last executing test programs: 7.919881188s ago: executing program 3 (id=4): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x8cff, 0x0) 7.712724719s ago: executing program 3 (id=7): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000060000001000000000e7ff02050000000e0000000000000205000000005f61306100"], &(0x7f0000001240)=""/112, 0x36, 0x70, 0x0, 0x4, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32, @ANYBLOB="00000700000000f8375285fa824c583f720000000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001079161fa79e3e05b2016f0b304e816178f7046424bd4568f8de034e544403d6e4d9704ec6225980542ec0f460780857af07b00000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getownex(r3, 0x10, &(0x7f0000001840)={0x0, 0x0}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, 0x0, 0x58) syz_clone3(&(0x7f00000018c0)={0x40000000, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001580), {0x40}, &(0x7f00000015c0)=""/207, 0xcf, &(0x7f00000016c0)=""/239, &(0x7f0000001880)=[0x0, r4], 0x2, {r5}}, 0x58) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080)={0xfffc, [0x4, 0xffffffff], 0xfff}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r8, 0x0, 0x18, 0x0, &(0x7f00000006c0)) r9 = add_key$keyring(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r10}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r11, 0x10e, 0x9, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) 7.119392881s ago: executing program 4 (id=19): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x100, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_mount_image$f2fs(&(0x7f0000000b80), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000e40)=ANY=[], 0x1, 0x550e, &(0x7f0000001e00)="$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") r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pwritev2(r1, &(0x7f0000000440)=[{&(0x7f0000000380)="82e5f5df44", 0x5}], 0x1, 0xfffffff9, 0x0, 0x1f) 6.851969293s ago: executing program 4 (id=22): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") (fail_nth: 25) chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000380), 0x24, 0x0) syz_mount_image$exfat(&(0x7f0000002440), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="2c616c6c6f775f753d30303030303030a552303030303030303030303030303030372c646973636172642c00f7d4dceab5ea879b952debb95a4bd62fee1c5818ede60164889e83a588b4e8d85d0c30a28fa4ac4bf29b850e0f3403fda87be3922e7cff7f0000dd9fd4b9ef9af86ead00000000436cdb4047ce2f9fd77a67cf5b8ce94c9f9c55240d215f0cd19cbc29c929d50ee5aad4d9d5ff5709e589ccaf2f461164eb96418b01fc94850a03f75beb688e0efea28d60a7d8a7ba6f0a4eaf2caebdf1fc88d4cac84742fc33dedd39c639b1bb0f"], 0xfe, 0x1518, &(0x7f0000000d80)="$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") chdir(&(0x7f0000000540)='./file0\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x4002, 0x30) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0xfffffffffffffeda) 6.149743287s ago: executing program 4 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='tcp_retransmit_synack\x00', r3}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x0, @in=@multicast2}}, 0xe8) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 5.213759289s ago: executing program 4 (id=29): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f5"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x8cff, 0x0) 5.062199419s ago: executing program 4 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0xfffffff8, 0x0, 0x0, 0x0, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x48, 0x10, 0x439, 0x70bd27, 0xffffffe9, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80e1}, 0x4008040) 4.969772849s ago: executing program 4 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000073e29f48a8dc3a20bd2cc4f8f2ec5fa0086c6aee24d972d9c68d448d28bf0f956d1cd8955aa672b2931ddb59bee36121435eb94329eaa5020420cf092c4adff1e34924d4d8ba14bf19c5f27bf2321b9cef", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x33) listen(r2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x6, 0x6, 0x3, 0x0, 0x0, {0x9, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e00000004fcff", 0x58}], 0x1) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 4.89342979s ago: executing program 0 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r5, @ANYBLOB="24b0cdfed102c9b9db963729914606af6c40810f52f4dc6aca26e346125583214b867f8ebda0843986807cf8dcf43005e1bf3bb6be0882965e94fc290968b85bb9e73c1e328958c34740c7bfeca1e9aaa2523eb0a0b87c23c3e703432370e094b1f4338c510a9d99c15dd3e734a191cf2387d8107447117631e994b4113dabb8c0b6730afd9fc939f585cb181f30e234a6b6ff5c10de2c283a22b069bf9b50c640ce4bd00d", @ANYRES64=0x0, @ANYRES8=r2, @ANYRESOCT=r6, @ANYRES64=r2, @ANYBLOB="f597a80b6de238380655a101bc2c25f6f4ba414f47b3c17904a7ad97235bf8ef2ddbcdcf12e19202799535ee0afcd3d7d702071645f8f312a24a36124894c18b411210eacb8899077cb4228b7e45f4efa2628e0e", @ANYRESDEC], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0, @ANYRESOCT=r11, @ANYRESHEX=r11, @ANYBLOB="a05f5ff5a4e8e1761131eebbad000fddf3f8de40c887215b9d", @ANYRES8=r8, @ANYRESOCT=r10, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x4, 0xd, 0x4f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x39}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x9, 0x7}}}}}]}}]}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r16 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r16, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_udp(0xa, 0x2, 0x0) 4.300250243s ago: executing program 0 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x4, 0x6) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x4}, 0x14) 4.009730683s ago: executing program 0 (id=40): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000df9e001000e39568", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x208}]}, 0x1c}}, 0x4000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) 2.919260129s ago: executing program 0 (id=45): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x6, r4}) bind$xdp(0xffffffffffffffff, &(0x7f0000001e80)={0x2c, 0x2, r4, 0x37}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001e00)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001c40)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/78, 0x4e}], 0x1, &(0x7f00000003c0)=""/150, 0x96}, 0x4}, {{&(0x7f00000005c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000480)=""/30, 0x1e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/19, 0x13}], 0x2, &(0x7f0000000840)=""/213, 0xd5}, 0xfffffff7}, {{&(0x7f0000000940)=@isdn, 0x80, &(0x7f0000001200)=[{&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/178, 0xb2}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/83, 0x53}, {&(0x7f0000000cc0)=""/231, 0xe7}, {&(0x7f0000000dc0)=""/155, 0x9b}, {&(0x7f0000000e80)=""/162, 0xa2}, {&(0x7f0000000f40)=""/176, 0xb0}, {&(0x7f0000001000)=""/240, 0xf0}, {&(0x7f0000001100)=""/244, 0xf4}], 0xa}, 0x6463}, {{&(0x7f00000012c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001340)=""/75, 0x4b}, {&(0x7f00000013c0)=""/17, 0x11}, {&(0x7f0000001400)=""/131, 0x83}, {&(0x7f00000014c0)=""/75, 0x4b}, {&(0x7f0000001540)=""/211, 0xd3}], 0x5, &(0x7f00000016c0)=""/117, 0x75}, 0x2}, {{&(0x7f0000001740)=@vsock, 0x80, &(0x7f0000001880)=[{&(0x7f00000017c0)=""/129, 0x81}], 0x1, &(0x7f00000018c0)=""/181, 0xb5}, 0x6}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a00)=""/35, 0x23}, {&(0x7f0000001a40)=""/90, 0x5a}, {&(0x7f0000001ac0)=""/211, 0xd3}], 0x3, &(0x7f0000001c00)=""/3, 0x3}, 0x7}], 0x7, 0x40, &(0x7f0000001e40)={r8, r9+60000000}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r10}, 0x8) write$FUSE_INIT(r10, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}}, 0x50) read$FUSE(r10, &(0x7f0000008bc0)={0x2020}, 0x2020) 2.918868229s ago: executing program 2 (id=46): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0x240}}, 0x0) 2.902774819s ago: executing program 2 (id=47): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x4006, &(0x7f0000000580)={[{@resuid}, {@grpquota}, {@discard}, {@lazytime}, {@dax_inode}, {@quota}]}, 0x0, 0x432, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7f00) 1.873624523s ago: executing program 2 (id=48): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d8, &(0x7f0000000b00)="$eJzs3c9rHG0dAPDvTLJvf+U1edXDa8G22EpatLtJY9vgoVYQPRWs9V5jsgkhm2zIbtomFEnxriCigidPXgT/AEH6J4hQ0LtUUURbPXhQV3Z2trZxNwl0s1OTzwem8zzzJPv9Pg07M8/Mw0wAx9aFiLgdESMRcSUixvPtab60227f7fzcyxeP59tLEq3Wvb8kkeTbup+V5OszEbETEScj4mtfifhm8r9xG1vbK3O1WnUjr1eaq+uVxtb21eXVuaXqUnVtZmb6xuzN2euzUwPp50RE3PrSH37w3Z9++dYvP/vwd/f/dPlb7bTG8vbX+zFIna6Xsv+LrtGI2DiMYAUYydelPu3fGRliMgAA7Kt9jv/RiPhUdv4/HiPZ2SkAAABwlLS+MBb/TCJaAAAAwJGVZnNgk7SczwUYizQtlztzeD8ep9NavdH8zGJ9c22hM1d2Ikrp4nKtOpXPFZ6IUtKuT+dzbLv1a7vqMxHxQUR8f/xUVi/P12sLRV/8AAAAgGPizK7x/9/Hs/H/iaLzAgAAAAZsYs/WVqvVGloqAAAAwCHZe/wPAAAAHAXG/wAAAHCkffXOnfbS6r7/euHB1uZK/cHVhWpjpby6OV+er2+sl5fq9aXsmX2r+31erV5f/1ysbT6qNKuNZqWxtX1/tb651ry//MYrsAEAAIAh+uD8098mEbHz+VPZ0vZe0UkBQ5Hs0569JOR5Xvn9EBIChmak6ASAwowWnQBQmNKuNXD87HcdoO/knV8NPhcAAOBwTH6i//1/1wTgaEuLTgAAGDr3/+H4Kr05A/B6cZkARfnIPu1vf//fS0QBAKBoY9mSpOX8XuBYpGm5HPF+9lqAUrK4XKtO5eOD34yXTrTr09lvJvvOGQYAAAAAAAAAAAAAAAAAAAAAAAAAOlqtJFoAAADAkRaR/jHJnuYfMTl+aWz39YH3kn+MZ+uIePjjez98NNdsbky3t//11fbmj/Lt14q4ggEAAADs1h2nd8fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBIL188nu8uw4z75y9GxETP+OdPZquTUYqI039LYvS130siYmQA8XeeRMSHveIn7bRiIjpZ9Ip/qsD4aUScGUB8OM6etvc/t3t9/9K4kK17f/9G8+Vt9d//pdHd/4302f+8f8AYZ5/9vNI3/pOIs6O99z/d+Emf+BcPGP8bX9/e7tfW+knEZM/jT/JGrEpzdb3S2Nq+urw6t1Rdqq7NzEzfmL05e312qrK4XKvm//aM8b1P/uLfe/X/dJ/4E/v0/9IB+/+vZ49efKxTLPWKf/li7+Pvh33ip/mx79N5ud0+2S3vdMqvO/ezX5/bq/8Lffr/6u/f40Dbjnn5gP2/cvfbzw/4owDAEDS2tlfmarXqxv9jIY13Ig2FgRROvBtpKHQKRe+ZAACAQfvvSX/RmQAAAAAAAAAAAAAAAAAAAMDxdVhPEdvryQI7xXQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBP/wkAAP//8H7cnQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x0, 0x1, 0x9c, {0x9c, 0x2, "be7d7f5db385a1bd4056b35cfa3e174b689a01f1cf071b5b3bae5ee7feaa9dc31164f9e0101bc5997e97901260c8af488d0f5bd283e3bf5e5046b6da01b79b1732ea1ffb2c1f006cbc0d9f8a20e446556332b099a89113b52f9c0037e3c8f8386adc4bf2f4688149ca222504f1ab71e4402b5182968d018fa9b5d7e2166bb48015f298727df81bf2f9eed0b9f18cf2777bc67efc1a42ae30d255"}}, &(0x7f0000000240)={0x0, 0x3, 0x8, @string={0x8, 0x3, "9060647a9f96"}}, &(0x7f0000000280)={0x0, 0x22, 0x11, {[@local=@item_012={0x1, 0x2, 0x3, "a5"}, @local=@item_012={0x2, 0x2, 0x1, "7de1"}, @main=@item_012={0x2, 0x0, 0xc, "26fb"}, @global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x1, 0x2, 0x7, "12"}, @global=@item_012={0x2, 0x1, 0xb, "1d63"}, @local=@item_012={0x2, 0x2, 0x1, "ac2f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff8, 0x7, 0x1, {0x22, 0x9a0}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000340)={0x20, 0xe, 0xe4, "161f343532eee74c50ea7219800ffbd3f966b01894229510135e66c03ceae60b6618339a05ae1d057529553d4d4ca83e8638cf731e96bd8d5360587dad4101febc6e07b075eff51150561e4a4c6086fbf56d68ed5f32446f58f534169c4877cb9fde7f9e9a6bbf4997b7b79f03445cf1d33bf3ba97f74a2624410d1cb143487a43943571d843def2b5c73ca17b1c01f7b5c4b5f8bd4ac2908101216a1327d4f5a04b1dd360bcb385aa2a0cb0ccc55461af6b68e6fc49028c92ea260c21a37b8e06c1852561e57f93d617eee0d5865408c6f6f5f30ce9ab5ed0d0dfc20a7ddf58e2678f69"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000004c0)={0x20, 0x1, 0xfb, "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"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x86}}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.706979304s ago: executing program 0 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000380)={0x18, 0x2, {0xfffe, @empty}}, 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x891) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r4, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) 1.555891804s ago: executing program 1 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x80000001}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e05, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) openat$ashmem(0xffffffffffffff9c, 0x0, 0x800, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x110) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0xffffffffa003e45b, 0x700000000000000) 741.523447ms ago: executing program 0 (id=51): r0 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="feff010040000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r1], 0x44}}, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1008080, &(0x7f0000000100)=ANY=[], 0x3, 0x1253, &(0x7f0000002b00)="$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") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xfc, 0x17, 0x200, 0x70bd26, 0x25dfdbff, {0x18}, [@typed={0x4, 0x5}, @typed={0x5, 0x5b, 0x0, 0x0, @str='\x00'}, @nested={0xdc, 0x4f, 0x0, 0x1, [@generic="2c0e7832d16e00bac5dbe0e54bda39eeb189425d1aa70f0a4976fc2a1bf45a5dd27f9bde235f290539f2149404e0381cac05573bb5ef5c8f601031abeca6395c244ed28d2146aff1f1851cd3ec77b5f4e3d4630513eba1e5bb9af194cf04def32232d77600f05a78a77ee4187a748b9eaafd", @generic="44b686d7e7211f1115ff469855b28b90d8e300c04c5e92ea19f221ce4b1b18639844fdea4ea6084a4b7670a99fde293cbb6b8deefe984028187667b651057e273c02b9ad7dd489e8a6f8c38d550187bf7be18c816435e310b14a6e1c7c06", @typed={0x8, 0xa9, 0x0, 0x0, @pid=r3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RFSYNC(r8, &(0x7f0000000700)={0x7, 0x33, 0x1}, 0x7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x436, 0x519000) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000040)=0x5) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r9, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r9, &(0x7f0000000200)="fd7306889f8f7adf781e8e8a317860418b60b727580386b3685322a9796d62c4b8c39787fecf0484342f7cf92d538dd6fb5973007442cb35837ee3c93621293ccaa5b980c7adaaaabc9a0af87fc131f54a8c6dd6a7072be60addf5a6e1a2108518cf9ac488e12c06c722bff49ad2a4d0c8436984a4413ef61f6adaceb5079c9c7376e71eeaa27431be379f885de5e1a45a1ee8859fa46c1a056b5d9df8f5356fde684b3e73876497b51530d1c4addcd59344c4f67d5b3cdebd5a885bd0164f9be8ac5a69efb4fc6a71cea4e509a8d89aca8dfd9e519bd082bd0ad915155c50be6be83956795ada90"}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea400000000001090224"], 0x0) 671.754108ms ago: executing program 2 (id=52): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername(r0, 0x0, &(0x7f00000002c0)) 441.597609ms ago: executing program 1 (id=53): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000001181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x7ff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) 324.572849ms ago: executing program 2 (id=54): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x110) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 186.183279ms ago: executing program 1 (id=55): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 160.655459ms ago: executing program 2 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getegid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x4, 0xff, 0x4, 0x7fff0006}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x10000, 0x103, 0x7, 0x8, 0x1, 0x9b3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f00000006c0)={[{@i_version}, {@usrjquota_path}, {@acl}, {@minixdf}, {@resgid={'resgid', 0x3d, r1}}, {@grpid}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$unix(0x1, 0x1, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfffffffffffffe12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xffffffffffffffff, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES64=r5, @ANYBLOB="09b4acac56c2fd63cb97f2779231dc4637a1978977c2aa5eb7f4f94793baf090dafe43974e0516b4d63c9aca78ff01ecceaa6aaa22bec1702c50ab1c7a93ab104781ffbc4b7b89ccd1becf43c337db551d6b24d672e0c8d8fa2bb61c7fa34d98170424ce2bfddc8acf2f530a085c6f8ddf5f8564", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYRESOCT=r6, @ANYRESDEC=r0, @ANYBLOB="00000000000000000000000000000000000000000000001100000000a09407feddb014592abcfd4724ac13c2b19147a9bb270174"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000540)='xen_mmu_release_ptpage\x00', 0xffffffffffffffff, 0x0, 0x4000000000000002}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000800), &(0x7f0000000280)}, 0x20) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 81.75503ms ago: executing program 1 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000280), 0x20000000}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8b]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x18, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) 25.72252ms ago: executing program 1 (id=58): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0006}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='bcache_alloc_fail\x00', r2, 0x0, 0x2}, 0x18) socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {r3, r4/1000+60000}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=59): r0 = open(&(0x7f0000000180)='./file0\x00', 0x101081, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x71d9) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x90301, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r1, 0x0, 0x7, &(0x7f00000000c0)='cgroup\x00'}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfe000000000000000000000900000000000000000000000900000000000000000000000a020000000000"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xd, 0x0}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="c11dba085a06082b0075"], 0xb) kernel console output (not intermixed with test programs): [ 3.540644][ T24] audit: type=1400 audit(1732212433.560:9): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3.544150][ T24] audit: type=1400 audit(1732212433.560:10): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3.865963][ T94] udevd[94]: starting version 3.2.11 [ 3.899550][ T95] udevd[95]: starting eudev-3.2.11 [ 12.041689][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 12.041699][ T24] audit: type=1400 audit(1732212442.080:61): avc: denied { transition } for pid=216 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.047144][ T24] audit: type=1400 audit(1732212442.080:62): avc: denied { noatsecure } for pid=216 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.051078][ T24] audit: type=1400 audit(1732212442.080:63): avc: denied { write } for pid=216 comm="sh" path="pipe:[12996]" dev="pipefs" ino=12996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.055277][ T24] audit: type=1400 audit(1732212442.080:64): avc: denied { rlimitinh } for pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.058350][ T24] audit: type=1400 audit(1732212442.080:65): avc: denied { siginh } for pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 18.829057][ T24] audit: type=1400 audit(1732212448.870:66): avc: denied { mounton } for pid=272 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.830107][ T272] cgroup: Unknown subsys name 'net' [ 18.832267][ T24] audit: type=1400 audit(1732212448.870:67): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.836682][ T24] audit: type=1400 audit(1732212448.870:68): avc: denied { unmount } for pid=272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.836826][ T272] cgroup: Unknown subsys name 'devices' [ 18.987956][ T272] cgroup: Unknown subsys name 'hugetlb' [ 18.993359][ T272] cgroup: Unknown subsys name 'rlimit' [ 19.130859][ T24] audit: type=1400 audit(1732212449.170:69): avc: denied { setattr } for pid=272 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.153809][ T24] audit: type=1400 audit(1732212449.170:70): avc: denied { mounton } for pid=272 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.178455][ T24] audit: type=1400 audit(1732212449.170:71): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.183924][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.209867][ T24] audit: type=1400 audit(1732212449.250:72): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.235154][ T24] audit: type=1400 audit(1732212449.250:73): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.261435][ T24] audit: type=1400 audit(1732212449.300:74): avc: denied { read } for pid=272 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.286832][ T272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.286995][ T24] audit: type=1400 audit(1732212449.300:75): avc: denied { open } for pid=272 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.213058][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.220065][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.227544][ T284] device bridge_slave_0 entered promiscuous mode [ 20.235354][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.242489][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.249673][ T284] device bridge_slave_1 entered promiscuous mode [ 20.267464][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.274305][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.281580][ T283] device bridge_slave_0 entered promiscuous mode [ 20.288775][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.295611][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.302886][ T283] device bridge_slave_1 entered promiscuous mode [ 20.309191][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.316019][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.323307][ T282] device bridge_slave_0 entered promiscuous mode [ 20.329990][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.336853][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.343972][ T282] device bridge_slave_1 entered promiscuous mode [ 20.369668][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.376640][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.383638][ T285] device bridge_slave_0 entered promiscuous mode [ 20.408360][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.415204][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.422591][ T285] device bridge_slave_1 entered promiscuous mode [ 20.478412][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.485262][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.492614][ T286] device bridge_slave_0 entered promiscuous mode [ 20.501121][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.508023][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.515057][ T286] device bridge_slave_1 entered promiscuous mode [ 20.590828][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.597691][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.604769][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.611589][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.637731][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.644579][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.651715][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.658495][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.666813][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.673654][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.680774][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.687563][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.697308][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.704143][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.711282][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.718041][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.735973][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.743163][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.750851][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.757884][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.764859][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.771994][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.778990][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.785925][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.793499][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.800710][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.831139][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.839169][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.845997][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.863142][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.870418][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.878465][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.885285][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.892981][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.917843][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.925663][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.933898][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.940757][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.948178][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.956089][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.962951][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.970198][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.978497][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.985318][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.992611][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.000539][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.007381][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.014586][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.022300][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.030246][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.038326][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.045144][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.052448][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.060565][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.067411][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.074538][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.081789][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.089111][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.113853][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.122761][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.130772][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.139300][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.147125][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.154811][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.162915][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.169766][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.177180][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.185081][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.191840][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.201340][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.209563][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.228258][ T284] device veth0_vlan entered promiscuous mode [ 21.240649][ T282] device veth0_vlan entered promiscuous mode [ 21.249682][ T286] device veth0_vlan entered promiscuous mode [ 21.258857][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.266757][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.274446][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.282963][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.291092][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.298941][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.306752][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.314495][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.322343][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.330058][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.337915][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.345940][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.354076][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.361794][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.369777][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.377601][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.385277][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.392695][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.400075][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.407389][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.414580][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.422006][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.434320][ T284] device veth1_macvtap entered promiscuous mode [ 21.444768][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.452898][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.460947][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.468635][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.476841][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.484871][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.493069][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.504476][ T283] device veth0_vlan entered promiscuous mode [ 21.512424][ T282] device veth1_macvtap entered promiscuous mode [ 21.520358][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.527988][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.536053][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.544587][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.552458][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.560628][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.567944][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.577238][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.585184][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.601052][ T285] device veth0_vlan entered promiscuous mode [ 21.607634][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.615703][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.624148][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.632791][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.641149][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.649000][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.656810][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.664921][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.673193][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.681336][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.689779][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.697154][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.708271][ T286] device veth1_macvtap entered promiscuous mode [ 21.719132][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.726977][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.735021][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.749441][ T283] device veth1_macvtap entered promiscuous mode [ 21.757036][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.764557][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.772876][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.781049][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.789033][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.809167][ T285] device veth1_macvtap entered promiscuous mode [ 21.817339][ T284] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.827962][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.840519][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.852963][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.861352][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.869795][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.878111][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.886116][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.916486][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.926058][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.934507][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.943251][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.987146][ T315] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.223419][ T48] Bluetooth: hci0: Frame reassembly failed (-84) [ 22.236387][ T54] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.307450][ T346] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 22.319457][ T346] EXT4-fs (loop4): first meta block group too large: 50331648 (group descriptor block count 1) [ 22.353576][ T350] FAULT_INJECTION: forcing a failure. [ 22.353576][ T350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 22.367823][ T350] CPU: 1 PID: 350 Comm: syz.0.12 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0 [ 22.377267][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 22.387264][ T350] Call Trace: [ 22.390398][ T350] dump_stack_lvl+0x1e2/0x24b [ 22.394902][ T350] ? bfq_pos_tree_add_move+0x43b/0x43b [ 22.400192][ T350] ? preempt_schedule_irq+0xe7/0x140 [ 22.405314][ T350] dump_stack+0x15/0x17 [ 22.409306][ T350] should_fail+0x3c6/0x510 [ 22.413560][ T350] should_fail_usercopy+0x1a/0x20 [ 22.418420][ T350] _copy_to_user+0x20/0x90 [ 22.422675][ T350] simple_read_from_buffer+0xc7/0x150 [ 22.427888][ T350] proc_fail_nth_read+0x1a3/0x210 [ 22.434243][ T350] ? proc_fault_inject_write+0x390/0x390 [ 22.439676][ T350] ? security_file_permission+0x86/0xb0 [ 22.445061][ T350] ? rw_verify_area+0x1c3/0x360 [ 22.449752][ T350] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.454870][ T350] ? proc_fault_inject_write+0x390/0x390 [ 22.460341][ T350] vfs_read+0x200/0xba0 [ 22.464332][ T350] ? __switch_to_asm+0x34/0x60 [ 22.468924][ T350] ? kernel_read+0x70/0x70 [ 22.473180][ T350] ? __kasan_check_write+0x14/0x20 [ 22.478124][ T350] ? mutex_lock+0xa5/0x110 [ 22.483254][ T350] ? mutex_trylock+0xa0/0xa0 [ 22.487684][ T350] ? __fdget_pos+0x2e7/0x3a0 [ 22.492096][ T350] ? ksys_read+0x77/0x2c0 [ 22.496265][ T350] ksys_read+0x199/0x2c0 [ 22.500347][ T350] ? vfs_write+0xe70/0xe70 [ 22.504601][ T350] ? array_map_lookup_elem+0x5e/0x140 [ 22.509812][ T350] __x64_sys_read+0x7b/0x90 [ 22.514149][ T350] do_syscall_64+0x34/0x70 [ 22.518403][ T350] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.524127][ T350] RIP: 0033:0x7fba7d02325c [ 22.528389][ T350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 22.547821][ T350] RSP: 002b:00007fba7b69d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 22.556064][ T350] RAX: ffffffffffffffda RBX: 00007fba7d1dbfa0 RCX: 00007fba7d02325c [ 22.563875][ T350] RDX: 000000000000000f RSI: 00007fba7b69d0a0 RDI: 0000000000000006 [ 22.571687][ T350] RBP: 00007fba7b69d090 R08: 0000000000000000 R09: 0000000000000000 [ 22.579499][ T350] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 22.587331][ T350] R13: 0000000000000000 R14: 00007fba7d1dbfa0 R15: 00007ffc0385a8b8 [ 22.646383][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 22.766528][ T54] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 22.775066][ T54] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 22.785733][ T54] usb 2-1: config 135 has no interface number 0 [ 22.791867][ T54] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 22.917326][ T372] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 22.924685][ T372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 22.936135][ T372] F2FS-fs (loop4): invalid crc value [ 22.943042][ T378] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 22.948892][ T372] F2FS-fs (loop4): Found nat_bits in checkpoint [ 22.966459][ T54] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 22.975487][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.979552][ T372] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 22.983565][ T54] usb 2-1: Product: syz [ 22.990844][ T372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 22.994389][ T54] usb 2-1: Manufacturer: syz [ 23.009366][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.009758][ T378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21'. [ 23.017171][ T54] usb 2-1: SerialNumber: syz [ 23.042655][ T285] attempt to access beyond end of device [ 23.042655][ T285] loop4: rw=2049, want=45104, limit=40427 [ 23.087197][ T54] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 23.093987][ T54] uvcvideo: No valid video chain found. [ 23.121040][ T390] FAULT_INJECTION: forcing a failure. [ 23.121040][ T390] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 23.134188][ T390] CPU: 0 PID: 390 Comm: syz.4.22 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0 [ 23.143612][ T390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 23.153506][ T390] Call Trace: [ 23.156632][ T390] dump_stack_lvl+0x1e2/0x24b [ 23.161160][ T390] ? bfq_pos_tree_add_move+0x43b/0x43b [ 23.166455][ T390] dump_stack+0x15/0x17 [ 23.170435][ T390] should_fail+0x3c6/0x510 [ 23.174689][ T390] should_fail_alloc_page+0x52/0x60 [ 23.179726][ T390] __alloc_pages_nodemask+0x1b3/0xaf0 [ 23.184924][ T390] ? __kasan_check_read+0x11/0x20 [ 23.189791][ T390] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 23.195203][ T390] ? __mod_node_page_state+0xac/0xf0 [ 23.200300][ T390] ? lru_cache_add+0x15e/0x380 [ 23.204909][ T390] ? __lru_cache_add_inactive_or_unevictable+0x37/0x160 [ 23.211677][ T390] handle_pte_fault+0x175a/0x3e10 [ 23.216536][ T390] ? vmf_allows_speculation+0x6f0/0x6f0 [ 23.222162][ T390] ? __handle_speculative_fault+0xd03/0x1e90 [ 23.227986][ T390] ? memcpy+0x56/0x70 [ 23.231793][ T390] __handle_speculative_fault+0x1370/0x1e90 [ 23.237520][ T390] ? finish_fault+0xaf0/0xaf0 [ 23.242037][ T390] ? __kasan_check_write+0x14/0x20 [ 23.246994][ T390] ? down_read_trylock+0x179/0x1d0 [ 23.251936][ T390] ? debug_smp_processor_id+0x17/0x20 [ 23.257142][ T390] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 23.263041][ T390] exc_page_fault+0x234/0x5b0 [ 23.267554][ T390] ? asm_exc_page_fault+0x8/0x30 [ 23.272328][ T390] asm_exc_page_fault+0x1e/0x30 [ 23.277010][ T390] RIP: 0033:0x7fe91e0e1900 [ 23.281408][ T390] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 23.300992][ T390] RSP: 002b:00007fe91c8964a0 EFLAGS: 00010206 [ 23.307082][ T390] RAX: 0000000000019000 RBX: 00007fe91c896540 RCX: 0000000000000101 [ 23.314893][ T390] RDX: 00000000000003e3 RSI: 0000000000000fe4 RDI: 00007fe91c8965e0 [ 23.322707][ T390] RBP: 0000000000000102 R08: 00007fe914477000 R09: 0000000000000005 [ 23.330524][ T390] R10: 0000000020000c02 R11: 00000000000005d6 R12: 0000000000000c01 [ 23.338372][ T390] R13: 00007fe91e2a5fa0 R14: 0000000000000017 R15: 00007fe91c8965e0 [ 23.346639][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.355303][ T390] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 23.375049][ T390] EXT4-fs (loop4): Ignoring removed orlov option [ 23.376646][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.393253][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.394579][ T390] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 23.403169][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.441028][ T25] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 23.450168][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.458893][ T25] usb 1-1: config 0 descriptor?? [ 23.468637][ T311] usb 2-1: USB disconnect, device number 2 [ 23.596680][ T390] ====================================================== [ 23.596680][ T390] WARNING: the mand mount option is being deprecated and [ 23.596680][ T390] will be removed in v5.15! [ 23.596680][ T390] ====================================================== [ 23.638403][ T390] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d) [ 24.086357][ T24] kauditd_printk_skb: 89 callbacks suppressed [ 24.086375][ T24] audit: type=1400 audit(1732212454.120:165): avc: denied { bind } for pid=402 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.249097][ T24] audit: type=1400 audit(1732212454.150:166): avc: denied { setopt } for pid=402 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.273884][ T405] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 24.283741][ T405] bridge: RTM_NEWNEIGH with invalid ether address [ 24.306619][ T24] audit: type=1400 audit(1732212454.280:167): avc: denied { ioctl } for pid=404 comm="syz.1.26" path="socket:[15017]" dev="sockfs" ino=15017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 24.466954][ T24] audit: type=1400 audit(1732212454.330:168): avc: denied { write } for pid=404 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 24.612291][ T25] gt683r_led 0003:1770:FF00.0001: item fetching failed at offset 1/5 [ 24.620232][ T20] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 24.628311][ T20] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 24.638539][ T25] gt683r_led 0003:1770:FF00.0001: hid parsing failed [ 24.645081][ T25] gt683r_led: probe of 0003:1770:FF00.0001 failed with error -22 [ 24.652621][ T20] usb 3-1: config 220 has no interface number 2 [ 24.686018][ T24] audit: type=1400 audit(1732212454.460:169): avc: denied { create } for pid=406 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.706881][ T24] audit: type=1400 audit(1732212454.460:170): avc: denied { create } for pid=406 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 24.729472][ T20] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 24.737171][ T24] audit: type=1400 audit(1732212454.460:171): avc: denied { write } for pid=406 comm="syz.1.27" path="socket:[15030]" dev="sockfs" ino=15030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 24.742696][ T25] usb 1-1: USB disconnect, device number 2 [ 24.772352][ T20] usb 3-1: config 220 interface 0 has no altsetting 0 [ 24.777273][ T24] audit: type=1400 audit(1732212454.470:172): avc: denied { nlmsg_read } for pid=406 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 24.799210][ T20] usb 3-1: config 220 interface 76 has no altsetting 0 [ 24.805972][ T20] usb 3-1: config 220 interface 1 has no altsetting 0 [ 24.814415][ T373] Bluetooth: hci0: command 0x1003 tx timeout [ 24.820321][ T339] Bluetooth: hci0: sending frame failed (-49) [ 24.851945][ T24] audit: type=1400 audit(1732212454.890:173): avc: denied { create } for pid=409 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 24.892024][ T420] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 24.899086][ T420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1542 sclass=netlink_tcpdiag_socket pid=420 comm=syz.4.32 [ 24.932625][ T24] audit: type=1400 audit(1732212454.970:174): avc: denied { read write } for pid=422 comm="syz.0.33" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.966498][ T20] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 24.975690][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.983567][ T20] usb 3-1: Product: syz [ 24.987535][ T20] usb 3-1: Manufacturer: syz [ 24.991947][ T20] usb 3-1: SerialNumber: syz [ 25.396753][ T20] usb 3-1: selecting invalid altsetting 0 [ 25.402386][ T20] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 25.408736][ T20] uvcvideo: No valid video chain found. [ 25.489077][ T20] usb 3-1: USB disconnect, device number 2 [ 25.923786][ T448] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue [ 25.934709][ T448] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038 (0x7fffffff) [ 26.654749][ T461] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 26.675172][ T461] FAULT_INJECTION: forcing a failure. [ 26.675172][ T461] name failslab, interval 1, probability 0, space 0, times 1 [ 26.691008][ T461] CPU: 1 PID: 461 Comm: syz.1.43 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0 [ 26.700458][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 26.710352][ T461] Call Trace: [ 26.713485][ T461] dump_stack_lvl+0x1e2/0x24b [ 26.717992][ T461] ? bfq_pos_tree_add_move+0x43b/0x43b [ 26.723288][ T461] ? mutex_lock+0xa5/0x110 [ 26.727541][ T461] dump_stack+0x15/0x17 [ 26.731535][ T461] should_fail+0x3c6/0x510 [ 26.735785][ T461] ? getname_flags+0xba/0x520 [ 26.740296][ T461] __should_failslab+0xa4/0xe0 [ 26.744943][ T461] should_failslab+0x9/0x20 [ 26.749242][ T461] kmem_cache_alloc+0x3d/0x2e0 [ 26.753836][ T461] ? __ia32_sys_read+0x90/0x90 [ 26.758438][ T461] getname_flags+0xba/0x520 [ 26.762780][ T461] __x64_sys_rename+0x5f/0x90 [ 26.767375][ T461] do_syscall_64+0x34/0x70 [ 26.771632][ T461] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.777355][ T461] RIP: 0033:0x7f5c59e8c819 [ 26.781612][ T461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 26.801063][ T461] RSP: 002b:00007f5c58505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 26.809295][ T461] RAX: ffffffffffffffda RBX: 00007f5c5a043fa0 RCX: 00007f5c59e8c819 [ 26.817107][ T461] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000020000040 [ 26.824918][ T461] RBP: 00007f5c58505090 R08: 0000000000000000 R09: 0000000000000000 [ 26.832729][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.840546][ T461] R13: 0000000000000000 R14: 00007f5c5a043fa0 R15: 00007ffc4e6dd568 [ 26.846474][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 26.877260][ T421] Bluetooth: hci0: sending frame failed (-49) [ 26.927362][ T25] Bluetooth: hci1: command 0x1003 tx timeout [ 26.967550][ T421] Bluetooth: hci1: sending frame failed (-49) [ 27.018348][ T466] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue [ 27.028774][ T466] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 27.125117][ T474] EXT4-fs (loop2): dax option not supported [ 28.220549][ T484] EXT4-fs (loop2): 1 orphan inode deleted [ 28.226202][ T484] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue [ 28.283975][ T484] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 28.310999][ T484] xt_hashlimit: size too large, truncated to 1048576 [ 28.926371][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 29.006366][ T20] Bluetooth: hci1: command 0x1001 tx timeout [ 29.012471][ T421] Bluetooth: hci1: sending frame failed (-49) [ 29.203233][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 29.539414][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 29.539425][ T24] audit: type=1326 audit(1732212459.580:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000 [ 29.569226][ T24] audit: type=1326 audit(1732212459.580:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000 [ 29.592339][ T24] audit: type=1326 audit(1732212459.580:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f8d50460819 code=0x7ffc0000 [ 29.615064][ T24] audit: type=1326 audit(1732212459.580:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000 [ 29.638205][ T24] audit: type=1326 audit(1732212459.580:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=501 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50460819 code=0x7ffc0000 [ 29.688584][ T24] audit: type=1400 audit(1732212459.730:206): avc: denied { bind } for pid=497 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.710336][ T24] audit: type=1400 audit(1732212459.750:207): avc: denied { write } for pid=497 comm="syz.0.51" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.733082][ T24] audit: type=1400 audit(1732212459.750:208): avc: denied { open } for pid=497 comm="syz.0.51" path="/dev/ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.758694][ T24] audit: type=1400 audit(1732212459.750:209): avc: denied { ioctl } for pid=497 comm="syz.0.51" path="/dev/ppp" dev="devtmpfs" ino=149 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.863107][ T511] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.56: inode #1: comm syz.2.56: iget: illegal inode # [ 29.876573][ T511] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.56: error while reading EA inode 1 err=-117 [ 29.888910][ T511] EXT4-fs (loop2): 1 orphan inode deleted [ 29.894462][ T511] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,usrjquota=,acl,minixdf,resgid=0x0000000000000000,grpid,usrjquota=,,errors=continue [ 29.917623][ T511] ================================================================== [ 29.925523][ T511] BUG: KASAN: use-after-free in ext4_insert_dentry+0x392/0x710 [ 29.932885][ T511] Write of size 250 at addr ffff8881305d8f18 by task syz.2.56/511 [ 29.940513][ T511] [ 29.942700][ T511] CPU: 1 PID: 511 Comm: syz.2.56 Not tainted 5.10.226-syzkaller-00031-gb14940b90491 #0 [ 29.952147][ T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 29.962042][ T511] Call Trace: [ 29.965174][ T511] dump_stack_lvl+0x1e2/0x24b [ 29.969685][ T511] ? bfq_pos_tree_add_move+0x43b/0x43b [ 29.974976][ T511] ? panic+0x812/0x812 [ 29.978893][ T511] ? __ext4_handle_dirty_metadata+0x2de/0x810 [ 29.984806][ T511] print_address_description+0x81/0x3b0 [ 29.990177][ T511] kasan_report+0x179/0x1c0 [ 29.994509][ T511] ? ext4_insert_dentry+0x392/0x710 [ 29.999668][ T511] ? ext4_insert_dentry+0x392/0x710 [ 30.004678][ T511] kasan_check_range+0x293/0x2a0 [ 30.009443][ T511] ? ext4_insert_dentry+0x392/0x710 [ 30.014478][ T511] memcpy+0x44/0x70 [ 30.018121][ T511] ext4_insert_dentry+0x392/0x710 [ 30.022986][ T511] add_dirent_to_buf+0x3ac/0x780 [ 30.027764][ T511] ? ext4_dx_add_entry+0x1600/0x1600 [ 30.032890][ T511] ? ext4_handle_dirty_dx_node+0x41c/0x580 [ 30.038526][ T511] make_indexed_dir+0xe9f/0x1500 [ 30.043294][ T511] ? add_dirent_to_buf+0x780/0x780 [ 30.048238][ T511] ? add_dirent_to_buf+0x36f/0x780 [ 30.053194][ T511] ? ext4_dx_add_entry+0x1600/0x1600 [ 30.058308][ T511] ? __kasan_check_read+0x11/0x20 [ 30.063164][ T511] ? __ext4_read_dirblock+0x4d8/0x8c0 [ 30.068376][ T511] ext4_add_entry+0xdcf/0x1280 [ 30.072977][ T511] ? ext4_inc_count+0x190/0x190 [ 30.077661][ T511] ? ext4_init_new_dir+0x7c8/0xa20 [ 30.082611][ T511] ? ext4_init_dot_dotdot+0x500/0x500 [ 30.087817][ T511] ext4_mkdir+0x4d2/0xba0 [ 30.091986][ T511] ? ext4_symlink+0xe40/0xe40 [ 30.096500][ T511] ? selinux_inode_mkdir+0x22/0x30 [ 30.101447][ T511] ? security_inode_mkdir+0xbc/0x100 [ 30.106567][ T511] vfs_mkdir+0x4cf/0x6c0 [ 30.110645][ T511] do_mkdirat+0x1a6/0x2c0 [ 30.114808][ T511] ? do_mknodat+0x450/0x450 [ 30.119149][ T511] ? fpu__clear_all+0x20/0x20 [ 30.123667][ T511] ? __kasan_check_read+0x11/0x20 [ 30.128525][ T511] __x64_sys_mkdirat+0x7b/0x90 [ 30.133127][ T511] do_syscall_64+0x34/0x70 [ 30.137381][ T511] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.143107][ T511] RIP: 0033:0x7f8d50460819 [ 30.147356][ T511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.166802][ T511] RSP: 002b:00007f8d4ead9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 30.175042][ T511] RAX: ffffffffffffffda RBX: 00007f8d50617fa0 RCX: 00007f8d50460819 [ 30.182852][ T511] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: ffffffffffffff9c [ 30.190665][ T511] RBP: 00007f8d504d375e R08: 0000000000000000 R09: 0000000000000000 [ 30.198476][ T511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.206283][ T511] R13: 0000000000000000 R14: 00007f8d50617fa0 R15: 00007fff385f81b8 [ 30.214097][ T511] [ 30.216262][ T511] The buggy address belongs to the page: [ 30.221761][ T511] page:ffffea0004c17600 refcount:3 mapcount:0 mapping:ffff888109197150 index:0x3f pfn:0x1305d8 [ 30.231899][ T511] aops:def_blk_aops ino:0 [ 30.236055][ T511] flags: 0x400000000000202a(referenced|dirty|active|private) [ 30.243268][ T511] raw: 400000000000202a dead000000000100 dead000000000122 ffff888109197150 [ 30.251684][ T511] raw: 000000000000003f ffff88811ab842a0 00000003ffffffff ffff88810f558000 [ 30.260096][ T511] page dumped because: kasan: bad access detected [ 30.266362][ T511] page->mem_cgroup:ffff88810f558000 [ 30.271391][ T511] page_owner tracks the page as allocated [ 30.276948][ T511] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 511, ts 29917480613, free_ts 29892918471 [ 30.293785][ T511] prep_new_page+0x166/0x180 [ 30.298247][ T511] get_page_from_freelist+0x2d8c/0x2f30 [ 30.303586][ T511] __alloc_pages_nodemask+0x435/0xaf0 [ 30.308792][ T511] pagecache_get_page+0x669/0x950 [ 30.313663][ T511] __getblk_gfp+0x221/0x7e0 [ 30.317997][ T511] ext4_getblk+0x259/0x660 [ 30.322268][ T511] ext4_bread+0x2f/0x1b0 [ 30.326327][ T511] ext4_append+0x29a/0x4d0 [ 30.330580][ T511] make_indexed_dir+0x505/0x1500 [ 30.335382][ T511] ext4_add_entry+0xdcf/0x1280 [ 30.339961][ T511] ext4_mkdir+0x4d2/0xba0 [ 30.344118][ T511] vfs_mkdir+0x4cf/0x6c0 [ 30.348197][ T511] do_mkdirat+0x1a6/0x2c0 [ 30.352361][ T511] __x64_sys_mkdirat+0x7b/0x90 [ 30.356961][ T511] do_syscall_64+0x34/0x70 [ 30.361306][ T511] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.367026][ T511] page last free stack trace: [ 30.371548][ T511] free_unref_page_prepare+0x2ae/0x2d0 [ 30.376930][ T511] free_unref_page_list+0x122/0xb20 [ 30.382053][ T511] release_pages+0xea0/0xef0 [ 30.386473][ T511] free_pages_and_swap_cache+0x8a/0xa0 [ 30.391767][ T511] tlb_finish_mmu+0x177/0x320 [ 30.396281][ T511] exit_mmap+0x312/0x5c0 [ 30.400360][ T511] __mmput+0x95/0x2d0 [ 30.404177][ T511] mmput+0x59/0x170 [ 30.407823][ T511] do_exit+0xbda/0x2a50 [ 30.411820][ T511] do_group_exit+0x141/0x310 [ 30.416245][ T511] get_signal+0x10a0/0x1410 [ 30.420599][ T511] arch_do_signal_or_restart+0xbd/0x17c0 [ 30.426059][ T511] exit_to_user_mode_loop+0x9b/0xd0 [ 30.431088][ T511] syscall_exit_to_user_mode+0xa2/0x1a0 [ 30.436465][ T511] do_syscall_64+0x40/0x70 [ 30.440724][ T511] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.446439][ T511] [ 30.448608][ T511] Memory state around the buggy address: [ 30.454084][ T511] ffff8881305d8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.461982][ T511] ffff8881305d8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.469879][ T511] >ffff8881305d9000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 30.477775][ T511] ^ [ 30.481687][ T511] ffff8881305d9080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 30.489581][ T511] ffff8881305d9100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 30.497476][ T511] ================================================================== [ 30.505374][ T511] Disabling lock debugging due to kernel taint [ 30.511539][ T24] audit: type=1400 audit(1732212459.950:210): avc: denied { create } for pid=510 comm="syz.2.56" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.616464][ T373] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.906396][ T373] usb 1-1: Using ep0 maxpacket: 16 [ 31.026411][ T373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.036348][ T373] usb 1-1: config 0 has no interfaces? [ 31.041596][ T373] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 31.050501][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.059341][ T373] usb 1-1: config 0 descriptor?? [ 31.086393][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 31.318313][ T20] usb 1-1: USB disconnect, device number 3