffffffffff, 0x82}, {0xffffffffffff5c26, &(0x7f0000000f40)=0x3, 0x82}, {0x5, &(0x7f0000000f80)=0x5, 0x2}, {0x2, &(0x7f0000000fc0)=0xffff, 0x2}, {0x9, &(0x7f0000001000)=0xd, 0x2}, {0x0, &(0x7f0000001040), 0x2}, {0x28, &(0x7f0000001080)=0x3, 0x82}, {0x857, &(0x7f00000010c0)=0x98, 0x82}, {0x3, &(0x7f0000001100)=0x6, 0x82}, {0x2, &(0x7f0000001140)=0x80000001, 0x2}, {0x8000000000000000, &(0x7f0000001180)=0x8, 0x82}, {0x2, &(0x7f00000011c0)=0x2dc, 0x82}, {0x6, &(0x7f0000001200)=0x9, 0x82}, {0x9, &(0x7f0000001240)=0x3, 0x82}, {0x4, &(0x7f0000001280)=0x6, 0x2}, {0x1, &(0x7f00000012c0)=0x6, 0x82}, {0x8, &(0x7f0000001300)=0x81, 0x2}, {0x10001, &(0x7f0000001340)=0x80, 0x2}, {0x3, &(0x7f0000001380)=0x7, 0x2}, {0x0, &(0x7f00000013c0)=0x8, 0x82}, {0x5, &(0x7f0000001400)=0x6ec, 0x82}, {0xff, &(0x7f0000001440)=0x1, 0xf5d05d4f122e3509}, {0x7fff, &(0x7f0000001480)=0x9, 0x82}, {0x8, &(0x7f00000014c0)=0x6, 0x6}, {0x0, &(0x7f0000001500)=0x1, 0xe1161a33157e95c2}, {0xfff, &(0x7f0000001540)=0x3, 0x265985be5ce7aedc}, {0x5, &(0x7f0000001580)=0x200, 0x82}, {0x4, &(0x7f00000015c0)=0x7, 0x2}, {0x3, &(0x7f0000001600)=0x8, 0x82}, {0x2, &(0x7f0000001640)=0x9, 0x2}, {0x6, &(0x7f0000001680)=0x3, 0x2}, {0x3, &(0x7f00000016c0)=0xffffffff, 0x2}, {0x8, &(0x7f0000001700)=0x1, 0x2}, {0x6, &(0x7f0000001740)=0x5, 0x82}, {0x756, &(0x7f0000001780)=0xa58a, 0x2}, {0x7, &(0x7f00000017c0)=0x9, 0x2}, {0xf, &(0x7f0000001800)=0x7, 0x2}, {0x3, &(0x7f0000001840)=0x10000, 0x2}, {0x2e91, &(0x7f0000001880)=0x8000, 0x82}, {0x80000000, &(0x7f00000018c0)=0x4fe, 0x82}, {0x8, &(0x7f0000001900), 0x82}, {0x5, &(0x7f0000001940)=0x800, 0x82}], 0x66, 0x0, &(0x7f0000002340)={0x77359400}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002500)={@empty, @remote, 0x0}, &(0x7f0000002540)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002740)={&(0x7f0000002580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x8, [@enum64={0x9, 0x9, 0x0, 0x13, 0x0, 0xa, [{0x5, 0x0, 0x2}, {0x4, 0xdd, 0xa7d}, {0x101, 0xa, 0x5}, {0xe, 0x6, 0x3}, {0x9, 0x5, 0x6b}, {0x6, 0x0, 0xf4}, {0x2, 0x9, 0x6}, {0xd, 0x2000000, 0x7f}, {0xe, 0xffff8001, 0x8}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x61, 0x30, 0x0, 0x30, 0x61, 0x61]}}, &(0x7f0000002640)=""/197, 0xa8, 0xc5, 0x0, 0x5, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x14, 0x21, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x2, 0x4, 0xb, 0x2, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, @generic={0xa7, 0x3, 0xe, 0x1, 0x25be}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000002900)='GPL\x00', 0x5, 0xd2, &(0x7f0000002940)=""/210, 0x41000, 0x5, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000002a40)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000002a80)=[0xffffffffffffffff], &(0x7f0000002ac0)=[{0x5, 0x2, 0x8, 0x6}, {0x2, 0x2, 0xe}, {0x3, 0x5, 0x8, 0x2}, {0x3, 0x5}], 0x10, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x5, &(0x7f0000002380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x24}, @jmp={0x5, 0x0, 0xd, 0x6, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f00000023c0)='GPL\x00', 0x9, 0xf5, &(0x7f0000002400)=""/245, 0x40f00, 0x51, '\x00', r3, @fallback=0x13, r4, 0x8, &(0x7f0000002780)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x7, 0x0, &(0x7f0000002bc0)=[{0x0, 0xf, 0xb, 0xe}, {0x2, 0x1, 0xa, 0x9}, {0x3, 0x3, 0xc, 0x5}, {0x5, 0x3, 0x5, 0x7}, {0x4, 0x4, 0x7, 0x7}, {0x2, 0x5, 0xd, 0x7}, {0x3, 0x2, 0x10, 0x5}], 0x10, 0x46}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002d00), 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x18, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040014}, 0x20000041) syz_emit_ethernet(0x193, &(0x7f0000002e00)={@random="8003107263c3", @remote, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0xffff8}, {0x0, 0x0, 0x1}, {0x5}, {0x6}, {0xfffff, 0x0, 0x1}, {0xe7d}], @ipv6=@tipc_packet={0x6, 0x6, "f29377", 0x13d, 0x6, 0xfe, @private2, @mcast2, {[@routing={0x3b, 0x8, 0x1, 0x8, 0x0, [@private0, @empty, @private0, @loopback]}, @hopopts={0x3c, 0x11, '\x00', [@generic={0x80, 0x87, "7cbcef4fe40efb8cf25d208c4abd979ccd8dc08138fc7b773a519e4004e3b8951f0354b0ee25cffb95da55aa5bac71312f2458e139ec1549f2dae39cb8f71ce8ba35aafabac668190557ef7cace545e9aaa87a2a854f257d5d28d00ed2987217137db2db6e26f2e9a4f880f492574d40edce82a8fe68584c782841331966613219e925132a5067"}]}, @hopopts={0x3d, 0x4, '\x00', [@pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x5, [0x9, 0x4, 0x8000000000000000]}}]}, @fragment={0x2b, 0x0, 0x8, 0x1, 0x0, 0x9, 0x67}], @payload_direct={{{{0x25, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0xfff, 0x3, 0x1, 0x4e24, 0x4e24}, 0x1, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, &(0x7f0000002fc0)={0x0, 0x4, [0x2da, 0x2a4, 0xdfe, 0xafd]}) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000003000), &(0x7f0000003040)=0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000031c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x34, r6, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x17}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x8801) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000003200)={0x10, 0x0, 0x25dfdbfb, 0x41428808}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r9 = userfaultfd(0x80000) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000003240)={0xaa, 0x320}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000032c0), r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10001820}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x28, r10, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x28}}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000033c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000003400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r12, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003540)={&(0x7f0000003480)={0xa0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf719034e31642d4c}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004001}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r11, &(0x7f00000038c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003880)={&(0x7f0000003640)={0x214, r6, 0x62c, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {}, @device_b, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1a5, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_b, @initial, {0x9, 0x7}}, 0x1, @default, 0x10, @val={0x0, 0x9, @random="bfa07f2fafcad01ddf"}, @void, @void, @val={0x4, 0x6, {0x2, 0x0, 0x9, 0x7}}, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x400, 0x957, 0x0, 0x81, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0xea14, 0x6}}, @void, @void, [{0xdd, 0x66, "a3a76c2110e75251e0de83c6c3f02cff65f92c5cd709774d35343a51956a644c8e571b28b96dc0e911d84283303b3a9542ea6ecf46acb8cad15ddb7ccab9ba8c04d5e972c0e32ac02e9d7ff32e5a3adf43000bee761c3f6971bfb00e4223403e377f363d49a5"}, {0xdd, 0xe4, "eed6d86a2ccbb9e8f587ed4fb535bb73390064b1be011f029d7c9623f09b4836a47a4e573e4e139bf0a398bac32b54eeaa6841ac2ee0a6dbe6f4d0cb8e291944cabd56ece4c3525f5b030656d14985e01a385a32532cd766f50724af9ed11edec543c6cdb2f12e4f7ddd2356ed6d4b1ceeb40ba57ef7081805a4656e4429fc75d035315bf01f574e8ef1a133d024ba03270bc4ba65c62c38574e7c3db6051c333bdb6ee69cb03d58f891b6b81e97bbfea9b40e26792aae2c6d999abe9b667db5d07d2bc59a02ff2e8e799d114e645d828a9227a32e61026c00359e6028eeca140a916643"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000039c0)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4) 401.193254ms ago: executing program 4 (id=1852): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000000200000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300000000000000000000000001000000d546c82b2b40ee5a9346c8bc55ce83e530d9afb18722d2d9eb561a6dc1d13843172e07b0ea5acc5c54d5d7301ab2f854f3b094fc68e890634b923483af6ad3d9586ce29007cb571a71ca829b028b2b52c5833e1cc5b35a0ea3374051855526903cfa55f42af7fc6e48b833"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x64, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x1, 0x10}, {0xc, 0x8}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7f8a}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x7fffffff}]}, 0x64}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) prlimit64(r2, 0xf, &(0x7f00000000c0)={0x1000, 0xa7c}, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5140000006ce5742c0012800b96764e32c94c4a666500001c0002800c00220001010000000000000c0021000900000000020000"], 0x4c}, 0x1, 0x0, 0x0, 0x20048011}, 0x240400c4) 376.285714ms ago: executing program 2 (id=1853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) (async) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) dup(r0) (async) r2 = dup(r0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, 0x0, r4) (async) setresgid(r3, 0x0, r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x21, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r6 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r7) (async) keyctl$invalidate(0x15, r7) keyctl$read(0xb, r7, &(0x7f0000000100)=""/117, 0x75) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 311.739287ms ago: executing program 4 (id=1854): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x6c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10010, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRESHEX], 0x1, 0x2cb, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0) close(r5) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) unlink(&(0x7f0000000580)='./file0/file0\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_pidfd_open(0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='kvm_msi_set_irq\x00', r1, 0x0, 0x8}, 0x18) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) 267.879029ms ago: executing program 2 (id=1855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000181100"/21, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 89.548447ms ago: executing program 2 (id=1856): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) 82.104577ms ago: executing program 2 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000009000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000740)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) (async) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) readv(r11, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/175, 0xaf}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1858): syz_usb_connect(0x0, 0x10e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0) kernel console output (not intermixed with test programs): ge0: port 2(bridge_slave_1) entered disabled state [ 331.682316][ T614] device bridge_slave_0 left promiscuous mode [ 331.688573][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.696646][ T614] device veth0_vlan left promiscuous mode [ 331.927474][ T286] EXT4-fs (loop3): unmounting filesystem. [ 331.979990][ T4895] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 332.281724][ T4913] FAULT_INJECTION: forcing a failure. [ 332.281724][ T4913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.294831][ T4913] CPU: 1 PID: 4913 Comm: syz.0.1207 Not tainted syzkaller #0 [ 332.302199][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.312247][ T4913] Call Trace: [ 332.315514][ T4913] [ 332.318425][ T4913] __dump_stack+0x21/0x24 [ 332.322734][ T4913] dump_stack_lvl+0xee/0x150 [ 332.327305][ T4913] ? __cfi_dump_stack_lvl+0x8/0x8 [ 332.332322][ T4913] dump_stack+0x15/0x24 [ 332.336484][ T4913] should_fail_ex+0x3d4/0x520 [ 332.341146][ T4913] should_fail+0xb/0x10 [ 332.345309][ T4913] should_fail_usercopy+0x1a/0x20 [ 332.349575][ T334] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 332.350327][ T4913] _copy_to_user+0x1e/0x90 [ 332.362235][ T4913] simple_read_from_buffer+0xe9/0x160 [ 332.367588][ T4913] proc_fail_nth_read+0x19a/0x210 [ 332.372596][ T4913] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 332.378132][ T4913] ? security_file_permission+0x94/0xb0 [ 332.383687][ T4913] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 332.389208][ T4913] vfs_read+0x26e/0x8c0 [ 332.393345][ T4913] ? __cfi_vfs_read+0x10/0x10 [ 332.397998][ T4913] ? __kasan_check_write+0x14/0x20 [ 332.403090][ T4913] ? mutex_lock+0x8d/0x1a0 [ 332.407485][ T4913] ? __cfi_mutex_lock+0x10/0x10 [ 332.412322][ T4913] ? __fdget_pos+0x2cd/0x380 [ 332.416887][ T4913] ? ksys_read+0x71/0x240 [ 332.421194][ T4913] ksys_read+0x140/0x240 [ 332.425439][ T4913] ? __cfi_ksys_read+0x10/0x10 [ 332.430200][ T4913] ? fpregs_restore_userregs+0x128/0x260 [ 332.435817][ T4913] __x64_sys_read+0x7b/0x90 [ 332.440323][ T4913] x64_sys_call+0x2f/0x9a0 [ 332.444724][ T4913] do_syscall_64+0x4c/0xa0 [ 332.449117][ T4913] ? clear_bhb_loop+0x30/0x80 [ 332.453801][ T4913] ? clear_bhb_loop+0x30/0x80 [ 332.458474][ T4913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.464344][ T4913] RIP: 0033:0x7f86e858e15c [ 332.468770][ T4913] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.488351][ T4913] RSP: 002b:00007f86e94f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.496741][ T4913] RAX: ffffffffffffffda RBX: 00007f86e87e5fa0 RCX: 00007f86e858e15c [ 332.504716][ T4913] RDX: 000000000000000f RSI: 00007f86e94f10a0 RDI: 000000000000000a [ 332.512664][ T4913] RBP: 00007f86e94f1090 R08: 0000000000000000 R09: 0000000000000000 [ 332.520631][ T4913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.528581][ T4913] R13: 00007f86e87e6038 R14: 00007f86e87e5fa0 R15: 00007fffbfc1dd98 [ 332.536548][ T4913] [ 332.598720][ T334] usb 4-1: Using ep0 maxpacket: 8 [ 332.617647][ T334] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 332.644173][ T334] usb 4-1: config 0 has no interface number 0 [ 332.655982][ T334] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 332.677982][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.686377][ T334] usb 4-1: Product: syz [ 332.690755][ T334] usb 4-1: Manufacturer: syz [ 332.695400][ T334] usb 4-1: SerialNumber: syz [ 332.837832][ T334] usb 4-1: config 0 descriptor?? [ 333.365058][ T4897] x_tables: duplicate underflow at hook 2 [ 333.599293][ T4932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4932 comm=syz.0.1212 [ 333.630123][ T4897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4897 comm=syz.3.1200 [ 333.658892][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 333.835670][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'. [ 334.078223][ T334] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 334.084949][ T334] usb 4-1: No valid video chain found. [ 334.103167][ T334] usb 4-1: USB disconnect, device number 36 [ 334.140555][ T4948] SELinux: Context is not valid (left unmapped). [ 334.297414][ T4951] loop4: detected capacity change from 0 to 1024 [ 334.304076][ T4951] EXT4-fs: Ignoring removed orlov option [ 334.313935][ T4951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 334.330416][ T4951] loop7: detected capacity change from 0 to 7 [ 334.336913][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 334.346046][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.354133][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 334.363298][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.371317][ T4951] loop7: unable to read partition table [ 334.377131][ T4951] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 334.378214][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.399732][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.407767][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.416898][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.438836][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.447980][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.455982][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.465149][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.473129][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.482278][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.514126][ T4956] loop9: detected capacity change from 0 to 2048 [ 334.616187][ T4956] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 334.702421][ T4956] netlink: 172 bytes leftover after parsing attributes in process `syz.9.1217'. [ 334.806788][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 334.883103][ T4977] loop9: detected capacity change from 0 to 512 [ 334.939882][ T4978] 9pnet_fd: Insufficient options for proto=fd [ 334.946843][ T4977] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.003373][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 335.003386][ T28] audit: type=1400 audit(2000000211.680:1459): avc: denied { map } for pid=4976 comm="syz.9.1221" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 335.098665][ T866] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 335.193355][ T287] EXT4-fs (loop4): unmounting filesystem. [ 335.227605][ T4983] loop4: detected capacity change from 0 to 1024 [ 335.237491][ T4983] EXT4-fs: Ignoring removed i_version option [ 335.245321][ T4983] EXT4-fs (loop4): Test dummy encryption mode enabled [ 335.254230][ T4983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.258687][ T866] usb 4-1: device descriptor read/64, error -71 [ 335.272572][ T4981] loop9: detected capacity change from 0 to 512 [ 335.279374][ T4981] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.312804][ T4983] fscrypt: AES-256-XTS using blk-crypto-fallback [ 335.390840][ T287] EXT4-fs (loop4): unmounting filesystem. [ 335.447362][ T28] audit: type=1400 audit(2000000212.120:1460): avc: denied { getopt } for pid=4988 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.548678][ T866] usb 4-1: device descriptor read/64, error -71 [ 335.573383][ T5005] syz.4.1229[5005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.573491][ T5005] syz.4.1229[5005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.684329][ T5003] loop8: detected capacity change from 0 to 40427 [ 335.704909][ T5003] F2FS-fs (loop8): fault_injection options not supported [ 335.712982][ T5003] F2FS-fs (loop8): fault_type options not supported [ 335.728693][ T5003] F2FS-fs (loop8): Image doesn't support compression [ 335.736470][ T5003] F2FS-fs (loop8): invalid crc value [ 335.742836][ T5003] F2FS-fs (loop8): Found nat_bits in checkpoint [ 335.774309][ T5003] F2FS-fs (loop8): Start checkpoint disabled! [ 335.785191][ T5003] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 335.795046][ T5005] loop4: detected capacity change from 0 to 128 [ 335.811646][ T5003] netlink: 'syz.8.1228': attribute type 27 has an invalid length. [ 335.819628][ T866] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 335.819657][ T5005] FAT-fs (loop4): Unrecognized mount option "0000000000000000000000000000000000000000000T0Dވ֔WЯdD b1K0xffffffffffffffff" or missing value [ 335.852722][ T5003] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.859829][ T5003] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.889439][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.902906][ T3623] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 335.914335][ T5015] device veth0_vlan left promiscuous mode [ 335.921167][ T5015] device veth0_vlan entered promiscuous mode [ 335.928151][ T5015] device veth1_macvtap left promiscuous mode [ 335.934642][ T5015] device veth1_macvtap entered promiscuous mode [ 335.958239][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.967259][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.976310][ T866] usb 4-1: device descriptor read/64, error -71 [ 335.979200][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.999201][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.006242][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.021530][ T614] kworker/u4:8: attempt to access beyond end of device [ 336.021530][ T614] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 336.035938][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.044465][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.052684][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.059712][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.067297][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.075829][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 336.088727][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.096917][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 336.105344][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.114656][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.123045][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.131306][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.139442][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.147636][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.160472][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.170565][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.178720][ T424] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 336.184346][ T5019] loop9: detected capacity change from 0 to 40427 [ 336.186907][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.196752][ T5019] F2FS-fs (loop9): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 336.208590][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.219148][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.228314][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.232379][ T5019] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 336.236593][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.249807][ T5019] F2FS-fs (loop9): invalid crc value [ 336.253210][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.259429][ T866] usb 4-1: device descriptor read/64, error -71 [ 336.266139][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.280009][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.288005][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.296148][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.303745][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.311069][ T5019] F2FS-fs (loop9): Found nat_bits in checkpoint [ 336.311281][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.325512][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.333895][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.341638][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.359773][ T424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.370830][ T424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.384384][ T424] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.388925][ T866] usb usb4-port1: attempt power cycle [ 336.399446][ T5019] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 336.400405][ T424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.406468][ T5019] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 336.438591][ T424] usb 5-1: Product: syz [ 336.443064][ T424] usb 5-1: Manufacturer: syz [ 336.455592][ T424] usb 5-1: SerialNumber: syz [ 337.055430][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.210140][ T866] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 337.262018][ T866] usb 4-1: device descriptor read/8, error -71 [ 337.448773][ T59] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 337.613589][ T5059] loop9: detected capacity change from 0 to 512 [ 337.708813][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 337.716265][ T59] usb 9-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 337.793150][ T5059] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1240: inode has both inline data and extents flags [ 337.819080][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.886737][ T5059] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1240: couldn't read orphan inode 15 (err -117) [ 337.980138][ T59] usb 9-1: config 0 descriptor?? [ 338.045415][ T59] ums-jumpshot 9-1:0.0: USB Mass Storage device detected [ 338.072570][ T5059] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 338.125244][ T59] ums-jumpshot 9-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 338.168283][ T5066] loop3: detected capacity change from 0 to 512 [ 338.237054][ T5057] loop8: detected capacity change from 0 to 16 [ 338.247932][ T5057] erofs: Unknown parameter '#' [ 338.299571][ T866] usb 4-1: device descriptor read/8, error -71 [ 338.321688][ T5066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 338.341091][ T3774] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.393661][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 338.437884][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 338.486396][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.493892][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.508560][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 338.519926][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.530335][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 338.538465][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.546676][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.554747][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.563064][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.571286][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.592514][ T424] usb 5-1: 0:2 : does not exist [ 338.600165][ T424] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 338.611820][ T424] usb 5-1: USB disconnect, device number 38 [ 338.706541][ T5075] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 338.714408][ T5075] netlink: 'syz.4.1244': attribute type 2 has an invalid length. [ 338.723511][ T5075] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 338.731290][ T5075] netlink: 'syz.4.1244': attribute type 2 has an invalid length. [ 338.741886][ T5075] device wg2 entered promiscuous mode [ 338.819279][ T3623] udevd[3623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.899452][ T286] EXT4-fs (loop3): unmounting filesystem. [ 339.105667][ T5085] loop3: detected capacity change from 0 to 1024 [ 339.163100][ T5085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 340.464559][ T286] EXT4-fs (loop3): unmounting filesystem. [ 340.472076][ T40] usb 9-1: USB disconnect, device number 5 [ 340.578784][ T5103] 9pnet_fd: Insufficient options for proto=fd [ 340.728400][ T5101] loop9: detected capacity change from 0 to 40427 [ 340.744748][ T5101] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 340.765188][ T5101] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 340.779486][ T5101] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 340.849831][ T5126] loop4: detected capacity change from 0 to 512 [ 340.866087][ T5126] EXT4-fs (loop4): Test dummy encryption mode enabled [ 340.873687][ T5126] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 340.883626][ T5126] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 340.905038][ T5126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 340.916592][ T5126] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 340.931078][ T5126] EXT4-fs (loop4): Remounting filesystem read-only [ 340.945287][ T287] EXT4-fs (loop4): unmounting filesystem. [ 340.985010][ T5130] loop4: detected capacity change from 0 to 512 [ 341.000827][ T5130] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 524322)! [ 341.026027][ T5130] EXT4-fs (loop4): group descriptors corrupted! [ 341.040585][ T5139] bridge0: port 3(gretap0) entered blocking state [ 341.058647][ T5139] bridge0: port 3(gretap0) entered disabled state [ 341.065504][ T5139] device gretap0 entered promiscuous mode [ 341.070166][ T5121] loop3: detected capacity change from 0 to 40427 [ 341.094869][ T5142] loop4: detected capacity change from 0 to 1024 [ 341.101656][ T5139] bridge0: port 3(gretap0) entered blocking state [ 341.108108][ T5139] bridge0: port 3(gretap0) entered forwarding state [ 341.122964][ T5121] F2FS-fs (loop3): Found nat_bits in checkpoint [ 341.176545][ T5121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 341.238673][ T28] audit: type=1400 audit(2000000217.910:1461): avc: denied { bind } for pid=5158 comm="syz.8.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 341.298668][ T866] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 341.490845][ T866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.505642][ T866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.520117][ T866] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 341.535830][ T866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.587015][ T866] usb 10-1: config 0 descriptor?? [ 342.464026][ T5197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=5197 comm=syz.0.1276 [ 342.748381][ T28] audit: type=1326 audit(2000000219.420:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 342.794965][ T28] audit: type=1326 audit(2000000219.460:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 342.819103][ T28] audit: type=1326 audit(2000000219.460:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 342.848467][ T28] audit: type=1326 audit(2000000219.460:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 342.872620][ T28] audit: type=1326 audit(2000000219.460:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 342.899059][ T5207] overlayfs: failed to clone upperpath [ 343.064672][ T866] steelseries_srws1 0003:1038:1410.000F: report_id 3157846655 is invalid [ 343.073261][ T28] audit: type=1326 audit(2000000219.460:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 343.097058][ T286] syz-executor: attempt to access beyond end of device [ 343.097058][ T286] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 343.111157][ T866] steelseries_srws1 0003:1038:1410.000F: item 0 4 1 8 parsing failed [ 343.120722][ T5210] bridge0: port 2(erspan0) entered blocking state [ 343.127172][ T5210] bridge0: port 2(erspan0) entered forwarding state [ 343.129050][ T28] audit: type=1326 audit(2000000219.500:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 343.141144][ T866] steelseries_srws1 0003:1038:1410.000F: parse failed [ 343.157622][ T28] audit: type=1326 audit(2000000219.500:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 343.176317][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.187430][ T28] audit: type=1326 audit(2000000219.740:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 343.206017][ T866] steelseries_srws1: probe of 0003:1038:1410.000F failed with error -22 [ 343.246874][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 343.286218][ T5210] bridge0: port 3(vlan3) entered blocking state [ 343.292508][ T5210] bridge0: port 3(vlan3) entered forwarding state [ 343.301349][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 343.309640][ T866] usb 10-1: USB disconnect, device number 2 [ 343.328089][ T614] bridge0: port 1(veth3) entered blocking state [ 343.334360][ T614] bridge0: port 1(veth3) entered forwarding state [ 343.354785][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 343.547673][ T5216] 9pnet_fd: Insufficient options for proto=fd [ 343.836069][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.857203][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 343.893025][ T5224] syz.0.1282[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.893086][ T5224] syz.0.1282[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.895700][ T5229] loop9: detected capacity change from 0 to 512 [ 343.918797][ T5224] ------------[ cut here ]------------ [ 343.927378][ T5224] WARNING: CPU: 1 PID: 5224 at mm/page_alloc.c:5841 __alloc_pages+0x272/0x450 [ 343.936283][ T5224] Modules linked in: [ 343.940226][ T5224] CPU: 1 PID: 5224 Comm: syz.0.1282 Not tainted syzkaller #0 [ 343.947594][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.957691][ T5224] RIP: 0010:__alloc_pages+0x272/0x450 [ 343.963177][ T5224] Code: 0c 25 28 00 00 00 48 3b 8c 24 c0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 d3 6d bf 05 01 <0f> 0b eb a5 a9 00 00 08 00 48 8b 54 24 08 75 17 44 89 f6 81 e6 7f [ 343.982820][ T5224] RSP: 0018:ffffc9000666f680 EFLAGS: 00010246 [ 343.988911][ T5224] RAX: ffffc9000666f600 RBX: 000000000000000c RCX: 0000000000000000 [ 343.997015][ T5224] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000666f708 [ 344.005029][ T5224] RBP: ffffc9000666f788 R08: dffffc0000000000 R09: ffffc9000666f6f0 [ 344.013022][ T5224] R10: fffff52000ccdee1 R11: 1ffff92000ccdede R12: dffffc0000000000 [ 344.021037][ T5224] R13: 0000000000000000 R14: 0000000000040dc0 R15: 1ffff92000ccded4 [ 344.029038][ T5224] FS: 00007f86e94f16c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 344.037966][ T5224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.044580][ T5224] CR2: 0000200000006000 CR3: 0000000114d1e000 CR4: 00000000003506a0 [ 344.052591][ T5224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 344.060582][ T5224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.068559][ T5224] Call Trace: [ 344.071861][ T5224] [ 344.074791][ T5224] ? __cfi___alloc_pages+0x10/0x10 [ 344.079953][ T5224] __kmalloc_large_node+0xa1/0x1c0 [ 344.085071][ T5224] ? hashtab_init+0xcd/0x160 [ 344.089693][ T5224] __kmalloc+0xe0/0x1e0 [ 344.093869][ T5224] hashtab_init+0xcd/0x160 [ 344.098287][ T5224] symtab_init+0x40/0x60 [ 344.102555][ T5224] common_read+0x218/0x620 [ 344.106985][ T5224] ? __cfi_common_read+0x10/0x10 [ 344.111959][ T5224] policydb_read+0xb0f/0x25e0 [ 344.116650][ T5224] ? __cfi_policydb_read+0x10/0x10 [ 344.121794][ T5224] ? __kasan_kmalloc+0x95/0xb0 [ 344.126566][ T5224] ? security_load_policy+0x118/0xea0 [ 344.131958][ T5224] ? kmalloc_trace+0x40/0xb0 [ 344.136556][ T5224] security_load_policy+0x153/0xea0 [ 344.141798][ T5224] ? irqentry_exit+0x37/0x40 [ 344.146403][ T5224] ? exc_page_fault+0x5e/0xb0 [ 344.151108][ T5224] ? asm_exc_page_fault+0x27/0x30 [ 344.156160][ T5224] ? __cfi_security_load_policy+0x10/0x10 [ 344.161902][ T5224] ? copy_user_enhanced_fast_string+0xa/0x40 [ 344.167889][ T5224] sel_write_load+0x36f/0x5e0 [ 344.172602][ T5224] ? __cfi_sel_write_load+0x10/0x10 [ 344.177821][ T5224] ? security_file_permission+0x94/0xb0 [ 344.183402][ T5224] ? __cfi_sel_write_load+0x10/0x10 [ 344.188637][ T5224] vfs_write+0x40c/0xca0 [ 344.192893][ T5224] ? __cfi_vfs_write+0x10/0x10 [ 344.197668][ T5224] ? __kasan_check_write+0x14/0x20 [ 344.202814][ T5224] ? mutex_lock+0x8d/0x1a0 [ 344.207255][ T5224] ? __cfi_mutex_lock+0x10/0x10 [ 344.212148][ T5224] ? __fdget_pos+0x2cd/0x380 [ 344.216746][ T5224] ? ksys_write+0x71/0x240 [ 344.221207][ T5224] ksys_write+0x140/0x240 [ 344.225537][ T5224] ? __cfi_ksys_write+0x10/0x10 [ 344.230429][ T5224] ? fpregs_restore_userregs+0x128/0x260 [ 344.236066][ T5224] __x64_sys_write+0x7b/0x90 [ 344.240733][ T5224] x64_sys_call+0x27b/0x9a0 [ 344.245247][ T5224] do_syscall_64+0x4c/0xa0 [ 344.249848][ T5224] ? clear_bhb_loop+0x30/0x80 [ 344.254719][ T5224] ? clear_bhb_loop+0x30/0x80 [ 344.259475][ T5224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.265386][ T5224] RIP: 0033:0x7f86e858f749 [ 344.270254][ T5224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.290089][ T5224] RSP: 002b:00007f86e94f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.298520][ T5224] RAX: ffffffffffffffda RBX: 00007f86e87e5fa0 RCX: 00007f86e858f749 [ 344.306685][ T5224] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000000 [ 344.314706][ T5224] RBP: 00007f86e8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 344.322819][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.330822][ T5224] R13: 00007f86e87e6038 R14: 00007f86e87e5fa0 R15: 00007fffbfc1dd98 [ 344.338849][ T5224] [ 344.341996][ T5224] ---[ end trace 0000000000000000 ]--- [ 344.455811][ T5239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1288'. [ 344.914144][ T5239] loop3: detected capacity change from 0 to 512 [ 344.927141][ T5239] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 345.048330][ T5241] loop4: detected capacity change from 0 to 512 [ 345.816290][ T5229] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.834318][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 345.834731][ T5229] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 345.843276][ T5241] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.928831][ T5229] EXT4-fs error (device loop9): ext4_acquire_dquot:6803: comm syz.9.1285: Failed to acquire dquot type 0 [ 345.942798][ T5224] SELinux: failed to load policy [ 345.964138][ T5229] EXT4-fs (loop9): 1 truncate cleaned up [ 345.970071][ T5229] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 346.650720][ T287] EXT4-fs (loop4): unmounting filesystem. [ 346.726717][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 347.328775][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 347.328790][ T28] audit: type=1326 audit(2000000224.010:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.9.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d9b8f749 code=0x7fc00000 [ 347.380175][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 347.408813][ T5265] loop3: detected capacity change from 0 to 512 [ 347.442684][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 347.464621][ T5265] EXT4-fs (loop3): 1 truncate cleaned up [ 347.477199][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 347.550577][ T5293] 9pnet_fd: Insufficient options for proto=fd [ 347.560464][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 347.579030][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 347.639872][ T5298] can0: slcan on ptm0. [ 347.649058][ T28] audit: type=1400 audit(2000000224.330:1491): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 347.708471][ T28] audit: type=1400 audit(2000000224.350:1492): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.732311][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1299'. [ 347.746294][ T5285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=237 sclass=netlink_route_socket pid=5285 comm=syz.8.1299 [ 347.777483][ T28] audit: type=1400 audit(2000000224.350:1493): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=9772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.836179][ T5302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1294: bg 0: block 465: padding at end of block bitmap is not set [ 347.850517][ T5309] can0 (unregistered): slcan off ptm0. [ 347.856353][ T5302] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 347.868630][ T5302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 347.868630][ T5302] [ 347.868996][ T28] audit: type=1400 audit(2000000224.350:1494): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=9772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.878258][ T5302] EXT4-fs (loop3): Total free blocks count 0 [ 347.878273][ T5302] EXT4-fs (loop3): Free/Dirty block details [ 347.913704][ T5302] EXT4-fs (loop3): free_blocks=0 [ 347.918972][ T5302] EXT4-fs (loop3): dirty_blocks=66 [ 347.924107][ T5302] EXT4-fs (loop3): Block reservation details [ 347.930103][ T5302] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 347.946522][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 347.982561][ T28] audit: type=1400 audit(2000000224.350:1495): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=9772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.026724][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 348.046709][ T28] audit: type=1400 audit(2000000224.500:1496): avc: denied { accept } for pid=5310 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 348.049007][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 348.096141][ T28] audit: type=1400 audit(2000000224.640:1497): avc: denied { read } for pid=5322 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.116508][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 348.133490][ T28] audit: type=1400 audit(2000000224.640:1498): avc: denied { open } for pid=5322 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.164977][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 348.185281][ T28] audit: type=1400 audit(2000000224.640:1499): avc: denied { getattr } for pid=5322 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.204204][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 348.250159][ T612] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 348.259637][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 348.276349][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 348.329410][ T5316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5316 comm=syz.4.1307 [ 349.177776][ T5373] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1315'. [ 349.216221][ T5377] overlayfs: failed to clone upperpath [ 349.238684][ T40] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 349.246309][ T424] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 349.438026][ T5400] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1322'. [ 349.451318][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 349.451353][ T424] usb 4-1: Using ep0 maxpacket: 16 [ 349.464105][ T424] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 349.475207][ T59] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 349.501456][ T40] usb 1-1: config index 0 descriptor too short (expected 546, got 34) [ 349.512515][ T424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.546173][ T40] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 349.557407][ T424] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 349.575124][ T40] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.585476][ T424] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 349.591299][ T5402] loop4: detected capacity change from 0 to 512 [ 349.594701][ T40] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 349.610362][ T5402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.617017][ T424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.619285][ T5402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.625243][ T40] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 349.642715][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.650931][ T424] usb 4-1: config 0 descriptor?? [ 349.656268][ T5402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102] [ 349.664814][ T40] usb 1-1: config 0 descriptor?? [ 349.669876][ T5402] System zones: 0-2, 18-18, 34-34 [ 349.675836][ T59] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 349.684226][ T59] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.694569][ T59] usb 10-1: config 0 has no interface number 0 [ 349.694907][ T5402] EXT4-fs error (device loop4): ext4_quota_enable:7011: inode #4: comm syz.4.1324: iget: immutable or append flags not allowed on symlinks [ 349.715496][ T5402] EXT4-fs error (device loop4): ext4_quota_enable:7014: comm syz.4.1324: Bad quota inode: 4, type: 1 [ 349.726603][ T5402] EXT4-fs warning (device loop4): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 349.741446][ T59] usb 10-1: New USB device found, idVendor=0465, idProduct=0023, bcdDevice=39.00 [ 349.741818][ T5402] EXT4-fs (loop4): mount failed [ 349.750833][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.763693][ T59] usb 10-1: Product: syz [ 349.768027][ T59] usb 10-1: Manufacturer: syz [ 349.772752][ T59] usb 10-1: SerialNumber: syz [ 349.777996][ T59] usb 10-1: config 0 descriptor?? [ 349.810251][ T5402] loop4: detected capacity change from 0 to 256 [ 349.856588][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 349.867784][ T424] belkin 0003:1020:0006.0010: global environment stack underflow [ 349.876049][ T424] belkin 0003:1020:0006.0010: item 0 1 1 11 parsing failed [ 350.625362][ T424] belkin 0003:1020:0006.0010: parse failed [ 350.631459][ T424] belkin: probe of 0003:1020:0006.0010 failed with error -22 [ 350.777797][ T424] usb 4-1: USB disconnect, device number 41 [ 351.194880][ T5430] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 351.218686][ T403] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 351.227175][ T5435] loop3: detected capacity change from 0 to 1024 [ 351.234693][ T5435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.243213][ T5435] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 351.254176][ T5435] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 351.263965][ T5435] EXT4-fs error (device loop3): ext4_get_journal_inode:5724: comm syz.3.1334: inode #1: comm syz.3.1334: iget: illegal inode # [ 351.277463][ T5435] EXT4-fs (loop3): no journal found [ 351.339744][ T5435] loop3: detected capacity change from 0 to 8192 [ 351.358242][ T5435] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 351.365461][ T5435] FAT-fs (loop3): Filesystem has been set read-only [ 351.390933][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 351.401382][ T403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.417221][ T403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.427183][ T403] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 351.436380][ T403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.445150][ T403] usb 5-1: config 0 descriptor?? [ 351.487258][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 351.597189][ T5449] loop3: detected capacity change from 0 to 512 [ 351.605785][ T5449] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1339: inode has both inline data and extents flags [ 351.638701][ T5449] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1339: couldn't read orphan inode 15 (err -117) [ 351.648838][ T870] usb 10-1: USB disconnect, device number 3 [ 351.665101][ T5449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 351.698806][ T424] usb 1-1: USB disconnect, device number 33 [ 351.736538][ T286] EXT4-fs (loop3): unmounting filesystem. [ 351.811477][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.037385][ T5465] loop9: detected capacity change from 0 to 1024 [ 353.002193][ T5464] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 353.050279][ T5465] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 353.500285][ T403] usbhid 5-1:0.0: can't add hid device: -71 [ 353.506254][ T403] usbhid: probe of 5-1:0.0 failed with error -71 [ 353.514053][ T403] usb 5-1: USB disconnect, device number 39 [ 353.607315][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 353.643905][ T5476] loop4: detected capacity change from 0 to 1024 [ 353.763282][ T3626] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 353.774152][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1346'. [ 353.858782][ T5499] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 353.869546][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 353.869560][ T28] audit: type=1400 audit(2000000230.550:1507): avc: denied { relabelto } for pid=5498 comm="syz.4.1352" name="file0" dev="tmpfs" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 353.916492][ T28] audit: type=1400 audit(2000000230.550:1508): avc: denied { associate } for pid=5498 comm="syz.4.1352" name="file0" dev="tmpfs" ino=1564 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 353.988327][ T28] audit: type=1400 audit(2000000230.640:1509): avc: denied { rmdir } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 354.060917][ T5509] kvm [5508]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 354.069369][ T5509] kvm [5508]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 354.171389][ T5514] loop3: detected capacity change from 0 to 256 [ 354.178075][ T5514] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 355.082871][ T5521] sch_fq: defrate 0 ignored. [ 355.099608][ T5521] device batadv_slave_1 entered promiscuous mode [ 355.130841][ T5520] device batadv_slave_1 left promiscuous mode [ 355.405535][ T28] audit: type=1326 audit(2000000232.080:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.0.1367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x0 [ 355.488654][ T1134] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 355.663022][ T5557] overlayfs: unrecognized mount option "fowner=00000000000000000000" or missing value [ 355.698788][ T1134] usb 4-1: device descriptor read/64, error -71 [ 355.968657][ T1134] usb 4-1: device descriptor read/64, error -71 [ 356.107687][ T28] audit: type=1400 audit(2000000232.780:1511): avc: denied { listen } for pid=5560 comm="syz.9.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.248708][ T1134] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 356.649179][ T5576] loop4: detected capacity change from 0 to 512 [ 356.683762][ T5576] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1375: inode has both inline data and extents flags [ 356.697554][ T5576] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1375: couldn't read orphan inode 15 (err -117) [ 356.711423][ T5576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.770859][ T1134] usb 4-1: device descriptor read/64, error -71 [ 356.800606][ T28] audit: type=1400 audit(2000000233.480:1512): avc: denied { read } for pid=5581 comm="syz.8.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 356.847880][ T287] EXT4-fs (loop4): unmounting filesystem. [ 356.938652][ T28] audit: type=1400 audit(2000000233.600:1513): avc: denied { execstack } for pid=5589 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 356.956854][ T5584] loop9: detected capacity change from 0 to 40427 [ 356.978896][ T5584] F2FS-fs (loop9): Found nat_bits in checkpoint [ 357.024928][ T5584] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 357.039872][ T28] audit: type=1400 audit(2000000233.720:1514): avc: denied { watch_reads } for pid=5585 comm="syz.8.1378" path="/87" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 357.068732][ T1134] usb 4-1: device descriptor read/64, error -71 [ 357.208931][ T1134] usb usb4-port1: attempt power cycle [ 357.438755][ T40] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 357.492134][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.492134][ T5602] loop9: rw=2049, sector=77824, nr_sectors = 2072 limit=40427 [ 357.571721][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.571721][ T5602] loop9: rw=2049, sector=79896, nr_sectors = 2024 limit=40427 [ 357.607634][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.607634][ T5602] loop9: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 357.629781][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.637516][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.637516][ T5602] loop9: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 357.645554][ T40] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 357.671933][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.671933][ T5602] loop9: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 357.686143][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.695081][ T40] usb 1-1: config 0 descriptor?? [ 357.702804][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.702804][ T5602] loop9: rw=2049, sector=59392, nr_sectors = 2048 limit=40427 [ 357.720975][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.720975][ T5602] loop9: rw=2049, sector=61440, nr_sectors = 2048 limit=40427 [ 357.738842][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.738842][ T5602] loop9: rw=2049, sector=63488, nr_sectors = 2048 limit=40427 [ 357.748654][ T1134] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 357.757070][ T5602] syz.9.1377: attempt to access beyond end of device [ 357.757070][ T5602] loop9: rw=2049, sector=65536, nr_sectors = 2008 limit=40427 [ 357.790552][ T4839] syz-executor: attempt to access beyond end of device [ 357.790552][ T4839] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.816785][ T1134] usb 4-1: device descriptor read/8, error -71 [ 357.969602][ T1134] usb 4-1: device descriptor read/8, error -71 [ 358.098903][ T5611] loop9: detected capacity change from 0 to 32768 [ 358.106175][ T40] hid-generic 0003:18D1:503C.0011: unknown main item tag 0x0 [ 358.114078][ T40] hid-generic 0003:18D1:503C.0011: unknown main item tag 0x0 [ 358.121547][ T40] hid-generic 0003:18D1:503C.0011: unbalanced collection at end of report description [ 358.131519][ T40] hid-generic: probe of 0003:18D1:503C.0011 failed with error -22 [ 358.238692][ T1134] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 358.419423][ T40] usb 1-1: USB disconnect, device number 34 [ 358.425544][ T1134] usb 4-1: device descriptor read/8, error -71 [ 358.431546][ T5611] loop9: p1 p3 < > [ 358.437793][ T28] audit: type=1400 audit(2000000235.110:1515): avc: denied { mounton } for pid=5608 comm="syz.9.1382" path="/proc/88/task" dev="proc" ino=35737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 358.544864][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 358.545793][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 358.980472][ T1134] usb 4-1: device descriptor read/8, error -71 [ 359.121709][ T1134] usb usb4-port1: unable to enumerate USB device [ 359.179609][ T28] audit: type=1326 audit(2000000235.860:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.203156][ T28] audit: type=1326 audit(2000000235.860:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.226998][ T28] audit: type=1326 audit(2000000235.860:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.253594][ T5646] loop4: detected capacity change from 0 to 256 [ 359.259959][ T28] audit: type=1326 audit(2000000235.860:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.283765][ T28] audit: type=1326 audit(2000000235.860:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.292875][ T5646] FAT-fs (loop4): Directory bread(block 64) failed [ 359.307536][ T28] audit: type=1326 audit(2000000235.880:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.337183][ T28] audit: type=1326 audit(2000000235.880:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.340264][ T5646] FAT-fs (loop4): Directory bread(block 65) failed [ 359.371659][ T5646] FAT-fs (loop4): Directory bread(block 66) failed [ 359.378018][ T28] audit: type=1326 audit(2000000235.880:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.378273][ T5646] FAT-fs (loop4): Directory bread(block 67) failed [ 359.402172][ T28] audit: type=1326 audit(2000000235.900:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.408423][ T5646] FAT-fs (loop4): Directory bread(block 68) failed [ 359.431876][ T28] audit: type=1326 audit(2000000235.900:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x7ffc0000 [ 359.438469][ T5646] FAT-fs (loop4): Directory bread(block 69) failed [ 359.468052][ T5646] FAT-fs (loop4): Directory bread(block 70) failed [ 359.474658][ T5646] FAT-fs (loop4): Directory bread(block 71) failed [ 359.481419][ T5646] FAT-fs (loop4): Directory bread(block 72) failed [ 359.488262][ T5646] FAT-fs (loop4): Directory bread(block 73) failed [ 359.504258][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1389'. [ 359.513783][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1389'. [ 359.673979][ T5664] loop9: detected capacity change from 0 to 16 [ 359.707751][ T5664] loop9: detected capacity change from 0 to 512 [ 359.725916][ T5664] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 359.742171][ T5664] EXT4-fs (loop9): 1 truncate cleaned up [ 359.757954][ T5664] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 359.857559][ T5668] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 359.878836][ T866] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 360.058652][ T866] usb 5-1: Using ep0 maxpacket: 16 [ 360.064992][ T866] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 360.079841][ T866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.099178][ T866] usb 5-1: config 0 has no interfaces? [ 360.109461][ T866] usb 5-1: config index 1 descriptor too short (expected 8192, got 18) [ 360.120838][ T866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.135093][ T866] usb 5-1: config 0 has no interfaces? [ 360.143434][ T866] usb 5-1: config index 2 descriptor too short (expected 8192, got 18) [ 360.155864][ T866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.170177][ T866] usb 5-1: config 0 has no interfaces? [ 360.180152][ T866] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 360.192332][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.203484][ T866] usb 5-1: Product: syz [ 360.210493][ T866] usb 5-1: Manufacturer: syz [ 360.217368][ T866] usb 5-1: SerialNumber: syz [ 360.229505][ T866] r8152-cfgselector 5-1: config 0 descriptor?? [ 360.443399][ T866] r8152-cfgselector 5-1: Unknown version 0x0000 [ 360.464161][ T866] r8152-cfgselector 5-1: USB disconnect, device number 40 [ 360.522691][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 360.575231][ T5684] netlink: 'syz.9.1398': attribute type 7 has an invalid length. [ 360.938673][ T1134] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 361.149757][ T1134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.161870][ T1134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.172275][ T1134] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.185232][ T1134] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.194289][ T1134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.202749][ T1134] usb 1-1: config 0 descriptor?? [ 361.350148][ T5705] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1406'. [ 361.362035][ T5705] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 361.645842][ T1134] usbhid 1-1:0.0: can't add hid device: -71 [ 361.652144][ T424] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 361.660687][ T1134] usbhid: probe of 1-1:0.0 failed with error -71 [ 361.667975][ T1134] usb 1-1: USB disconnect, device number 35 [ 361.839610][ T424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 361.850636][ T424] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 361.859666][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.868326][ T424] usb 5-1: config 0 descriptor?? [ 361.951732][ T5718] netlink: 'syz.8.1409': attribute type 46 has an invalid length. [ 361.959641][ T5718] netlink: 'syz.8.1409': attribute type 19 has an invalid length. [ 361.967436][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1409'. [ 362.390504][ T424] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 362.405725][ T424] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input21 [ 362.413303][ T5735] loop9: detected capacity change from 0 to 16 [ 362.426499][ T5735] erofs: (device loop9): mounted with root inode @ nid 36. [ 362.492747][ T424] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 362.565415][ T5752] fuse: blksize only supported for fuseblk [ 363.318071][ T5807] fuse: Bad value for 'fd' [ 363.420131][ T424] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 363.431604][ T424] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 363.534861][ T5840] loop9: detected capacity change from 0 to 128 [ 363.599505][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 363.622753][ T5845] device vlan0 entered promiscuous mode [ 363.628327][ T5845] device gretap0 entered promiscuous mode [ 363.795693][ T5854] tipc: Enabling of bearer rejected, failed to enable media [ 364.007610][ T5858] overlayfs: failed to clone upperpath [ 364.274199][ T403] usb 5-1: USB disconnect, device number 41 [ 364.442188][ T5887] loop4: detected capacity change from 0 to 4096 [ 364.454007][ T5887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 364.463544][ T5887] EXT4-fs (loop4): unmounting filesystem. [ 364.467723][ T5889] loop3: detected capacity change from 0 to 1024 [ 364.970583][ T5889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 365.369967][ T5908] loop9: detected capacity change from 0 to 512 [ 365.949677][ T5908] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 365.958680][ T5908] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.003909][ T286] EXT4-fs (loop3): unmounting filesystem. [ 366.119721][ T5923] loop3: detected capacity change from 0 to 256 [ 366.162766][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 366.191972][ T3623] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.481009][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 366.627121][ T5952] tipc: Started in network mode [ 366.632541][ T5952] tipc: Node identity ac14141b, cluster identity 4711 [ 366.640667][ T5952] tipc: New replicast peer: 255.255.255.255 [ 366.647976][ T5952] tipc: Enabled bearer , priority 10 [ 367.075653][ T40] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 367.096658][ T40] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.128245][ T5957] kvm [5955]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 367.159851][ T5957] kvm [5955]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 367.188769][ T5957] kvm [5955]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 367.204643][ T5957] kvm [5955]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 367.415004][ T5972] capability: warning: `syz.3.1464' uses 32-bit capabilities (legacy support in use) [ 367.469599][ T5924] loop4: detected capacity change from 0 to 131072 [ 367.494214][ T5924] F2FS-fs (loop4): Found nat_bits in checkpoint [ 367.549520][ T5924] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 367.612636][ T5976] x_tables: duplicate underflow at hook 1 [ 367.618813][ T5984] x_tables: duplicate underflow at hook 1 [ 367.688800][ T19] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 367.758652][ T424] tipc: Node number set to 2886997019 [ 367.878640][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 367.884761][ T19] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 367.928624][ T40] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 368.072433][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.080941][ T19] usb 4-1: config 0 descriptor?? [ 368.131890][ T40] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.142143][ T40] usb 1-1: config 1 has no interface number 0 [ 368.148213][ T40] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 368.160036][ T40] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 368.171155][ T40] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 368.182348][ T40] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 368.193231][ T40] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 95, changing to 4 [ 368.204130][ T40] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 31085, setting to 1023 [ 368.216667][ T40] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.225889][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.233923][ T40] usb 1-1: Product: syz [ 368.238125][ T40] usb 1-1: Manufacturer: syz [ 368.242738][ T40] usb 1-1: SerialNumber: syz [ 368.248273][ T5976] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 368.287693][ T19] usb 4-1: string descriptor 0 read error: -71 [ 368.294701][ T19] usb 4-1: Found UVC 0.00 device (2833:0201) [ 368.303153][ T19] usb 4-1: No valid video chain found. [ 368.309758][ T19] usb 4-1: USB disconnect, device number 46 [ 368.455732][ T5976] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 368.664112][ T5976] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 368.881432][ T6007] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1472'. [ 368.969692][ T866] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 368.978300][ T866] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.041192][ T6025] device syzkaller1 entered promiscuous mode [ 369.054010][ T6023] fido_id[6023]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 369.202475][ T6033] bridge0: port 3(team_slave_1) entered disabled state [ 369.209516][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.216652][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.303853][ T6033] device bridge_slave_0 left promiscuous mode [ 369.310203][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.319677][ T6033] device bridge_slave_1 left promiscuous mode [ 369.460646][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.582721][ T6033] device team_slave_1 left promiscuous mode [ 369.588921][ T6033] bridge0: port 3(team_slave_1) entered disabled state [ 369.971206][ T6046] loop9: detected capacity change from 0 to 128 [ 369.981160][ T6046] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 369.990157][ T6046] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.114820][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 370.168684][ T866] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 370.301523][ T6060] selinux_netlink_send: 25 callbacks suppressed [ 370.301599][ T6060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6060 comm=syz.8.1486 [ 370.321468][ T866] usb 5-1: device descriptor read/64, error -71 [ 370.392734][ T6062] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1488'. [ 370.428144][ T40] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 370.435812][ T40] cdc_ncm 1-1:1.1: bind() failure [ 370.478239][ T40] usb 1-1: USB disconnect, device number 36 [ 370.678649][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 370.678672][ T28] audit: type=1326 audit(2000000503.277:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.0.1489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e858f749 code=0x0 [ 370.765204][ T866] usb 5-1: device descriptor read/64, error -71 [ 371.048661][ T866] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 371.208660][ T866] usb 5-1: device descriptor read/64, error -71 [ 371.244255][ T28] audit: type=1400 audit(2000000503.917:1546): avc: denied { setattr } for pid=6088 comm="syz.9.1495" name="" dev="pipefs" ino=37574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 371.417080][ T28] audit: type=1400 audit(2000000504.077:1547): avc: denied { mount } for pid=6092 comm="syz.0.1496" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 371.755534][ T866] usb 5-1: device descriptor read/64, error -71 [ 371.793243][ T6098] netlink: 'syz.3.1497': attribute type 4 has an invalid length. [ 371.883730][ T866] usb usb5-port1: attempt power cycle [ 371.928627][ T40] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 371.948352][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1501'. [ 372.308678][ T866] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 372.351502][ T6130] kvm [6128]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 372.409771][ T866] usb 5-1: device descriptor read/8, error -71 [ 372.560349][ T866] usb 5-1: device descriptor read/8, error -71 [ 372.868566][ T866] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 372.932137][ T866] usb 5-1: device descriptor read/8, error -71 [ 373.053491][ T40] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 373.066925][ T40] usb 10-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 373.075979][ T6139] loop4: detected capacity change from 0 to 512 [ 373.083737][ T6141] loop3: detected capacity change from 0 to 256 [ 373.090363][ T6141] exfat: Unknown parameter 'erroru' [ 373.096046][ T6139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 373.110236][ T866] usb 5-1: device descriptor read/8, error -71 [ 373.121087][ T40] usb 10-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 373.130832][ T3623] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 373.141556][ T6139] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.1508: corrupted in-inode xattr [ 373.154748][ T40] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 373.168445][ T40] usb 10-1: Product: syz [ 373.168525][ T6139] EXT4-fs (loop4): 1 orphan inode deleted [ 373.175160][ T40] usb 10-1: SerialNumber: syz [ 373.179001][ T6139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 373.197613][ T6139] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.1508: deleted inode referenced: 15 [ 373.204302][ T40] usb 10-1: bad CDC descriptors [ 373.228285][ T287] EXT4-fs (loop4): unmounting filesystem. [ 373.234218][ T866] usb usb5-port1: unable to enumerate USB device [ 373.412119][ T28] audit: type=1400 audit(2000000506.087:1548): avc: denied { create } for pid=6148 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 373.431983][ T28] audit: type=1400 audit(2000000506.107:1549): avc: denied { setattr } for pid=6088 comm="syz.9.1495" name="TIPC" dev="sockfs" ino=36849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.459374][ T40] usb 10-1: USB disconnect, device number 4 [ 373.895265][ T6159] device bridge0 entered promiscuous mode [ 373.901052][ T6159] device macsec1 entered promiscuous mode [ 373.907086][ T6159] bridge0: port 4(macsec1) entered blocking state [ 373.913534][ T6159] bridge0: port 4(macsec1) entered disabled state [ 373.920474][ T6159] device bridge0 left promiscuous mode [ 373.947560][ T6161] loop3: detected capacity change from 0 to 128 [ 374.013532][ T6163] loop9: detected capacity change from 0 to 8192 [ 374.022495][ T28] audit: type=1400 audit(2000000506.697:1550): avc: denied { mounton } for pid=6162 comm="syz.9.1516" path="/file0" dev="bpf" ino=37954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 374.071300][ T6171] loop3: detected capacity change from 0 to 1024 [ 374.101302][ T6171] EXT4-fs: Ignoring removed nobh option [ 374.117915][ T6171] ext4: Unknown parameter 'appraise_type' [ 374.162487][ T6175] loop9: detected capacity change from 0 to 512 [ 374.169041][ T6175] EXT4-fs: Ignoring removed orlov option [ 374.174687][ T6175] EXT4-fs: Ignoring removed i_version option [ 374.188133][ T6175] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1518: inode #1: comm syz.9.1518: iget: illegal inode # [ 374.201331][ T6175] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1518: error while reading EA inode 1 err=-117 [ 374.213833][ T6175] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1518: inode #1: comm syz.9.1518: iget: illegal inode # [ 374.227103][ T6175] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1518: error while reading EA inode 1 err=-117 [ 374.239782][ T6175] EXT4-fs (loop9): 1 orphan inode deleted [ 374.245519][ T6175] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 374.425196][ T6188] overlayfs: missing 'workdir' [ 374.967830][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 374.991078][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1532'. [ 375.011407][ T6212] loop4: detected capacity change from 0 to 4096 [ 375.082798][ T6214] loop3: detected capacity change from 0 to 128 [ 375.213239][ T6212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 375.299200][ T40] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 375.490165][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 375.620055][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.721873][ T287] EXT4-fs (loop4): unmounting filesystem. [ 375.829160][ T40] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 375.848472][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.929261][ T40] usb 10-1: config 0 descriptor?? [ 376.131154][ T6243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6243 comm=syz.4.1542 [ 376.336452][ T40] apple 0003:05AC:0244.0016: unknown main item tag 0x0 [ 376.348775][ T40] apple 0003:05AC:0244.0016: unknown main item tag 0x0 [ 376.368976][ T40] apple 0003:05AC:0244.0016: unknown main item tag 0x0 [ 376.375825][ T40] apple 0003:05AC:0244.0016: unknown main item tag 0x0 [ 376.426133][ T40] apple 0003:05AC:0244.0016: hidraw0: USB HID v0.00 Device [HID 05ac:0244] on usb-dummy_hcd.9-1/input0 [ 377.405858][ T403] usb 10-1: USB disconnect, device number 5 [ 377.425267][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 377.867350][ T6266] 9pnet_fd: Insufficient options for proto=fd [ 377.917269][ T6282] fuse: Unknown parameter 'rmiQsons' [ 378.037318][ T28] audit: type=1400 audit(2000000510.707:1551): avc: denied { read write } for pid=6287 comm="syz.8.1554" name="file0" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.060673][ T28] audit: type=1400 audit(2000000510.737:1552): avc: denied { open } for pid=6287 comm="syz.8.1554" path="/126/file0" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.128622][ T866] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 378.198670][ T40] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 378.207781][ T6292] tipc: Started in network mode [ 378.212763][ T6292] tipc: Node identity 1, cluster identity 4711 [ 378.219225][ T6292] tipc: Node number set to 1 [ 378.276551][ T28] audit: type=1400 audit(2000000510.947:1553): avc: denied { bind } for pid=6291 comm="syz.9.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.296188][ T866] usb 1-1: device descriptor read/64, error -71 [ 378.304963][ T6293] loop9: detected capacity change from 0 to 16 [ 378.312054][ T6293] erofs: (device loop9): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 378.369436][ T3623] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.389649][ T40] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 378.398011][ T40] usb 4-1: config 0 has no interface number 0 [ 378.404192][ T40] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 378.416513][ T40] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 378.425689][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.433776][ T40] usb 4-1: Product: syz [ 378.438006][ T40] usb 4-1: Manufacturer: syz [ 378.442663][ T40] usb 4-1: SerialNumber: syz [ 378.447970][ T40] usb 4-1: config 0 descriptor?? [ 378.453208][ T6281] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 378.461090][ T40] usb-storage 4-1:0.20: USB Mass Storage device detected [ 378.469279][ T40] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 378.568651][ T866] usb 1-1: device descriptor read/64, error -71 [ 378.661344][ T40] scsi host1: usb-storage 4-1:0.20 [ 378.838642][ T866] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 378.875970][ T40] usb 4-1: USB disconnect, device number 47 [ 378.903878][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1557'. [ 379.901775][ T866] usb 1-1: device descriptor read/64, error -71 [ 380.174949][ T866] usb 1-1: device descriptor read/64, error -71 [ 380.211380][ T6326] loop4: detected capacity change from 0 to 512 [ 380.333647][ T866] usb usb1-port1: attempt power cycle [ 380.583204][ T6326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 380.592464][ T6326] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.835344][ T6331] loop9: detected capacity change from 0 to 1024 [ 380.980749][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.992469][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 381.023413][ T6331] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 381.053366][ T6331] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 381.075815][ T6331] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal [ 381.122341][ T287] EXT4-fs (loop4): unmounting filesystem. [ 381.311136][ T6349] loop9: detected capacity change from 0 to 512 [ 381.343725][ T6349] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 381.452972][ T6352] loop4: detected capacity change from 0 to 512 [ 381.459833][ T6352] EXT4-fs: Ignoring removed oldalloc option [ 383.022189][ T6352] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 383.049962][ T6352] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1568: invalid indirect mapped block 4294967295 (level 0) [ 383.072883][ T6352] EXT4-fs (loop4): Remounting filesystem read-only [ 383.079446][ T6352] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1568: invalid indirect mapped block 4294967295 (level 1) [ 383.099189][ T6352] EXT4-fs (loop4): Remounting filesystem read-only [ 383.105820][ T6352] EXT4-fs (loop4): 1 orphan inode deleted [ 383.111580][ T6352] EXT4-fs (loop4): 1 truncate cleaned up [ 383.117220][ T6352] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 383.163828][ T6346] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.1568: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 383.183910][ T6346] EXT4-fs (loop4): Remounting filesystem read-only [ 383.202132][ T6349] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.413865][ T287] EXT4-fs (loop4): unmounting filesystem. [ 383.421504][ T6360] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #2: block 18: comm syz.9.1569: lblock 23 mapped to illegal pblock 18 (length 1) [ 383.523494][ T6360] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #2: block 18: comm syz.9.1569: lblock 23 mapped to illegal pblock 18 (length 1) [ 383.556587][ T6360] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 3: comm syz.9.1569: path /55/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 383.999887][ T6366] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #2: block 18: comm syz.9.1569: lblock 23 mapped to illegal pblock 18 (length 1) [ 384.016964][ T6360] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 12: comm syz.9.1569: path /55/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 384.031665][ T6374] loop4: detected capacity change from 0 to 4096 [ 384.039619][ T6360] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 13: comm syz.9.1569: path /55/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 384.053340][ T6374] EXT4-fs: Ignoring removed mblk_io_submit option [ 384.102722][ T6360] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 14: comm syz.9.1569: path /55/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 384.130751][ T6360] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 15: comm syz.9.1569: path /55/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 384.130868][ T6374] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 384.131061][ T6360] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 16: comm syz.9.1569: path /55/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 384.199541][ T6360] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 17: comm syz.9.1569: path /55/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 384.224540][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 384.381448][ T28] audit: type=1400 audit(2000000517.057:1554): avc: denied { listen } for pid=6377 comm="syz.0.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.714012][ T6401] loop9: detected capacity change from 0 to 512 [ 391.734776][ T6401] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 391.757484][ T6404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6404 comm=syz.4.1580 [ 391.779369][ T6401] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1579: bg 0: block 5: invalid block bitmap [ 391.791986][ T6401] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 391.801308][ T6401] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1579: invalid indirect mapped block 3 (level 2) [ 391.814909][ T6401] EXT4-fs (loop9): 2 truncates cleaned up [ 391.820817][ T6401] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 391.974197][ T4839] EXT4-fs (loop9): unmounting filesystem. [ 392.048459][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1584'. [ 393.718866][ T40] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 393.920502][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.987123][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.106409][ T40] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 394.298772][ T40] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 394.306868][ T40] usb 5-1: Manufacturer: syz [ 394.369107][ T40] usb 5-1: config 0 descriptor?? [ 394.489500][ T338] tipc: Left network mode [ 394.770713][ T6471] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1601'. [ 395.010988][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.018049][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.030762][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 395.056061][ T6470] device bridge_slave_0 entered promiscuous mode [ 395.072757][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.098815][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.121586][ T6470] device bridge_slave_1 entered promiscuous mode [ 395.221275][ T40] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input22 [ 395.305416][ T40] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input23 [ 395.417403][ T40] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input24 [ 395.529193][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.536895][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.545054][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.553712][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.563668][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.570720][ T5754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.579151][ T40] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input25 [ 395.590526][ T338] device bridge_slave_1 left promiscuous mode [ 395.596749][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.604478][ T338] device bridge_slave_0 left promiscuous mode [ 395.611313][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.619773][ T338] device veth1_macvtap left promiscuous mode [ 395.621560][ T40] uclogic 0003:256C:006D.0017: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 395.625891][ T338] device veth0_vlan left promiscuous mode [ 395.687508][ T40] usb 5-1: USB disconnect, device number 46 [ 395.781393][ T6494] fido_id[6494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 395.852568][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.862314][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.878814][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.895023][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.902065][ T5754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.916559][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.939076][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.947103][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.955890][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.972560][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.980955][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.989807][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.997756][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.012593][ T6470] device veth0_vlan entered promiscuous mode [ 396.020036][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.028511][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.047581][ T6470] device veth1_macvtap entered promiscuous mode [ 396.054406][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.062811][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.071324][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.314636][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.514210][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.615700][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.981945][ T5754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.152654][ T6517] loop3: detected capacity change from 0 to 512 [ 397.237987][ T6517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 397.247544][ T6517] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.399701][ T28] audit: type=1400 audit(2000000530.077:1555): avc: denied { getopt } for pid=6535 comm="syz.8.1616" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.066077][ T6551] loop4: detected capacity change from 0 to 40427 [ 398.081731][ T6551] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 398.089465][ T6551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 398.101039][ T6551] F2FS-fs (loop4): invalid crc value [ 398.119324][ T286] EXT4-fs (loop3): unmounting filesystem. [ 398.125853][ T6551] F2FS-fs (loop4): Found nat_bits in checkpoint [ 398.168870][ T6551] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 398.176154][ T6551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 398.354108][ T6563] loop3: detected capacity change from 0 to 16 [ 398.439516][ T6563] erofs: (device loop3): mounted with root inode @ nid 36. [ 399.823416][ T287] syz-executor: attempt to access beyond end of device [ 399.823416][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 400.415523][ T6589] loop3: detected capacity change from 0 to 1024 [ 400.441603][ T6589] EXT4-fs: Ignoring removed bh option [ 400.519097][ T6589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 400.550259][ T286] EXT4-fs (loop3): unmounting filesystem. [ 400.790261][ T6584] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1628'. [ 400.800196][ T6584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1628'. [ 401.150308][ T866] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 401.192418][ T403] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 401.206884][ T403] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 401.361073][ T866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.372078][ T866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.382077][ T866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.395275][ T866] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.404431][ T866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.413164][ T866] usb 4-1: config 0 descriptor?? [ 401.435940][ T6619] 9pnet_fd: Insufficient options for proto=fd [ 401.820163][ T866] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 401.830402][ T866] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 401.845151][ T866] usb 4-1: USB disconnect, device number 48 [ 401.870053][ T6628] fido_id[6628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 401.877325][ T6630] loop3: detected capacity change from 0 to 256 [ 401.892555][ T6630] FAT-fs (loop3): Unrecognized mount option "uni_xlae=1" or missing value [ 401.920356][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1639'. [ 401.948326][ T6645] loop3: detected capacity change from 0 to 512 [ 401.959820][ T6645] netlink: 'syz.3.1641': attribute type 5 has an invalid length. [ 401.989316][ T28] audit: type=1400 audit(2000000534.667:1556): avc: denied { attach_queue } for pid=6648 comm="syz.3.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 402.011740][ T6649] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 402.504061][ T6673] loop4: detected capacity change from 0 to 2048 [ 402.549225][ T6673] loop4: p1 < > p3 [ 402.554002][ T6673] loop4: p3 size 134217728 extends beyond EOD, truncated [ 402.580382][ T6673] 9pnet_fd: Insufficient options for proto=fd [ 402.638421][ T6392] udevd[6392]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 402.649747][ T6445] udevd[6445]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 402.663392][ T6675] device veth1_macvtap left promiscuous mode [ 402.670236][ T6675] device macsec0 entered promiscuous mode [ 402.978645][ T288] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 403.140663][ T866] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 403.168623][ T288] usb 5-1: Using ep0 maxpacket: 8 [ 403.173800][ T866] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 403.184454][ T288] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 403.202551][ T288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.238694][ T288] usb 5-1: config 0 has no interface number 0 [ 403.246280][ T288] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 403.271847][ T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.288701][ T288] usb 5-1: Product: syz [ 403.292911][ T288] usb 5-1: Manufacturer: syz [ 403.297506][ T288] usb 5-1: SerialNumber: syz [ 403.323601][ T288] usb 5-1: config 0 descriptor?? [ 403.338001][ T288] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 403.358762][ T288] usb 5-1: No valid video chain found. [ 403.450558][ T6701] 9pnet_fd: Insufficient options for proto=fd [ 403.542279][ T6679] xt_hashlimit: size too large, truncated to 1048576 [ 403.638685][ T6702] netlink: 'syz.4.1652': attribute type 12 has an invalid length. [ 403.847494][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'. [ 403.998189][ T6711] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 404.058747][ T28] audit: type=1400 audit(2000000536.667:1557): avc: denied { relabelfrom } for pid=6705 comm="syz.3.1660" name="" dev="pipefs" ino=38861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 404.133055][ T28] audit: type=1400 audit(2000000536.687:1558): avc: denied { relabelto } for pid=6705 comm="syz.3.1660" name="" dev="pipefs" ino=38861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 404.207959][ T28] audit: type=1400 audit(2000000536.877:1559): avc: denied { read } for pid=6716 comm="syz.2.1663" laddr=::1 lport=5 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 404.405677][ T558] usb 5-1: USB disconnect, device number 47 [ 404.777410][ T6729] binder: 6727:6729 unknown command 0 [ 404.787088][ T6729] binder: 6727:6729 ioctl c0306201 200000000080 returned -22 [ 404.802358][ T28] audit: type=1400 audit(2000000537.477:1560): avc: denied { mounton } for pid=6727 comm="syz.2.1667" path="/10/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 405.874257][ T6758] 9pnet_fd: Insufficient options for proto=fd [ 406.331963][ T6782] netlink: 'syz.3.1681': attribute type 27 has an invalid length. [ 406.351415][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 406.360095][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 406.757309][ T28] audit: type=1400 audit(2000000539.427:1561): avc: denied { setopt } for pid=6790 comm="syz.2.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 406.821839][ T28] audit: type=1400 audit(2000000539.447:1562): avc: denied { write } for pid=6790 comm="syz.2.1683" path="socket:[40112]" dev="sockfs" ino=40112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 406.885864][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.894622][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.902257][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.919422][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.950828][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.982627][ T6801] loop4: detected capacity change from 0 to 512 [ 406.990358][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.011922][ T6801] journal_path: Lookup failure for './file1' [ 407.030086][ T6801] EXT4-fs: error: could not find journal device path [ 407.039304][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 407.078973][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.120134][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 407.150436][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.184455][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.216352][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.245558][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.283055][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.313660][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.344398][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.376300][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.388125][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.397747][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.405830][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.413972][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.422062][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.430332][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.448675][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.457033][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 407.464670][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 407.473772][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.485947][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 407.508839][ T6796] device veth0_to_bridge entered promiscuous mode [ 407.519001][ T288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.535413][ T288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.558776][ T288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.572534][ T288] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 407.580193][ T288] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 407.598708][ T288] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 407.822025][ T6795] device veth0_to_bridge left promiscuous mode [ 408.070646][ T558] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 408.078229][ T558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 408.464666][ T558] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 408.472604][ T558] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.588788][ T558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 408.993611][ T558] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.003511][ T630] Bluetooth: hci0: Frame reassembly failed (-84) [ 409.108865][ T6846] loop4: detected capacity change from 0 to 512 [ 409.137303][ T6846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.148383][ T6846] EXT4-fs: Ignoring removed oldalloc option [ 409.162033][ T6846] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1697: bg 0: block 5: invalid block bitmap [ 409.174795][ T6846] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 409.183815][ T6846] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1697: invalid indirect mapped block 4294967295 (level 1) [ 409.252483][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 409.402718][ T6846] EXT4-fs (loop4): 1 orphan inode deleted [ 409.439151][ T6846] EXT4-fs (loop4): 1 truncate cleaned up [ 409.462429][ T6846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.652242][ T287] EXT4-fs (loop4): unmounting filesystem. [ 409.743426][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 409.753912][ T6856] 8021q: VLANs not supported on ip_vti0 [ 411.507618][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 411.519288][ T3724] Bluetooth: hci0: command 0x1003 tx timeout [ 411.924682][ T28] audit: type=1326 audit(2000000544.567:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 411.948204][ T28] audit: type=1326 audit(2000000544.567:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 411.972051][ T28] audit: type=1326 audit(2000000544.567:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1314f8df90 code=0x7ffc0000 [ 412.204473][ T6889] serio: Serial port ptm0 [ 412.248642][ T28] audit: type=1326 audit(2000000544.567:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 412.272422][ T28] audit: type=1326 audit(2000000544.567:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 412.295992][ T28] audit: type=1326 audit(2000000544.567:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 412.338788][ T28] audit: type=1326 audit(2000000544.567:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 412.362421][ T28] audit: type=1326 audit(2000000544.567:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 412.386104][ T28] audit: type=1326 audit(2000000544.567:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 412.409733][ T28] audit: type=1326 audit(2000000544.567:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f8f749 code=0x7ffc0000 [ 413.467010][ T6911] cgroup: No subsys list or none specified [ 413.857621][ T870] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 413.875434][ T870] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 413.901522][ T6924] 9pnet: Could not find request transport: fd [ 415.748646][ T866] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 415.921605][ T6961] loop3: detected capacity change from 0 to 40427 [ 415.944232][ T866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.969751][ T6961] F2FS-fs (loop3): invalid crc value [ 415.973740][ T866] usb 5-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 415.985487][ T866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.995740][ T6979] IPv6: sit1: Disabled Multicast RS [ 416.002270][ T6961] F2FS-fs (loop3): Found nat_bits in checkpoint [ 416.019036][ T866] usb 5-1: config 0 descriptor?? [ 416.076389][ T6961] F2FS-fs (loop3): Start checkpoint disabled! [ 416.134547][ T6961] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 416.207998][ T626] kworker/u4:20: attempt to access beyond end of device [ 416.207998][ T626] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 416.299860][ T288] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 416.320783][ T288] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 416.379970][ T6995] loop3: detected capacity change from 0 to 1024 [ 416.408075][ T6995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.417095][ T6995] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 416.425301][ T6995] System zones: 0-1, 3-36 [ 416.430546][ T866] usbhid 5-1:0.0: can't add hid device: -71 [ 416.436542][ T866] usbhid: probe of 5-1:0.0 failed with error -71 [ 416.443013][ T6995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 416.445683][ T866] usb 5-1: USB disconnect, device number 48 [ 416.469888][ T286] EXT4-fs (loop3): unmounting filesystem. [ 416.547366][ T7008] loop3: detected capacity change from 0 to 512 [ 416.559615][ T7008] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 416.572487][ T7008] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.686361][ T7011] FAT-fs (loop3): FAT read failed (blocknr 128) [ 416.696815][ T7021] netlink: 'syz.2.1744': attribute type 12 has an invalid length. [ 416.704828][ T7021] netlink: 'syz.2.1744': attribute type 29 has an invalid length. [ 416.712667][ T7021] netlink: 'syz.2.1744': attribute type 2 has an invalid length. [ 416.720694][ T7021] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1744'. [ 416.729838][ T7011] bridge_slave_0: default FDB implementation only supports local addresses [ 416.950989][ T7032] incfs_lookup_dentry err:-40 [ 416.955777][ T7032] incfs_lookup_dentry err:-40 [ 416.961041][ T7032] incfs_lookup_dentry err:-40 [ 416.965849][ T7032] incfs_lookup_dentry err:-40 [ 416.970778][ T7032] incfs_lookup_dentry err:-40 [ 416.975556][ T7032] incfs_lookup_dentry err:-40 [ 416.981303][ T7032] incfs_lookup_dentry err:-40 [ 416.986027][ T7032] incfs_lookup_dentry err:-40 [ 416.990967][ T7032] incfs_lookup_dentry err:-40 [ 416.995735][ T7032] incfs_lookup_dentry err:-40 [ 417.000651][ T7032] incfs_lookup_dentry err:-40 [ 417.005441][ T7032] incfs_lookup_dentry err:-40 [ 417.010416][ T7032] incfs_lookup_dentry err:-40 [ 417.015194][ T7032] incfs_lookup_dentry err:-40 [ 417.020319][ T7032] incfs_lookup_dentry err:-40 [ 417.025189][ T7032] incfs_lookup_dentry err:-40 [ 417.030114][ T7032] incfs_lookup_dentry err:-40 [ 417.034895][ T7032] incfs_lookup_dentry err:-40 [ 417.039842][ T7032] incfs_lookup_dentry err:-40 [ 417.045694][ T7032] incfs_lookup_dentry err:-40 [ 417.054369][ T7032] incfs_lookup_dentry err:-40 [ 417.064932][ T7032] incfs_lookup_dentry err:-40 [ 417.073772][ T7032] incfs_lookup_dentry err:-40 [ 417.078903][ T7032] incfs_lookup_dentry err:-40 [ 417.088612][ T7032] incfs_lookup_dentry err:-40 [ 417.093547][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1750'. [ 417.100885][ T7032] incfs_lookup_dentry err:-40 [ 417.107685][ T7032] incfs_lookup_dentry err:-40 [ 417.117985][ T7032] incfs_lookup_dentry err:-40 [ 417.126890][ T7032] incfs_lookup_dentry err:-40 [ 417.136019][ T7032] incfs_lookup_dentry err:-40 [ 417.146438][ T7032] incfs_lookup_dentry err:-40 [ 417.151467][ T7032] incfs_lookup_dentry err:-40 [ 417.164834][ T7032] incfs_lookup_dentry err:-40 [ 417.172927][ T7032] incfs_lookup_dentry err:-40 [ 417.182983][ T7032] incfs_lookup_dentry err:-40 [ 417.193456][ T7032] incfs_lookup_dentry err:-40 [ 417.214585][ T7032] incfs_lookup_dentry err:-40 [ 417.229057][ T7032] incfs_lookup_dentry err:-40 [ 417.243748][ T7032] incfs_lookup_dentry err:-40 [ 417.257484][ T7032] incfs_lookup_dentry err:-40 [ 417.264536][ T7032] incfs_lookup_dentry err:-40 [ 417.279218][ T7032] incfs_lookup_dentry err:-40 [ 417.295730][ T7032] incfs_lookup_dentry err:-40 [ 417.306317][ T7032] incfs_lookup_dentry err:-40 [ 417.316591][ T7032] incfs_lookup_dentry err:-40 [ 417.352462][ T7032] incfs_lookup_dentry err:-40 [ 417.362406][ T7032] incfs_lookup_dentry err:-40 [ 417.378291][ T7032] incfs_lookup_dentry err:-40 [ 417.389323][ T7032] incfs_lookup_dentry err:-40 [ 417.399222][ T7032] incfs_lookup_dentry err:-40 [ 417.408696][ T7032] incfs_lookup_dentry err:-40 [ 417.418377][ T7032] incfs_lookup_dentry err:-40 [ 417.532303][ T7032] incfs_lookup_dentry err:-40 [ 417.579502][ T7032] incfs_lookup_dentry err:-40 [ 417.703893][ T7032] incfs_lookup_dentry err:-40 [ 417.718970][ T7032] incfs_lookup_dentry err:-40 [ 417.736016][ T7032] incfs_lookup_dentry err:-40 [ 417.740883][ T7032] incfs_lookup_dentry err:-40 [ 417.745709][ T7032] incfs_lookup_dentry err:-40 [ 417.750559][ T7032] incfs_lookup_dentry err:-40 [ 417.755357][ T7032] incfs_lookup_dentry err:-40 [ 417.760231][ T7032] incfs_lookup_dentry err:-40 [ 417.765023][ T7032] incfs_lookup_dentry err:-40 [ 417.770285][ T7032] incfs_lookup_dentry err:-40 [ 417.775135][ T7032] incfs_lookup_dentry err:-40 [ 417.786431][ T287] ------------[ cut here ]------------ [ 417.791995][ T287] WARNING: CPU: 0 PID: 287 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 417.801436][ T287] Modules linked in: [ 417.805326][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 417.814329][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.824390][ T287] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 417.830107][ T287] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9e 22 a5 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 07 aa 60 ff <0f> 0b e9 17 ff ff ff e8 fb a9 60 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 417.849719][ T287] RSP: 0018:ffffc9000daafb20 EFLAGS: 00010293 [ 417.855839][ T287] RAX: ffffffff820f7e69 RBX: 1ffff11022b8f3c0 RCX: ffff888109e8d100 [ 417.863833][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.871897][ T287] RBP: ffffc9000daafb50 R08: dffffc0000000000 R09: ffffed102656aad7 [ 417.879886][ T287] R10: ffffed102656aad7 R11: 1ffff1102656aad6 R12: ffff888115c79dd0 [ 417.887854][ T287] R13: 0000000000000000 R14: ffff888132b55610 R15: ffff888115c79e00 [ 417.895848][ T287] FS: 0000555594f49500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 417.904791][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.911389][ T287] CR2: 0000555594f74528 CR3: 000000012fed9000 CR4: 00000000003526b0 [ 417.919368][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 417.927332][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.935319][ T287] Call Trace: [ 417.938605][ T287] [ 417.941536][ T287] ovl_do_remove+0x79e/0xba0 [ 417.946187][ T287] ? ovl_set_redirect+0x6c0/0x6c0 [ 417.951235][ T287] ? selinux_inode_rmdir+0x22/0x30 [ 417.956389][ T287] ovl_rmdir+0x1a/0x20 [ 417.960485][ T287] vfs_rmdir+0x393/0x500 [ 417.964772][ T287] incfs_kill_sb+0x105/0x220 [ 417.969417][ T287] deactivate_locked_super+0xb5/0x120 [ 417.974846][ T287] deactivate_super+0xaf/0xe0 [ 417.979547][ T287] cleanup_mnt+0x45f/0x4e0 [ 417.983997][ T287] __cleanup_mnt+0x19/0x20 [ 417.988408][ T287] task_work_run+0x1db/0x240 [ 417.993020][ T287] ? __cfi_task_work_run+0x10/0x10 [ 417.998130][ T287] ? __x64_sys_umount+0x125/0x160 [ 418.003208][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 418.008600][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 418.013856][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 418.019349][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 418.024889][ T287] do_syscall_64+0x58/0xa0 [ 418.029329][ T287] ? clear_bhb_loop+0x30/0x80 [ 418.034075][ T287] ? clear_bhb_loop+0x30/0x80 [ 418.038773][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.044665][ T287] RIP: 0033:0x7f642fb90a77 [ 418.049094][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 418.068711][ T287] RSP: 002b:00007ffe17f570c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 418.077121][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f642fb90a77 [ 418.085113][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe17f57180 [ 418.093091][ T287] RBP: 00007ffe17f57180 R08: 0000000000000000 R09: 0000000000000000 [ 418.101078][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe17f58210 [ 418.109057][ T287] R13: 00007f642fc13d7d R14: 0000000000065feb R15: 00007ffe17f58250 [ 418.117030][ T287] [ 418.120064][ T287] ---[ end trace 0000000000000000 ]--- [ 418.125821][ T287] ------------[ cut here ]------------ [ 418.131305][ T287] WARNING: CPU: 0 PID: 287 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 418.140701][ T287] Modules linked in: [ 418.144591][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 418.153577][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.163637][ T287] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 418.169291][ T287] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9e 22 a5 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 07 aa 60 ff <0f> 0b e9 17 ff ff ff e8 fb a9 60 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 418.188915][ T287] RSP: 0018:ffffc9000daafb20 EFLAGS: 00010293 [ 418.194978][ T287] RAX: ffffffff820f7e69 RBX: 1ffff11022b8f3c0 RCX: ffff888109e8d100 [ 418.202973][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.210949][ T287] RBP: ffffc9000daafb50 R08: dffffc0000000000 R09: ffffed102656aad7 [ 418.218951][ T287] R10: ffffed102656aad7 R11: 1ffff1102656aad6 R12: ffff888115c79dd0 [ 418.226915][ T287] R13: 0000000000000000 R14: ffff888132b55610 R15: ffff888115c79e00 [ 418.234916][ T287] FS: 0000555594f49500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 418.243854][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.250452][ T287] CR2: 0000555594f74528 CR3: 000000012fed9000 CR4: 00000000003526b0 [ 418.258425][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 418.266421][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.274397][ T287] Call Trace: [ 418.277667][ T287] [ 418.280619][ T287] ovl_do_remove+0x79e/0xba0 [ 418.285215][ T287] ? ovl_set_redirect+0x6c0/0x6c0 [ 418.290267][ T287] ? selinux_inode_rmdir+0x22/0x30 [ 418.295371][ T287] ovl_rmdir+0x1a/0x20 [ 418.299455][ T287] vfs_rmdir+0x393/0x500 [ 418.303702][ T287] incfs_kill_sb+0x198/0x220 [ 418.308291][ T287] deactivate_locked_super+0xb5/0x120 [ 418.313680][ T287] deactivate_super+0xaf/0xe0 [ 418.318357][ T287] cleanup_mnt+0x45f/0x4e0 [ 418.322813][ T287] __cleanup_mnt+0x19/0x20 [ 418.327241][ T287] task_work_run+0x1db/0x240 [ 418.331855][ T287] ? __cfi_task_work_run+0x10/0x10 [ 418.336977][ T287] ? __x64_sys_umount+0x125/0x160 [ 418.342026][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 418.347408][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 418.352636][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 418.358088][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 418.363574][ T287] do_syscall_64+0x58/0xa0 [ 418.367991][ T287] ? clear_bhb_loop+0x30/0x80 [ 418.372688][ T287] ? clear_bhb_loop+0x30/0x80 [ 418.377370][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.383297][ T287] RIP: 0033:0x7f642fb90a77 [ 418.387716][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 418.407341][ T287] RSP: 002b:00007ffe17f570c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 418.415764][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f642fb90a77 [ 418.423761][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe17f57180 [ 418.431797][ T287] RBP: 00007ffe17f57180 R08: 0000000000000000 R09: 0000000000000000 [ 418.439803][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe17f58210 [ 418.447770][ T287] R13: 00007f642fc13d7d R14: 0000000000065feb R15: 00007ffe17f58250 [ 418.455765][ T287] [ 418.458796][ T287] ---[ end trace 0000000000000000 ]--- [ 418.509035][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 418.509049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.522800][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 418.522814][ T28] audit: type=1400 audit(2000000551.197:1600): avc: denied { ioctl } for pid=7048 comm="syz.0.1755" path="socket:[41468]" dev="sockfs" ino=41468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 418.739015][ T59] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 419.333019][ T59] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 419.559870][ T7080] fuse: Unknown parameter ' @?E)ar(a¦dUMυ~_"mRd/oȷ{!ӢEA׋2K‡2|C}Rb|Ԭ'I^}qF)6ie' [ 419.788651][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 420.290511][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1765'. [ 420.711159][ T7108] loop4: detected capacity change from 0 to 256 [ 420.774750][ T7117] loop4: detected capacity change from 0 to 128 [ 420.792054][ T7118] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1772'. [ 420.809258][ T7117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 420.819032][ T7117] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.820300][ T7118] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 420.869625][ T7114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1772'. [ 420.971988][ T7117] netem: change failed [ 420.980507][ T28] audit: type=1400 audit(2000000553.657:1601): avc: denied { setattr } for pid=7125 comm="syz.2.1775" name="CAN_RAW" dev="sockfs" ino=41632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 421.003991][ T287] EXT4-fs (loop4): unmounting filesystem. [ 421.379344][ T7161] netlink: 'syz.0.1784': attribute type 2 has an invalid length. [ 421.392201][ T40] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 421.580844][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 421.601140][ T40] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 421.619579][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.641279][ T40] usb 5-1: config 0 descriptor?? [ 421.648685][ T866] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 421.654977][ T7149] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 421.828713][ T866] usb 4-1: Using ep0 maxpacket: 16 [ 421.835187][ T866] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 421.844195][ T866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.854664][ T866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.865129][ T866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.877090][ T866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.885396][ T866] usb 4-1: Product: syz [ 421.889738][ T866] usb 4-1: Manufacturer: syz [ 421.894509][ T866] usb 4-1: SerialNumber: syz [ 422.166426][ T7177] loop4: detected capacity change from 0 to 40427 [ 422.189243][ T7177] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 422.197014][ T7177] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 422.214370][ T7177] F2FS-fs (loop4): invalid crc value [ 422.225223][ T7177] F2FS-fs (loop4): Found nat_bits in checkpoint [ 422.300150][ T7177] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 422.307335][ T7177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 422.354857][ T866] usb 4-1: 0:2 : does not exist [ 422.373263][ T28] audit: type=1400 audit(2000000555.047:1602): avc: denied { create } for pid=7148 comm="syz.4.1782" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 422.885812][ T7198] syz.4.1782[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.887350][ T7198] syz.4.1782[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.082953][ T7204] netlink: 'syz.8.1794': attribute type 49 has an invalid length. [ 424.334564][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1800'. [ 424.384850][ T7218] device sit2 entered promiscuous mode [ 424.510721][ T866] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 424.547836][ T866] usb 4-1: USB disconnect, device number 49 [ 425.439286][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 425.445256][ T40] usbhid: probe of 5-1:0.0 failed with error -71 [ 425.448885][ T7236] overlayfs: unrecognized mount option "verity=on" or missing value [ 425.471468][ T40] usb 5-1: USB disconnect, device number 49 [ 425.639414][ T7258] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1808'. [ 425.937633][ T28] audit: type=1400 audit(2000000558.607:1603): avc: denied { ioctl } for pid=7267 comm="syz.2.1812" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x6619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 426.167291][ T28] audit: type=1400 audit(2000000558.837:1604): avc: denied { append } for pid=7282 comm="syz.2.1818" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 426.192862][ T28] audit: type=1400 audit(2000000558.867:1605): avc: denied { name_bind } for pid=7278 comm="syz.8.1816" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 426.448889][ T7296] overlayfs: conflicting lowerdir path [ 428.561933][ T7314] device bridge5 entered promiscuous mode [ 428.619449][ T7333] netlink: 'syz.4.1834': attribute type 27 has an invalid length. [ 428.634386][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.641567][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.653046][ T7333] device wg2 left promiscuous mode [ 428.668337][ T7333] device macsec0 left promiscuous mode [ 428.677353][ T7338] bridge0: port 1(dummy0) entered blocking state [ 428.688801][ T7338] bridge0: port 1(dummy0) entered disabled state [ 428.695511][ T7338] device dummy0 entered promiscuous mode [ 428.701532][ T7338] bridge0: port 1(dummy0) entered blocking state [ 428.707860][ T7338] bridge0: port 1(dummy0) entered forwarding state [ 428.718760][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 428.754434][ T7338] device bridge0 entered promiscuous mode [ 428.763406][ T7338] device macsec0 entered promiscuous mode [ 428.781245][ T7344] bridge: RTM_NEWNEIGH with invalid ether address [ 429.014078][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.021331][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.089531][ T7356] 9pnet_fd: Insufficient options for proto=fd [ 429.330595][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 429.908621][ T40] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 430.027611][ T7388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1852'. [ 430.079636][ T7394] loop4: detected capacity change from 0 to 128 [ 430.092884][ T40] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 430.107830][ T7394] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 430.122325][ T40] usb 4-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 430.136567][ T40] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 430.149676][ T7394] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 430.163993][ T28] audit: type=1400 audit(2000000562.837:1606): avc: denied { mounton } for pid=7393 comm="syz.4.1854" path="/374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=1048681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 430.209008][ T40] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 430.218104][ T28] audit: type=1400 audit(2000000562.887:1607): avc: denied { remove_name } for pid=7393 comm="syz.4.1854" name="file0" dev="incremental-fs" ino=1048682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.242058][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.250322][ T40] usb 4-1: Product: syz [ 430.254496][ T40] usb 4-1: Manufacturer: syz [ 430.258786][ T28] audit: type=1400 audit(2000000562.887:1608): avc: denied { unlink } for pid=7393 comm="syz.4.1854" name="file0" dev="incremental-fs" ino=1048682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 430.259430][ T40] usb 4-1: SerialNumber: syz [ 430.288102][ T40] usb 4-1: config 0 descriptor?? [ 430.294078][ T40] usb-storage 4-1:0.0: USB Mass Storage device detected [ 430.301783][ T40] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 430.363582][ T287] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 430.371473][ T287] FAT-fs (loop4): Filesystem has been set read-only [ 430.378423][ T287] ------------[ cut here ]------------ [ 430.383925][ T287] kernel BUG at fs/namei.c:2962! [ 430.389054][ T287] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 430.395161][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 430.404071][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.414109][ T287] RIP: 0010:may_delete+0x701/0x710 [ 430.419207][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 14 f4 ff e9 77 fe ff ff e8 76 9c af ff 0f 0b e8 6f 9c af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 430.438797][ T287] RSP: 0018:ffffc9000daafc20 EFLAGS: 00010293 [ 430.444843][ T287] RAX: ffffffff81c08c01 RBX: ffff888115dbcbb0 RCX: ffff888109e8d100 [ 430.452798][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 430.460750][ T287] RBP: ffffc9000daafc88 R08: 0000000000000004 R09: 0000000000000003 [ 430.468713][ T287] R10: fffff52001b55f64 R11: 1ffff92001b55f64 R12: dffffc0000000000 [ 430.476662][ T287] R13: 0000000000000001 R14: ffff888115c8d8b0 R15: 1ffff11022bb7976 [ 430.484612][ T287] FS: 0000555594f49500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 430.493520][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.500080][ T287] CR2: 0000555594f7c568 CR3: 000000012fed9000 CR4: 00000000003506b0 [ 430.508038][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 430.515989][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.523939][ T287] Call Trace: [ 430.527197][ T287] [ 430.530119][ T287] vfs_rmdir+0x32/0x500 [ 430.534258][ T287] incfs_kill_sb+0x105/0x220 [ 430.538832][ T287] deactivate_locked_super+0xb5/0x120 [ 430.544186][ T287] deactivate_super+0xaf/0xe0 [ 430.548845][ T287] cleanup_mnt+0x45f/0x4e0 [ 430.553241][ T287] __cleanup_mnt+0x19/0x20 [ 430.557641][ T287] task_work_run+0x1db/0x240 [ 430.562212][ T287] ? __cfi_task_work_run+0x10/0x10 [ 430.567304][ T287] ? __x64_sys_umount+0x125/0x160 [ 430.572308][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 430.577661][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 430.582840][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 430.588277][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 430.593722][ T287] do_syscall_64+0x58/0xa0 [ 430.598141][ T287] ? clear_bhb_loop+0x30/0x80 [ 430.602800][ T287] ? clear_bhb_loop+0x30/0x80 [ 430.607460][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.613332][ T287] RIP: 0033:0x7f642fb90a77 [ 430.617726][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 430.637315][ T287] RSP: 002b:00007ffe17f55fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 430.645707][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f642fb90a77 [ 430.653657][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe17f56090 [ 430.661608][ T287] RBP: 00007ffe17f56090 R08: 0000000000000000 R09: 0000000000000000 [ 430.669555][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe17f57180 [ 430.677520][ T287] R13: 00007f642fc13d7d R14: 0000555594f494a8 R15: 00007ffe17f58250 [ 430.685473][ T287] [ 430.688469][ T287] Modules linked in: [ 430.707178][ T287] ---[ end trace 0000000000000000 ]--- [ 430.712740][ T287] RIP: 0010:may_delete+0x701/0x710 [ 430.717930][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 14 f4 ff e9 77 fe ff ff e8 76 9c af ff 0f 0b e8 6f 9c af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 430.741276][ T287] RSP: 0018:ffffc9000daafc20 EFLAGS: 00010293 [ 430.749838][ T287] RAX: ffffffff81c08c01 RBX: ffff888115dbcbb0 RCX: ffff888109e8d100 [ 430.757896][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 430.769287][ T287] RBP: ffffc9000daafc88 R08: 0000000000000004 R09: 0000000000000003 [ 430.777344][ T287] R10: fffff52001b55f64 R11: 1ffff92001b55f64 R12: dffffc0000000000 [ 430.785766][ T287] R13: 0000000000000001 R14: ffff888115c8d8b0 R15: 1ffff11022bb7976 [ 430.793952][ T287] FS: 0000555594f49500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 430.803512][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.810292][ T287] CR2: 00007f86e87b6ad8 CR3: 000000012fed9000 CR4: 00000000003506b0 [ 430.818666][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 430.827903][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.838432][ T287] Kernel panic - not syncing: Fatal exception [ 430.844732][ T287] Kernel Offset: disabled [ 430.849035][ T287] Rebooting in 86400 seconds..