last executing test programs: 14m10.038182997s ago: executing program 32 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240c0081}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 12m6.975157161s ago: executing program 33 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x71d0b8801b5f1c98) 11m59.020984996s ago: executing program 34 (id=1093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) listen(r1, 0x3) 11m55.381216723s ago: executing program 35 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x40000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff3, 0xb}, {0xfff3, 0xb}}}, 0x24}}, 0x20004000) 11m53.749899868s ago: executing program 36 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0xfffffffffffffffe, 0x3, 0x4, 0x1], 0xd5d5c004, 0x8341}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11m44.670752991s ago: executing program 37 (id=1207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 11m36.777502815s ago: executing program 38 (id=1354): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 11m36.610656448s ago: executing program 39 (id=1365): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 11m30.194705429s ago: executing program 40 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x81) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 3m12.165716229s ago: executing program 6 (id=4390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000008000000a000000000311900181000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x0, 0x0, 0x0) 3m12.10685351s ago: executing program 6 (id=4391): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000200)={[{@shortname_mixed}, {@fat=@sys_immutable}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@uni_xlate}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@rodir}]}, 0x3, 0x350, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1e5) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r6, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m11.516358539s ago: executing program 6 (id=4396): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0xe8030000}}}}}}}}, 0x0) 3m9.842056126s ago: executing program 6 (id=4405): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x576, &(0x7f0000000380)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) getdents(r0, &(0x7f0000001fc0)=""/183, 0xb7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x4804) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x6fd77cc5b4a585bf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4c001) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x48099) 3m9.667320638s ago: executing program 6 (id=4407): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') lseek(r0, 0x1, 0x0) getdents(r0, &(0x7f0000020940)=""/224, 0xe0) 3m6.962712331s ago: executing program 6 (id=4417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x163) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200042, 0x0) flistxattr(r6, 0x0, 0x0) r7 = dup(r2) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002140)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, r9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}}) 3m6.902738142s ago: executing program 41 (id=4417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x163) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200042, 0x0) flistxattr(r6, 0x0, 0x0) r7 = dup(r2) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002140)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, r9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}}) 2m37.459723784s ago: executing program 1 (id=4573): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2m36.4344406s ago: executing program 1 (id=4575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x100) inotify_init() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 2m35.028063782s ago: executing program 1 (id=4587): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d3ec66ecc053c543da5f25"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0)={r1, r2}, 0xc) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) write$cgroup_type(r3, &(0x7f0000000100), 0x9) 2m34.887863225s ago: executing program 1 (id=4592): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000b00)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x10) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m33.88680476s ago: executing program 1 (id=4598): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000008000000a000000000311900181000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 2m33.494211777s ago: executing program 1 (id=4599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x6, 0x7, 0x8, 0xde13, 0x1e, 0x0}) rt_sigqueueinfo(r2, 0x21, &(0x7f00000007c0)={0x2b, 0x3}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x145142, 0x100) sendfile(r3, r3, 0x0, 0x800000009) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 2m33.019202064s ago: executing program 42 (id=4599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x6, 0x7, 0x8, 0xde13, 0x1e, 0x0}) rt_sigqueueinfo(r2, 0x21, &(0x7f00000007c0)={0x2b, 0x3}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x145142, 0x100) sendfile(r3, r3, 0x0, 0x800000009) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1m34.449877634s ago: executing program 3 (id=5002): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@lazytime}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xa0802, 0x147acde95ef3c9ea) keyctl$session_to_parent(0x12) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/872], 0x366) sendfile(r2, r2, 0x0, 0x7a680000) fallocate(r1, 0x20, 0x0, 0x8000) 1m34.256367617s ago: executing program 3 (id=5005): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) memfd_create(&(0x7f00000003c0)='system_u:object_r:crack_exec_t:s0\x00', 0x5) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f00000004c0)={0x10200, 0x3, 0x1, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5, r7}) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 1m34.06613507s ago: executing program 3 (id=5006): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x0, 0x0, 0x0) 1m33.974812981s ago: executing program 3 (id=5008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0xa}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x42, 0xf0, 0x1, 0x0, 0x10000}, 0x28) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r6], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000001800)={0x4376ea830d5e549b, 0x0, [0xffffffffffffffff, 0x7, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0xf41]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f835c00000d00f23f8420f22e6c7442400a5000000c744240200800000ff2c24f30f00532ff30f516797c483fd005b02ead8cb65666466430f3833af00580000", 0x56}], 0x1, 0x24, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r0, r11, 0x1, 0x0, @val=@tcx}, 0x1c) 1m32.505624934s ago: executing program 3 (id=5016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000271106900000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f000000ae80)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x19, 0xa0, 0xb, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4376, 0x8, 0x9, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x1c, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x7d, 0x8}}}}}]}}]}}, &(0x7f000000b080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f000000af80)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f000000afc0)=@lang_id={0x4}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000844000e802c000180140003"], 0xd8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x6628, 0x0) 1m30.172080991s ago: executing program 3 (id=5038): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x7, 0x8000}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x7, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0xc020f509, &(0x7f0000000100)={0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x1, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, 0x0, 0x0) dup2(r9, r8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040d1) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r11, 0x0, 0xfffffe13, 0x40, 0x0, 0x0) (async) sendto$inet6(r11, 0x0, 0xfffffe13, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) dup(r4) (async) r12 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) 1m14.819482061s ago: executing program 43 (id=5038): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x7, 0x8000}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x7, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0xc020f509, &(0x7f0000000100)={0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x1, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, 0x0, 0x0) dup2(r9, r8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, 0x0, 0x0) sendmmsg(r8, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040d1) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r11, 0x0, 0xfffffe13, 0x40, 0x0, 0x0) (async) sendto$inet6(r11, 0x0, 0xfffffe13, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) dup(r4) (async) r12 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) 1m1.750373346s ago: executing program 8 (id=5242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b0000007dc10000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000b40)={0x20, 0x38, 0x6, {0x6, 0x1, "8a0415e1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000008000000a000000000311900181000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) 58.825557391s ago: executing program 8 (id=5264): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000007764dca48d00009000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000000000000000000002"]) socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") 58.710609793s ago: executing program 8 (id=5267): syz_usb_connect(0x0, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0xba, 0xf0, 0x4, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "eb4e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7f1, 0x9, 0x1000, 0x67}, [@dmm={0x7, 0x24, 0x14, 0xfb9, 0xc}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x6, 0x6, 0x0, 0x6, 0xb}, @ncm={0x6, 0x24, 0x1a, 0x1ff}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x7e7, 0x76, 0x3}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x5, 0x0, 0x9c, 0x8, 0x19}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x3, [@generic={0x27, 0x10, 0x2, "1bd08d43280a79020dc8b242cb87f21f6ef699ec843330df482300dfee18a0acc1a40d26"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x0, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x2, [{0xa7, &(0x7f0000000140)=@string={0xa7, 0x3, "3bc47f492b636167e865e07730ba8e1f6fa13261e9dcd254b021a5dedc1df06f09e34013e2e0e1774d54cc0a3844ea1dd584039b893752dcb00a33c1cb4995679c06a13bfe5e3275315cb04fe8b34e86d744c16d7a63309623c5a5c2344e8180161d2af0050172e16e1b7296465ad35c1dd658131b9fc9844328db3f78d3a4da77c839c93f1248598648c69d7d0f6b3db34bb6b7f1985c97463961774ee677c121c869d0ac"}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "124bfd852b22f43d0d08834260f33ff1c857b244ac3d1a575849a596e62713902499727ca069e957cbd2b7bee8f2ea4b59c6d879e8da17a0018b428687"}}]}) syz_usb_connect$uac1(0x2, 0xbd, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0xa, 0x30, 0x6f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0xff}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x9, "ec894c0f259c"}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x5, 0x5}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x4, "24a146"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0xe8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0x6, 0x21, {0x7, 0x25, 0x1, 0x1, 0xff, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x4, 0x10, 0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x74, 0x3, 0x76, 0x0, "9481", "a2fd"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x71, 0x2, 0x6, 0x3, "079537858791449b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x80, 0x4, 0x81, {0x7, 0x25, 0x1, 0x83, 0x22, 0x20}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x9, 0xff, 0x5, 0x40, 0x5}, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x7, 0x3, 0x56}]}, 0x8, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x81a}}, {0x53, &(0x7f0000000440)=@string={0x53, 0x3, "024161e504e6bcb40a560128038be0ff3c88bd521fdb797f4666f6001cdc47ee383b66ab2fc0ca5533107e7c2ee0b68b0c306adf93070d1c67dc7165255603ebafdbe8715ca546ce2b5e99364799f7af91"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x403}}, {0x16, &(0x7f0000000500)=@string={0x16, 0x3, "b9f4756bc50ef9af9602e8c7498ffcc5058d20c0"}}, {0x60, &(0x7f0000000540)=@string={0x60, 0x3, "e1c5da3086d8f6c3ef8822d0e1571d14c6f37a102c86c915b990a6abce4d733b891dab547002282445928980fc7d41b6369112795bd37e6e7b95d4538bffe024fd27f3d090224043e6c4761d024179a6dae03fb7af2c6256841bc4f76f81"}}, {0x96, &(0x7f00000005c0)=@string={0x96, 0x3, "df2b2f3a8cf1f43bcf6c3cae7a9c180d26677366d0a97ee882b292f3780bbc9662edf05c39ee23453e2440e5bd5a264f1e5c26122d2014f3320681e209a52cbe2439ff480faaddbb4c106b2d7ee386e358ddd73582a17580833ac8aa6e0683f29278ad5f00a052ca72c8f653e85994a40b398fc565de93a08b60914dadfa9371df4e60b234d9ba0dd59dbab230557e206b1c5e16"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x380a}}]}) 55.811633368s ago: executing program 8 (id=5288): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) munlockall() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x58}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x18c95, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x30a, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x5, {[@fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x80000001, 0x2}, @window={0x3, 0x3}, @generic={0x22, 0x8, "da64345379e8"}, @sack={0x5, 0x12, [0xa, 0x10, 0x0, 0xfffffff9]}, @md5sig={0x13, 0x12, "c23e0ddf11dfe254a9ad8c6494c61c3e"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) accept$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) llistxattr(&(0x7f0000000180)='.\x00', &(0x7f0000000c40)=""/4096, 0x1000) 54.954326002s ago: executing program 8 (id=5292): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x900) poll(0x0, 0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = syz_io_uring_setup(0x2433, &(0x7f00000006c0)={0x0, 0xfffffffc}, &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) socket(0x1d, 0xa, 0xfffffffb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendfile(r8, r7, 0x0, 0x1000) 54.262522812s ago: executing program 8 (id=5297): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x900) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x2433, &(0x7f00000006c0)={0x0, 0xfffffffc}, &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) socket(0x1d, 0xa, 0xfffffffb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendfile(r8, r7, 0x0, 0x1000) 54.262228612s ago: executing program 44 (id=5297): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x900) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x2433, &(0x7f00000006c0)={0x0, 0xfffffffc}, &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) socket(0x1d, 0xa, 0xfffffffb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendfile(r8, r7, 0x0, 0x1000) 41.943618514s ago: executing program 7 (id=5377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) syslog(0x4, 0xfffffffffffffffc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 41.55820661s ago: executing program 7 (id=5380): syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0xfd, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000200)=0xa, 0x200000, 0x4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) readahead(r5, 0xff, 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 40.625612155s ago: executing program 7 (id=5382): pipe(&(0x7f0000000400)) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = dup2(r1, r1) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x4008af24, &(0x7f0000002d80)) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) (async) socket$inet(0x2, 0x3, 0x49) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async, rerun: 32) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xbd) (rerun: 32) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES32=r0], 0x0) 40.570712236s ago: executing program 7 (id=5384): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000001740)='./file1\x00', &(0x7f0000001780)='./file1\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') setxattr$trusted_overlay_origin(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) syz_usb_connect(0x1, 0xb73, &(0x7f0000000bc0)={{0x12, 0x1, 0x200, 0x96, 0xb4, 0x3e, 0x20, 0xdf6, 0x3b, 0xfdc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb61, 0x3, 0x3, 0x3, 0x20, 0x7, [{{0x9, 0x4, 0x48, 0x0, 0xd, 0x35, 0x92, 0x36, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "c252f7c07b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x8, 0x7, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mdlm_detail={0xc2, 0x24, 0x13, 0x2c, "96b2bd435d8099d36417429ffac2a13c175913903bcc5d1eb757b5b8c01b7254c79522702372e87f8b6feb87d495b4ee28a04b7a85a211dbe8791cf5977afcdb63033bbd05cdf170d95de758cde2115d6dccf39f7011e8ad51fd769813e00cae907200a660bd6dde7fc51727b1b045f37c5747ec7afd747b73d5494cafcfc12d1c8b26105b15a150a6f7ac2c203b4b99e744342af9a81b2da869278d74b9f67c3599fe322614d6ae082a4d9a19f73b967a761cb618ad3b0a8bb6abbd4fb0"}, @mbim={0xc, 0x24, 0x1b, 0x9f, 0xfff, 0x8, 0x8, 0xffba, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x0, 0x70, 0x3b}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x58, 0x2, 0x2, 0xc}]}], [{{0x9, 0x5, 0x0, 0x4, 0x200, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe2, 0x8}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x7d, 0x5, 0xa1}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x2, 0xd, 0xc}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x7, 0x2, 0xa}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x9, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xd7e2}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x5, 0xcb, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3ab}, @generic={0x72, 0x23, "f51e13533064f5ec7db0fa209e55a78c9c8ef7915be34aca34e13ed1fa143d96d11558f441e29c35290a5955de1118a273ada8247afc7ddf88d45c697952b3a95e61d51189336aa73a05c5b5afa6460982f360aaaa70c8edec02ce1bf89b16f7c42715ccba398d34fbbc2d2ee114329a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x1, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x218, 0x2, 0x0, 0x7, [@generic={0x42, 0x6, "eb384654284ef9cd68627f5200f775514e9d3496a11bf1667f08b04c85963c66c34f0b134f1d7b36ea3028a660344c11145b443a4c44cdbc287a730df9a4d904"}, @generic={0x64, 0xc, "2b7daf205b68c3f89a8d3bfa629d055b65b05ef41eab9ae9a15f2a7dd285fb30a733c2b92f6c6b3534434840d9e05436704732542100d8378a399a36d7a38b46bfdd673dbc2f905c2074efe5b171668475cb5821d0e26102633a9578cc36c67361eb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x57fb75e5cb6c9c01, 0x3, 0x7f, 0xa, [@generic={0xb4, 0x21, "7714edbb2441f6b3aec6d3b2d7bed010778b82ed173271d730318fb616a842710e710562b1df312f15859b1633d49bcce90b33becc4b7afec06357369de966b110a4979116f7e6f7161b9be5d15bea473318dd49579a873e3a2eec4e2ec7b5adf086cbd6f0b82c98ae7f281940a5fbedf92995745a2e4b7fca37d8dc25c4b93d1b57559e320102d6b45ec2cf747d48119d69f19ab3e0ce130460d0a7a93e85c71f3994ab5626d868efd30140be68f5448674"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x94, 0x1, 0x5, [@generic={0x69, 0xa, "ab9104da1c57f5b0c874bce5ad04c9590a08c0889f817e6a32d6a2af1e40f5f02a621cd0c5539676a89c9838c7c4e6dbdb63ff4cc136334d5948014757635e47bb695d6c1abb59b130ba22fb4bda04353ff228cda6aedad0573dc9ab9397ad9c5e5df69acdb126"}, @generic={0x3, 0x22, "93"}]}}, {{0x9, 0x5, 0x81, 0x0, 0x620, 0x2, 0xf, 0x7f}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0xe, 0x7, 0x8}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x40, 0xf, 0x2}}]}}, {{0x9, 0x4, 0xa3, 0x1, 0xf, 0xff, 0xf0, 0xff, 0x67, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x7f}, [@processing_unit={0x9, 0x24, 0x7, 0x6, 0x6, 0x0, "07f6"}]}], [{{0x9, 0x5, 0x4, 0x8, 0x40, 0x1, 0xf8, 0x7, [@generic={0x71, 0x21, "27d1d3fd9b89662123dcb4fef362ddb56875373d14cfad40de29c43c8c3c13321e5c90c3a73bfbb3541479fa88bc3124bed4787968bad91d0ba7be96b19f90d9830f55c672e819e9c34f67241cb00e7794357aabdc38c93e40f1d29511d17526390e84e1aa6587f1578c7f8ed938c2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x6, 0xd, 0x5b}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x3, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x5, 0x80, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x2, 0x2, 0x6, [@generic={0x7a, 0xb, "8345c17236043f3e293df0b2b34ef67149f7ce1dd3b3fbe97a884dd0394bb90d28082e928af023f0d38c663a115ac3e49e757dd6a4d3c060b21afb80b9ec54b0cf18cc61591db243bb3cf395f865bb93d4d3dd146e69931cf6edd1fa550c5a3b29124ad33ba24d4c193684859a7175f80fbfeb98d9f297a1"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0x9, 0x4, [@generic={0x53, 0x1, "63f302d3fd2e029991fc44d6f7e0876d1a619087d109870f7f2bad51c0a5131544539ba774ca44ef6eed16765b0b564c695ffd10febfe7ead1274a57318e6c828d3ceae0b276ad527c6c5edbe036a187d5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x5, 0x40, 0x3, [@generic={0x63, 0x21, "81187958de172d67d7d250904d0b18cbcca0f3d499262b23d53515560249417f3d8db4f2c383bea6caf2d6798c00eb718c99ae6fc85768530bf65a3705c6ec28f839a872edf3af874c47e33a239ebaca3c2e44aef4ee59f0eb6fec5b3a63fae548"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xd, 0x7, 0x6}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x2, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x7, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x1, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x76, 0x3}, @generic={0x61, 0x22, "25b5ffb6448e92b5426d83ee9f9ee80d8cb763fea23c6a119f625e853f6d576b2ca50b7237badee7fb391a42cc15a4df2d103f018217d90cb8a1248cf84f60935427e41d3e76bc390347b6ec4d6b70bc6ba0f6c6c9a2321bba4b885f5efc79"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2b, 0x5, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x63, 0x8, 0x4}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x2, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x2, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3e, 0x3}, @generic={0x8, 0x8, "1696fd1cec26"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x90, 0x7, 0x8}}]}}, {{0x9, 0x4, 0x66, 0x9, 0xe, 0xff, 0xff, 0x30, 0xa6, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "ad8ac488"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x10, 0xc, 0xc}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@acm={0x4, 0x24, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xdc67, 0x6, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x10, 0x4, 0x3f, 0x9}, @acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0x0, 0x4, 0x8, 0x6, 0x0, 0x95, [@generic={0x57, 0x30, "1481570bc1a06de2c22e8752d76c33b57a84854dcb85eeaaf37d7c4b0c5b9fa17b5416faa257145eaa9445cac944ac6b136def728785f31d0dbabea9427e5a4486a99da6fb5e8b48140afbb07fafb587237228f188"}, @generic={0xa8, 0x11, "3b5caf10861e71658ffa5ba8c29ace57180fc9cfe3e4a345a8982bf1838b8f2e11f6850025570b82c53b2a31957ab1d09dc5be2799ff1e4d7177ce4381fc093cc977137226c47adfb34e1c71f1d493562228384b46cd6752bb1e7ab8807e1db8e016df0c5a1099c55ed66504d7d658820f29f99e76df6875146b089b745be0e09b86df681dbdb5f6923dcddd7561fec2cd393884dfedc344144d140de7bd769edea06b693f76"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x1f, 0xf, 0xee}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0x4, 0xe0, 0x6, [@generic={0x8d, 0x24, "b1326731e19bf3e81ca1150edba3a3a981e8188305aca56dfff7340df02adf62dffe51f2ac2d7344161dd735ff041c1da040298f1346684dba0a2291e5c7bc56d339f12d8b80acb4fd5e7c516e4a787e7e2e3d1227f8214d4ffafb3c573d1a24a2ebeb12a5cfcf50118edf3fa186bf6ba9a6830dc457f2a959847d7c5048f74c85ab2bf9c995ed37370883"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xe7, 0x5, 0x5, [@generic={0xfe, 0x11, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xcd, 0x7ff}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0xff, 0x3, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xb, 0xfe, 0x9, [@generic={0x8, 0x11, "291d1140a079"}, @generic={0xb0, 0x5, "b87dc44a623775f58f55bc899c23fcd137486143394dc4895341935fa3deb6e40d349e4a7e2428f69ef8176974710f7c1a75122b49ef22e7d98ba79d01280157ebb1f1472a0c085752b842e98c1f59f557ae48839a59f5b54174849536bb33aa604fa9bdaccbd49ece79c4a1ffed2083a8abbabd45dee3cc867e25136e5d814666a226cd68a77e5429387c2d1cb3d16fc7a7451faf00db897ce92c2b3af036e9e76c2669533f7d1ce6696a11f062"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x0, 0x23, 0x37}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x2, 0x1, [@generic={0x32, 0x11, "3dc199b5dabab52850b5a3ffd0f01d0b0e363200dd556028453d6e2f0c319faeb25300e4990881ded4e3beea7af728f8"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0xfb, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0xb7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x410, 0x4, 0x56, 0x7, [@generic={0x58, 0xf, "bf7f6971ca552737fb36c8aa372c7c2d582c071217946518984589f4af7b8f191edfb4f5dc3cd54b8492acd2721339ab81af4b39e7c6ab6239f386151570184033d8875b5ec7cd8711ae70c3e4dec49de71c59e63b1c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x79, 0x4, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x1cf, 0xff, 0x2, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xd, 0x6, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xf4, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x4, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x4, 0xb, 0x30, 0x10, 0x62}, 0x38, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3800040b100107140056bc58cb3834a11713859736fa6e0200560a10030002ff00000000141004f9e9e9a67ff73c0a100302110072070208b9e5f9b965283dcb13f76d005c71731246c512d8064c7822824aa5f25862d15db691538e2c43ba21ebdc5350cd9e21002283ca6a792d"], 0x8, [{0x7f, &(0x7f0000000180)=@string={0x7f, 0x3, "945f06c81f3aa3041e29f829bbc6dfe79f9fd13f1efe01d58935c29abccac85b5957042c9c28bcd723ddd44efb8f3cbd8b11134f8dfb8fa22f4c84f18c8fe64bbbda083ae74cc9ac62611e949c6ab8b3e3bcb78761eb767b0a844c836e33f436685af74be275bb272fde3e5dbb7a8f6c193b4d174568214d07b58bc702"}}, {0x68, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x241f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x440a}}, {0xd8, &(0x7f0000000300)=ANY=[@ANYBLOB="d8032f947af631ca052ae7cd72d656adc44f0691c04b7763ca526813d7c055adf25c6a496f6be678c88e201ed0342424363b22957d6d394f9fa2f948545ecd33b8fabf5802b6b6fd23525f1a7d6f83c92fe16087052452d7369a72e679c33e1b185f26dadc23feac634577c1b065a2ee01c735a18255be0de522d894f0d534a7f45fb95682547d6ce3e33fff330942874eb07283eafe706a832829a6dc52d2176351aa00a98574d63d720c7a456b4e3b014b9fe0e5007e6a7c598f27ecaea959efb1622f4a3354b38552ea987d283e7a3dc6eab724844edd"]}, {0xa6, &(0x7f00000017c0)=@string={0xa6, 0x3, "f761aef4a83e5f1c3e2b8629a5fb19dd54590950d5f3a9a3e591aa868f20f332a0ad2bfb7c8101ea615898ad9432bcf57d4573258860ddb31f4f436b7e58534aedc566e2c784941cd3e82e2c3c2a192cb0530e4d44674aa98648c7dd1e2ee4327ef13b9284d9212f047d60a64add7d7ffb5d5ad9765084257ef8b3203993d04e996d58e3e7dedf82c77f80c1f67476536fa039ee9473dfcef3646b019ae6391a66a704e9"}}, {0xcc, &(0x7f0000001980)=ANY=[@ANYBLOB="0900000000000000eed1a0ae8956dd21098c4e6d0d4d76ccb9c2561be44825718b56c7e8fa473fc5faa0feeadc8e2947ae4dc1880e0acb9014fac3fdbe3e6427148c40fb97cf5d594ca6796d4fb4b19a2677b16217ffd82ecb5f19c951b0060bf29c08451167a5db00b744f35d171629d6521a480288c99255af8f83114e274aefd132011002210a8e917fca07c286d18e648b2b06e78928705f74550e99ce4035c57851bbad2c576546ce4dc24185e7b8e3e2b9b59e9b6c3d234a4e15759b368dc0aee22f82bf511dc9aa911a9186"]}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010009"], 0x18}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000054003d09ff0f0000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01030300e000010100000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) recvfrom(r6, 0x0, 0x0, 0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 37.017130822s ago: executing program 7 (id=5399): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000000c0)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xe4}, @call={0x85, 0x0, 0x0, 0xcc}], &(0x7f0000000140)='GPL\x00', 0x6, 0x19, &(0x7f0000000180)=""/25, 0x41000, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xc, 0x2000000, 0xfffffffe}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x1, 0xf, 0x4}, {0x1, 0x5, 0x6, 0x5}, {0x1, 0x2, 0x7, 0xa}, {0x5, 0x3, 0x2, 0x6}, {0x0, 0x2, 0x4, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x400000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x3, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="5cb54c9134d45942dca0f60000000000a2c0c6eae289360f90ef1d01e062306f4ce4800d6a81b7ad97c3c6f65602c58147b8f98fb33f53648ea6be2e0fdf48a1a699bfe18eca2b7328af716277daec3ff4ee37b69372adede1732580c6d3b7ae6864cdebff29661881644ff8d1761a8c4a4823c3d163aad6392aa4d9fe1720b179f2f0c8efaa9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) creat(&(0x7f0000000500)='./bus\x00', 0x246) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 36.634539878s ago: executing program 7 (id=5402): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="fffff4ffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000641a00003a40ff010000000000000800000000800001ff0100000000000000000000000000011e520b4c951ee12e"], 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x80, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) (fail_nth: 1) 36.546402509s ago: executing program 45 (id=5402): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="fffff4ffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000641a00003a40ff010000000000000800000000800001ff0100000000000000000000000000011e520b4c951ee12e"], 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x80, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) (fail_nth: 1) 4.690733506s ago: executing program 4 (id=5541): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) syslog(0x4, &(0x7f00000002c0)=""/18, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x44010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r4, @ANYRESHEX, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4(r7, &(0x7f0000000200)=@caif, &(0x7f0000000040)=0x80, 0x0) 4.550752958s ago: executing program 0 (id=5544): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2, 0x4b, 0x15}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x7, 0xbf, 0x20, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7800, 0x40, 0x7, 0x49e}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0xe2, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x22, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0xa2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f1}, @alu={0x4, 0x0, 0x8, 0x3, 0x6, 0xffffffffffffffc0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc7ba}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000100)='syzkaller\x00', 0x43c, 0xe6, &(0x7f0000000580)=""/230, 0x41100, 0x24, '\x00', r2, @fallback=0x23, r3, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xa, 0x2, 0x388b}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 4.490017969s ago: executing program 2 (id=5545): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000a00000040"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32, @ANYBLOB="0000000100000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 4.41010012s ago: executing program 0 (id=5547): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="fffff4ffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000641a00003a40ff010000000000000800000000800001ff0100000000000000000000000000011e520b4c951ee12e"], 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x11, r1, 0x6b479000) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400aa6"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f00000001c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.40932583s ago: executing program 2 (id=5548): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$inet(r0, 0x0, 0x40804) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r6, &(0x7f0000000040)='\x00', 0x1, 0x1300) (async) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}}], 0x1, 0xc8040) (async) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r9, &(0x7f0000000080), &(0x7f0000000140)=""/18}, 0x20) 4.354710201s ago: executing program 2 (id=5549): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb010018000000000000000200"/23], &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1}, 0x20) io_uring_setup(0x554, &(0x7f00000001c0)={0x0, 0x71f1, 0x8402, 0x1, 0x2dc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=0xffffffffffffffff, 0x4, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x4}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x24000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000340)={0x80a0000, 0x115000}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x1d0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x3, 0xe, 0x8000, r0, 0x3, '\x00', 0x0, r3, 0x3, 0x3, 0x10000001, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) write$cgroup_subtree(r2, 0x0, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe1b) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 4.289277632s ago: executing program 2 (id=5550): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, r7}, 0x14) syz_usb_connect$hid(0xcfb7c3e1404b0729, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x48, 0x4e7, 0x50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0xd, 0x3, 0x1, {0x22, 0x72f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x2, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0xfd, 0x7}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x12, 0x80, 0x20, 0x6}, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8d, "f2962169e5e5f844f2bb4ee913ade3fe"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xd2, 0x2, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x2, 0x7ff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x93, 0xd, 0x5}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3003}}]}) 4.069347566s ago: executing program 5 (id=5551): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000025c0)={[{@iocharset={'iocharset', 0x3d, 'default'}}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0xc}}, {}, {@time_offset}, {@utf8}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0xff}}, {@allow_utime={'allow_utime', 0x3d, 0x200}}, {@namecase}]}, 0x1, 0x1532, &(0x7f00000042c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) time(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x141042, 0x100) fstat(r3, &(0x7f0000000180)) 3.994827147s ago: executing program 5 (id=5552): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="150a0000000000007910480000000000610420000000000095000080565b85b254591d2c8bdce9ec81ff006280af5bbdc9d0a797b203c59da0ba0e7e061de1955498795e6ac91556af19e7549f55de6b48a5283e59e4eb2c4dc5b7ce6e9d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="00000000000f00000000000000e204d8be2ce7f881b5cbb9abdec4793da929a47923dc0bde570e63906db85d6252742f47ff54f630420576707e76b3195dd058de51fa309870fafd1c343d2e9927fa1b066d32990862f76d30", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r1}, &(0x7f0000000980), &(0x7f0000000b40)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x92}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FREEZING\x00', 0x9) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sync() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000600)=""/176, 0xb0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) write$cgroup_pid(r3, &(0x7f0000000380)=r8, 0x12) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572"], 0x118}}, 0x0) 3.964575848s ago: executing program 5 (id=5553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00200000000000000000ffffffff00000000d379", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r9 = dup(r8) connect$vsock_stream(r9, &(0x7f00000005c0)={0x28, 0x0, 0x2710}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRES8=r1]) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x0, {0x5}}, 0x18) socket$netlink(0x10, 0x3, 0x0) 3.944547548s ago: executing program 5 (id=5554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) waitid(0x0, 0x0, 0x0, 0x4, 0x0) (async) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$packet(0x11, 0xa, 0x300) (async) ioprio_set$pid(0x1, 0x0, 0x4000) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2b7e7edb}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3e}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf1, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0xf9f}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='!', 0x1}], 0x3) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) pwrite64(r2, &(0x7f00000004c0)="d228e1c8ae0713eb02b096e471dd9485208799beb4e991dba7ad872f477b453b3f33db42ddab75a81dd1bfa8f734e3de1a4ffe722e67672ab6ca6270dac6a10367628acb7621019b22548004875bb040128d7342de847c9bd4f6fbd9bc3988fc0f6c57b91806b29cc8242d3ff6c58798294e4b755ed346b499f52b705b49f80e8fce38daec515d1aaf5b280798f121dcb137cc3abe5d5a5db2d1c93206a07590d5b64d86f71a14b35524ea2bc78c0aa820e9df0b75daac6a146f67087dcdcb35b4e17d072a74533fd1c55a", 0xcb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 3.894714058s ago: executing program 5 (id=5555): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 3.83356329s ago: executing program 4 (id=5556): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xa481, r0, 'id0\x00'}) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/93, 0x5d}], 0x7) (async) unshare(0x1e040200) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x108, 0xa, 0x6, 0x201, 0x0, 0x0, {0xf60227e58dfdfa44, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x200}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x833}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vcan0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xfe}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x108}, 0x1, 0x0, 0x0, 0x20004001}, 0x400080a) (async, rerun: 32) unshare(0x42030500) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f4867e84fd1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bebada80d3db"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cda8b06d178d"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc082, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x7d, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x9, 0x1a, 0x1, {0x22, 0x7fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x0, 0xd9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x4, 0x2}}]}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0xc, 0xf, 0x2, 0x20, 0x4}, 0x16, &(0x7f0000000980)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x6, 0xffd2}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x9, 0x6}]}, 0x3, [{0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x408}}, {0x49, &(0x7f0000000a40)=@string={0x49, 0x3, "f619e0ee21ec90f214902c731337443841a86a0998f1f1b62ff4384f55a0f7cba1228362b0ffa51e5da066d5d681832ed26d37c39d4bfe240474a1c9ed05deec9ce14ade7a8e66"}}]}) syz_usb_control_io(r4, &(0x7f0000000c80)={0x2c, &(0x7f0000000b00)={0x20, 0x22, 0x4c, {0x4c, 0x6, "8981e5623babd2a59cd84c1b1499f00df087f43e898de51b5009b032cff1a12df162c362f85260933e8ca39bc9422ec34d26ab6b0e1aa438bc33465d749ffdece4d147d220473e07c977"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000bc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x7, 0xf2, "46a3d318", "4390852e"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x9, 0x9, 0xe, 0x6, 0x7}}}, &(0x7f0000001180)={0x84, &(0x7f0000000cc0)={0x0, 0x16, 0xe5, "b42c7d2d36daa4e786f58d53fdf5ff4216d24019244656edab138c0b5ad01f09268f4ee64d940a1f7a473a79e64d8694162104ac1f2508e92500b9cd0f69448ceeac6e0e85439810f9f44c067068236a995ff499f16e2437e0f09d11b81d2975886b96f4ea85bdf7980f189ff5dac18492ad98e9e0efe4a1d329b44a4e7d2f59f960521b4ae911f913a84894faaf4ee305adec0aa747af490fbfc420b43b5e899bc7d453ceaf437b99e4aa0b884bca7d1a91fd283314b7c42104940f108e4149c749a340d6eaca3e379169defc32726c5e413e8eefda38c4f77656efed7fbce3f3f7a6923b"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x1, 0x10}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000f40)={0x40, 0xb, 0x2, '#}'}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000001000)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001040)={0x40, 0x19, 0x2, "64b6"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x68}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x9}}) (async) unshare(0x42010000) (async) syz_usb_connect(0x6, 0x99f, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0x3d, 0x56, 0x49, 0xff, 0x960, 0x66, 0xa521, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98d, 0x3, 0x0, 0x0, 0xa0, 0x1, [{{0x9, 0x4, 0x75, 0x9, 0x6, 0xc9, 0xd3, 0xec, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x1}, [@processing_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x7f, "6d1b"}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x40}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x2, 0x2, [0x4, 0x5], 0x8}]}, @uac_as], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x0, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x11, 0xff}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x4, 0xd, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x80, 0xce, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x80}, @generic={0x3b, 0x9, "368b4a8bc7a4ce2d16ba4848066d71c1e5d15ce994792a2991c3cfff1810540337475703fce71ab6a830b30040189e70a5ee9d1b025f68ca22"}]}}, {{0x9, 0x5, 0x86, 0x0, 0x3ff, 0x98, 0x38, 0x40}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x7, 0xe, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2d, 0x57}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x5}]}}, {{0x9, 0x5, 0x80, 0x8, 0x0, 0x8, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7}]}}]}}, {{0x9, 0x4, 0xb3, 0x4, 0xd, 0x9, 0x78, 0xd8, 0x2, [], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x5, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3ff}, @generic={0xc5, 0x30, "e90223790769b7a51eca2366c5de12dc7f142bca6b75797432e994a85154ac0bc435f76a023e22e2013f8b7ddf5d9d0d569ec3877eb3c960bb08b85959beddbc803494bd3ac3334e0d4ab652b659b45b55ae5c2936da6fe59e27b253c12ef730938e8d287038c0bc9aad33cfc7b73ca0aa71b4d4cca03f15c05edb45a8e7182b5dc400195144e82d8b29107a9fa0f5e0f7745900a165777407d9fd27fd73bb592a63a0e17326b71910e5fe0903680a6f7a9fef1859090f419115cf80ebaf38a4b8dd31"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x8e, 0x80, 0x5}}, {{0x9, 0x5, 0xe, 0x6, 0x400, 0x4, 0x68, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0xe, 0x5}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x4, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x9, 0x5, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0x0, 0xff}}, {{0x9, 0x5, 0x5, 0xc69c813ae7157370, 0x200, 0x3, 0x0, 0x5, [@generic={0x39, 0xf, "5e2fb6fb111b5511fec1472c4badf4551cb664210665ba3790ef43a85490be65cf7c5614fa0d153e11b0a06665315fc29391238b2663a0"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0xb3, 0xff, [@generic={0x5b, 0x6, "ada32b830fc018102c427674efd05ffe05dc07791dd0430f71f5cf99aee490060fd8706a985217a8d9b9f5fffbd58af5b32e392487a53ec7878caa751ad27e244f11116ace065750f8d6f52691cf1afef76d2852770df7b484"}, @generic={0x85, 0xc, "7df90c03f318e2e9d0bcbb605bb18dd009fdb40de3d02e44cc8b6bd870ed0529ac6f3475a5875bad16c606d615ba708d3f0e6ab8d4d4a71fe46e4c09b9944628200690049c2b30f8ecefeb1f8fda478451edf7b4ecbddf6c49db11acabf416f403e995008d6b39eea7a5cff7efcb89503ca9e9c3937c6f653ff542ca3bc01b05062640"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x30, 0x8, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x5}, @generic={0xde, 0xf, "1b95a1edc1dfb6e8dd83429dfa572fcf2dc9b24dc8189ecde61d23679258c6b903623680ffda7d08ed8c7ff16d94833fba6ae9162ac8593b45630e5a848c4bda9d857812ffcc4c67fdd812d6927723b292792a3792065ade45573d9d1c992df875799e1d68ff918bcd193df352b16bc7196380e960332d58a4e47d1c1b86723f1b6208050e90972e9a9bd0782e4b48f51f0b7434f643e81b23f059d4bcce3694c1b2d10e224cbafd744929ad789daa643b6520bead876c3ab5140fc0cafca5330c433c61711d12db14797863859db6487d37732ce344f980fe8c1d5a"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x17}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xc0, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x66, 0x2}, @generic={0x73, 0xa, "de8a52d9694f791d3aa0c9a5ddb625035e4541da985a0308b2fb868c857d509d1903ce28ad4ca95ce1186b49145e95ee156f221f0648b81b606cb9de442634a8d7f8e7146d22d82fccb12664a8d896ff05572efb7bbeb993df9994e2a87ea0a77317d361f77b613a1ff057509995e02f69"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x2, 0x6, 0x81}}]}}, {{0x9, 0x4, 0x41, 0x5, 0xd, 0x46, 0xe, 0x1f, 0x2, [@generic={0x28, 0x30, "e6915a29e26842d847e216ff1a88945d6afe28c0b14dd5a35a5764863fc801682ba7342585e2"}, @uac_control={{0xa, 0x24, 0x1, 0xab, 0x94}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x5, 0x5, '0'}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0xf8, "d397998de3"}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0xf, "d0"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0xfc, 0x0, 0x8, [@generic={0xf4, 0x4, "6c7bf0edb4ce72845687489299685a465d3693c82b16b252fd834da08807f78a73025c224adff4b4738ebd86df47976df47f1017ca26aa4d8b2f0e6794fe35af8d36b2795c625a7639b5308c113c59e2a52070b0c15f9a7c322e7fe9322d4d5849d7ccc1630104f72831e2a74024099aa34295818be7069dce5ed9ac2af46bd36fd3d657caf22bb0facfd49990a1cea18d34b866abcc660d55e3336a19a01f489ae39897eefb31a9eb547023d33f98bed5c376e22a9e1231367c87cc2981ab4332b44bd169d7dc6f929abeac1b559743e41fe5bc9246371bcfaf4c947fb413ae55a6b369759380546d2eeef26e551d484d9a"}, @generic={0x81, 0xe, "fb1f286cfe655aeb03fa224b2ff25c2a188b7dc401f368a8f3af87f0fc65b7ec064c491eea65a3213771527ef01ba277a1884152acd4409906bb678cb98d0f77976f8165d31cea451c2a1b984e5799358cef7f0047490e2224c7e97f8160bef1d090f9ca1a9e09d9c947a8a973089f0a5e4b9a5892f530dfd6d21992fd80b6"}]}}, {{0x9, 0x5, 0x0, 0x7, 0x3ff, 0x74, 0x35, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x66, 0x5}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3bf, 0x8, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x32, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x7f}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x8, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x9}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x8, 0xe, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x80, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1c74}, @generic={0xac, 0x24, "5ea93e8b9b6db5a3b98d9250cf59c69bed4bea557fdf077e3312139b6718fa6df5790003d61448513a13cc1a4e48d140d31b76541efad91a1488de75c0842cc8c497c29010718841af7438186953843179bab97e7622b20d8b3a665aeb3eee181e96b249f65842aebcf51c8fc3746dcb9e7cdd250ce0191331dd81c4efac4ea8a9f629380f6a350ab99b260d1616c8960e4b82c209bfc98d435d1135433f8d536b39744ca071f25db8ae"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x4, 0x6, 0xd0, [@generic={0x53, 0xe, "e2ea09dcf42d414d55774d7e9b470aba17172e3e1b3ff45fe2b3e024f6fcb949390c2bdb1d4488e576e4f4228ae0b939f98f73c95614948898b0ca590532255420ea13924d87f98dc226f299ce73f634e6"}, @generic={0x2, 0x24}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x2, 0x30, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1ff}, @generic={0x62, 0x23, "f1dacfc516217f6d553476ce5b895fce88809e260313dbf0ce0add560a20151e28527b9064425c0903ac6c5c066300c198fa6eddea8da3c81934f1485bcb08b6260b17614261003389c66ce092c19e77ea5e988aa92f482be6003af167ae13a4"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x5, 0x80, 0x2, [@generic={0xf9, 0x10, "f50042b695b9f3e13e04397810e5fbde033db3325f3c54f2e12adad440f09416cd64204c2157cf4fa196a94abe11ca14a58ef829c2568e7eb25441f16a9f6efc9b8e62deba9e6cbf6222e216e318efa23a951c3c1e94baee0310263a7dd148d622d044138fe775aabb4625cc8edfd4ae5ed804b7c30357164f21db680c4ed840566edc2f4fa41d9fb37f69cfdee756f755488983743a4b6516039b252b9fdc61e83a9ea6998b3d5c7091e2222ce0332bc4585b8b7e4e73ce533c524d5a9cdffd8271e0898e83f56f8c6eef20581f80dabc0d9da78fe3ecdd0520028ffe65d57ab221008558e06663680426016cf9a171dc98ce47777857"}, @generic={0x20, 0x2, "37bdcec4bef604420c76ee416dac020bfa592f758e5707ac5099ed9b020c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x81, 0x8, 0xb}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x8, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x8, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}, @generic={0xc, 0x0, "8b50a31247cd01dac2cf"}]}}]}}]}}]}}, &(0x7f0000001f80)={0xa, &(0x7f0000001c00)={0xa, 0x6, 0x110, 0xbf, 0x7f, 0x2, 0x8, 0x5}, 0x13, &(0x7f0000001c40)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x82, 0x2, 0xf1, 0xffff, 0x9}]}, 0x6, [{0x56, &(0x7f0000001c80)=@string={0x56, 0x3, "9b3c706614708208cffa6309d606ab32041c1f94ea8a0deadc528f5dc8e62501580475953c5b21ff6da082e5b8c800388650d7369a288d6abbe546e12ea30c8a654d17933b6d6ca0ece9302153aa5e7bbc83790d"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x200a}}, {0xe, &(0x7f0000001d80)=@string={0xe, 0x3, "708e0c17f3dc79f8693c4a0f"}}, {0xf0, &(0x7f0000001dc0)=@string={0xf0, 0x3, "e6a836b819e69fa501846c2eb96dae4e350bf11f7f663068800fad359da1dc9eb601f0a8b888fba8856fd88f3da5e404b16d70d75d5ed61b10e835924e97033db05ce8acb26ed00d06764a34113067db7dfe05fd3789cfd8f887dc3c3b3470ac282587f93f3bf6a645f485063429f1d3869637405a70ca8c904abc4fb5e22e90c3a5d3d9d497ecc020fef608d5e0473529f8767f632e40ab361c27f8ad0249369d633bfbbebc646285faa6d36f5ce638e5a9cad9d5013d5274a8f7c790e3855db44080485d90836057e3246356f8392a26f23f359868e1b3fcecf1c8b61cba3dd966425dc5c9f09a22d6d3373a12"}}, {0x94, &(0x7f0000001ec0)=@string={0x94, 0x3, "8fc7b8b8766dc1bc90620441711d9117114d0cee87c044f65f500b005bc9b849f58671f2dcba18745a2ca98cfc71ec9a6e63c1b68ab4088a1c8487a133551169a3634001fdae3cf4a85b45717273b754e88d0f046737e7c696b1936dc6788a72919825101825424e8c088b26823886af080c52e988b6dd83e66f8f2c60d1bc3882fcbefd0ff1567fd5a94670bfd5615806b5"}}]}) syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000002000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x5, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "9c"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x8, 0x100, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x8, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x40, 0x3}}}}}}}]}}, &(0x7f00000023c0)={0xa, &(0x7f0000002080)={0xa, 0x6, 0x201, 0xdc, 0x6, 0x6, 0x48, 0x4}, 0xc4, &(0x7f00000020c0)={0x5, 0xf, 0xc4, 0x1, [@generic={0xbf, 0x10, 0xb, "8aaa3161867941b1479ee4fb0950536faf438b7837ca119c927108fab7d95c8e29a52f6e3cba6997631321884b2ee261c264f00af767837fc9e6bd7b8e4a222d4538b5648cb3d7fc8cf686c9741b60ce7178d01a5db18544999a1d47b1515d71f84d44b8d9018f69ee04d748b339c6b471e284d9e4558349157c14d7dbae5bc4ce26083d93bed22eae73613cbae28ce9ad70936798595c44010278e2569c208c3bc4d16218493b8ec48fd76478012aa081a41e62ccfe559673fa634f"}]}, 0x4, [{0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x415}}, {0x5e, &(0x7f0000002200)=@string={0x5e, 0x3, "6f8e5615acfd15a4f1d38e297a652bd2e3aaebc7d0155a8005ba36f8b96811eb58e81ca8a8a4f05fdfbb9b9480518eebd9a8c616fcb46152da3ce10c5192248034c2890eead1d391969cf73d500d3a85a8a7efeffc64190bb9a4cafc"}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x3009}}, {0xe5, &(0x7f00000022c0)=@string={0xe5, 0x3, "49289808f025c76f72228097a82a7f83f3ca65c8310cf415c073724202ec00bed9822dc6c569f4ebbec322a719363b93eb400310f52a75d7c89326a3a86d3389e321005a97a161b76dedd5736674140b82ecf3df43d7f346dac9eb255b489b83bd1dd4dca104a7143665e0e43eec2c6c580659fd38e767a9c251184ceec2ca8f709a6acefaf9fa5b032ad8d2650107eb13e52091cda0228ecb7521e33d25e1f36836e274d6120fd33831ca1aa8def0d7ac63c17f2865c1702675e5b951bd64d99fee3992d4fe2b05a815b917e736e5ea99c0852337641c1eb5decd74ebb3dbff3421a9"}}]}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000002440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x21, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x6, 0x52, 0x1, {0x22, 0x3c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x310, 0x9, 0x6, 0x0, 0x10, 0x85}, 0x137, &(0x7f00000024c0)={0x5, 0xf, 0x137, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0xf1, 0xf, 0x1, [0xff0000, 0x603f, 0xffc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x5, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0xfbe, 0xf0f, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0x0, 0x3, [0xc000, 0x3fc0, 0xc0, 0xc0, 0xf]}, @generic={0xe4, 0x10, 0xa, "2456d84da70fcd13ea4b9241945ec17d1c9b17b6883e184b4034b00d0bccc01be682038953b465444bf6bc99a15d3f9b67c3d405e094ed393be1e1cc9dd1c0353f6a0017cc31c9045e891876c40ab3f5511f7c68969aab4ba850d6add16968ff358e6de5415a6f3ec3966be024aeaa1ba36290d0f402f6c3e0de1b2f107e2c83578a75dc8bdb7d4e8a7f32ba94a5793de5a20a511f97d3746b8ccfac8812c48528b4937f42083b9f9bf6549d8c6428f7e64593445a85fd3056f5b079bed0d3648896e457fb73c91cf969eab54060edcb6a8ca4957c699553a0b788f2ecc52fa003"}]}, 0x6, [{0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x42c}}, {0x5b, &(0x7f0000002640)=@string={0x5b, 0x3, "7e81f69106f29bfa54b4ea40457b79021f27fa4ac51826b9a440223fad647ada4fd7eaf6c231dd1627617632de73519ece2ba27c424503ca8758495a5f3294f5d6380702639ea5423f34aec8fe8509d84c0472f80ee1856f6b"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x49, &(0x7f0000002700)=@string={0x49, 0x3, "db8b5b9996f37c8daff8afc8d003ce755f7d3bfdee107932844fad572bdc78c0bcf5218bab23383496ced53500524b488f0ce92941fed494b75176197d2a6fe0c6ea731bab1705"}}, {0x79, &(0x7f0000002780)=@string={0x79, 0x3, "1d09c345e7c490f1e752306bd58544cfad7f68ccb2ad526bc3aefd2edb165c3271a2aaa3794c69cfc55e824d4d1fc8fc80d6468d755ef545d964de80b90595d37a1ab70357aa347dddef0191809f7929a677c24f459025f827e6b48a3916edb69433fd6e2d8387c17e46e81b919f89dc4031d825500327"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x80c}}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002940)={{r1, 0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)='%+9llu \x00'}, 0x20) syz_usb_connect$cdc_ncm(0x5, 0x152, &(0x7f0000002980)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x140, 0x2, 0x1, 0xc, 0xf0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "08804828"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x4872, 0x4, 0x66, 0x2}, {0x6, 0x24, 0x1a, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xb5}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0xc2, 0x24, 0x13, 0x6, "8256ae37acb5f73a97efaddb0271939abc3a0add8d450c334a406bc5883f61687c2f4728042ed10351ead0c228ef5db3739a3b4db7ff5a0da9cacb51515b8d602c288cee2c9f77e2c5d22d33c682abdfd6a252de8c1a420271de0cbfae9ddecc0b5e5aafa4b96f09a7fe9bdf53a8db65d530f950c710371b39851e1d24a94a64e052e29129f74529f1706d43e94ce94fac5fff8cf8b2e0040fe9f9ccb8fd9010bff1858b4cc618656b5fa0dc1540507cdeaa925dbd35cab1263e5accdedd"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x51, 0xc9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x2e, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x1, 0x3}}}}}}}]}}, &(0x7f0000002d80)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x110, 0x3, 0x8, 0xe, 0x10, 0x4}, 0x55, &(0x7f0000002b40)={0x5, 0xf, 0x55, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x33, "f95225343195db31f55dc13b0814f488"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "fd9508de30f6312fcefeedd8ffbdd362"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "b7630e1eb629e9de0af95a53783dd54e"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "63f4338a67df638cd16840b5d38f2f9a"}]}, 0x5, [{0x9a, &(0x7f0000002bc0)=@string={0x9a, 0x3, "1b8d81954f4d905f401541a7370834dad367ae0f635fbaca2258d3174e0a580ae29a341f661f16de3a60828a528c31be173e8155455435fe5c1a5e5a398934d86dec3ef859605f49125425e40734846b6d98a7e0f777295d1515e3328408a116cf677763838dc348122a69f2c94fab31b73431138a40432737d2a266d71738f36a069b8bfea350927ba2267060dc72c5d4711c53465e565b"}}, {0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x443}}, {0xb, &(0x7f0000002d00)=@string={0xb, 0x3, "83c04d33e914e20c98"}}, {0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0x413}}]}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002e00)={0xaa, 0x44}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e40)={0x1b, 0x0, 0x0, 0xfffffbff, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003000)={'wg1\x00', 0x0}) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000032c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000003080)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000003100)='syzkaller\x00', 0xd, 0x52, &(0x7f0000003140)=""/82, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000031c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000003200)={0x3, 0xb, 0x3ff, 0xffffff7c}, 0x10, 0x15397, r1, 0x4, &(0x7f0000003240)=[r5, r1, r5, r1, r1, r1, r5, r5, r1], &(0x7f0000003280)=[{0x1, 0x1, 0xa, 0x4}, {0x5, 0x1, 0x10, 0x1}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x1, 0x9, 0x5}]}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003380)={0x0, 0x2, 0x10}, 0xc) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000033c0)={0xffffffffffffffff, 0x7f, 0x18}, 0xc) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003480)={{r5, 0xffffffffffffffff}, &(0x7f0000003400), &(0x7f0000003440)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x3, 0x13, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x9e}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002f80)='syzkaller\x00', 0xc99, 0x36, &(0x7f0000002fc0)=""/54, 0x40f00, 0x10, '\x00', r7, @sched_cls=0x36, r1, 0x8, 0xfffffffffffffffd, 0x0, 0x10, &(0x7f0000003040)={0x3, 0xa, 0x9, 0x3}, 0x10, 0x0, r8, 0x0, &(0x7f00000034c0)=[r9, r10, r5, r1, r5, r11, r1, r1], 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x68, r2, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x273}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8000) (async, rerun: 32) syz_usb_connect(0x5, 0xda, &(0x7f0000003740)={{0x12, 0x1, 0x310, 0xfb, 0xe0, 0x4a, 0x8, 0x19d2, 0x1590, 0xab81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x1, 0x2, 0x7f, 0x80, 0x0, [{{0x9, 0x4, 0x64, 0x2, 0x1, 0xff, 0xff, 0xff, 0x7, [@hid_hid={0x9, 0x21, 0x1000, 0x43, 0x1, {0x22, 0x9e5}}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x1, 0x1, 0x4, [@generic={0x9d, 0x10, "7c8058134b5a00be1bbc67e9c859cec3f8b8f2632cb90252f9235927cb1ea8eca70ee8865248b69469081cd49d3359d9bd2e8cbabfaa6f966552de41c1e786d452cc2ce260c30a651bd843dcb0dc833aa26badd6fa31a1da74434dccb99c120ca001da3f1d9260b65acd21fa7e5147a161ed18c59a863386caaa32a03a4ac3b0efcbd229346fc6239bd78cd8a6027fb2533e16a4bee0d7e3c4b3bc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6f, 0xf}]}}]}}]}}]}}, &(0x7f00000039c0)={0xa, &(0x7f0000003840)={0xa, 0x6, 0x30, 0xe3, 0x3, 0x2, 0xff, 0x8}, 0xbd, &(0x7f0000003880)={0x5, 0xf, 0xbd, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x9a, 0x1, 0x31, 0x0, 0x1ff, [0xff00c0]}, @generic={0x2f, 0x10, 0x3, "daebb6999575c855eaa77abc01b9f022320ff486f2d1e71a6ffb7885fb58f529d06021bf9b407f1d5cc6d35a"}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x9, 0x1e00, 0x8f, [0xc000, 0xff000f, 0xc000]}, @generic={0x37, 0x10, 0x2, "4c5eabf16fd7ba2aeb97c7d03c7a739c336bb921b152bc018927cc103a35d8239fff9c7d41192be07e97daec367733314a57ae52"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xb, 0x5, 0xfff}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x6, 0xf00f, 0xe1e8, [0x3fc0, 0xff0000, 0xff000f, 0x808030, 0xf]}]}, 0x1, [{0x7c, &(0x7f0000003940)=@string={0x7c, 0x3, "ff371fd5eb6faacac1b27f907ac08818acb26c695d49e906d463daab43fa10d2a655188b7fba48b2e68b8ef717d82cb8fefaa5a3987ca91bdb6beef2749563a7175222daf6119f4bf124ca1efc6729650d803d32b51cd471d2b1f3a70441c247c035fa291637a229ed2b639048b80fe0cbe8b3960f88a5508260"}}]}) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) 3.557043884s ago: executing program 9 (id=5557): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_compaction_end\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000002520000022c0a0975c7aacca83f62438feed7b2f677df000000"], 0x14}, 0x1, 0x0, 0x0, 0x48804}, 0x4000040) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 3.499001435s ago: executing program 9 (id=5558): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000a00000040"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000001280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 3.494980514s ago: executing program 9 (id=5559): r0 = syz_clone(0x4040000, &(0x7f0000000000)="d15a9d16ec", 0x5, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="4d665517c005bd3868dab057397e8b1f5fec16e1e9618b41f8123c88dac59b61143667dc195319128d687e2f9fa57ab3b3250aa4fdf50c564b7895e684ce957972335f5398cfb8cd6520c4a1e247a84488bd01e3197d783faebb7a3f93617e9932147f448c935ceb0db35082122951e834f97ab2da50547704cd51bc752949730801863936b7159342c985d004e782ccd7e05e2b92b14c87cc0ac0fb5d755e9a62b9f7d6a544002aa6aa3de7") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0xfffffff4, 0xb3e0, 0x616, 0x8, 0x8, 0x101}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x1, 0xff, 0x1, 0x5, 0x700}, 0x20) waitid(0x0, r0, &(0x7f0000000240), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000300), 0x8, &(0x7f0000000380)) syz_clone3(&(0x7f00000015c0)={0x80, &(0x7f0000000440)=0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0), {0x1}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000001500)=""/67, &(0x7f0000001580)=[r0], 0x1, {r1}}, 0x58) waitid$P_PIDFD(0x3, r2, &(0x7f0000001640), 0x2, &(0x7f00000016c0)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000017c0)={0x8, &(0x7f0000001780)=[{0x7fff, 0x3, 0xff, 0x2}, {0x9, 0xb7, 0x4, 0x101}, {0x4, 0x5, 0x3, 0x8f3}, {0x6ac2, 0x80, 0x9f, 0xc5}, {0x6, 0xd9, 0x7, 0xffffff02}, {0x4, 0x14, 0x4, 0xed87}, {0x8, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x9a, 0x3}]}) execveat(r1, &(0x7f0000001800)='./file0\x00', &(0x7f0000001940)={[&(0x7f0000001840)='\x00', &(0x7f0000001880)='\x00', &(0x7f00000018c0)='\x00', &(0x7f0000001900)='@.^)!\x00']}, &(0x7f0000001a40)={[&(0x7f0000001980)='[[$+^\x00', &(0x7f00000019c0)='cpuset.memory_pressure_enabled\x00', &(0x7f0000001a00)='\x00']}, 0x800) shutdown(r1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001bc0)={0x24, &(0x7f0000001a80)={0x40, 0x3, 0x5e, {0x5e, 0xa, "3c7b994a32d33cfce00179a21fe3d4518c837c1247998abcaa9a1e58f517a81936b74ca448a2242d6d49807562966fb629c78f3abe79c22ad18d54fd580f1e3969fa5148cf7bad5fd16c57fd6ebe28b64c8749f485580eeffd98d1b1"}}, &(0x7f0000001b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000001b40)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x4, "3953b888"}, @local=@item_012={0x2, 0x2, 0x9, "c3cc"}, @global=@item_012={0x2, 0x1, 0xa, "d2ae"}, @local=@item_012={0x2, 0x2, 0xc, "8ddb"}, @global=@item_012={0x1, 0x1, 0x5, 'z'}]}}, &(0x7f0000001b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x1b4}}}}, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x20, 0x10, 0xcb, "2babecbd113acb1114320394da21d7842807f84aec421a5f4e9db15c5fcf10bc8eaa5166fdd1f4c82e0239970732306e3ecc2b94602de21ffc064dc5ced7e4bbd52dde323488f97b5a6071a7c2440df947841fcffeeecb8b28ca54d7a3d71eae2ab415538d9efc381c01729f8f83e7ff21197cfda0d9022a5ed686dad144e69b3a0089b4af39e295047f34b2f08b423d2417261b72a82154460bfd77e48e501dc36976f9d6485dc5b7d5ec0f9d34462c9d712bcd7c05bcac1aeb167b71cb8c1fbcce46fef4869b3366c67a"}, &(0x7f0000001d00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001d40)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000001d80)={0x20, 0x1, 0x5e, "44d59ee79e8cc6b2c10c2cb01930e901f8c753d849b12b1aede27781583e0fdcd85a2e69e084213b7c006fc6e1ec971e8c5f58aa9fd749ac75769df056552669e92293da8f86c7975eaf9576893cbca26b85de4b5a1ea21c0af484d623f3"}, &(0x7f0000001e00)={0x20, 0x3, 0x1, 0x3}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001e80), 0x80002, 0x0) dup3(r4, r2, 0x80000) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000001ec0)=""/126, &(0x7f0000001f40)=0x7e) r5 = syz_clone(0x640000, &(0x7f0000001f80)="c1", 0x1, &(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040)="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") setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002180)={0x3, &(0x7f0000002140)=[{0x9, 0x4, 0x81, 0x91}, {0x2, 0x46, 0x81, 0x4}, {0x200, 0x8, 0x6, 0x4}]}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) prlimit64(r5, 0x5, &(0x7f00000021c0)={0x9, 0x100000001}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000002200)={"510fcb1572819e692b6df906e3381555", 0x0, 0x0, {0x1, 0x5954}, {0x10000, 0x7f}, 0x6, [0x9, 0x7e1ff041, 0x81, 0x80000001, 0x7ff, 0x4, 0xfffffffffffffffc, 0x4, 0x13c, 0x2, 0x7, 0x8, 0x0, 0xfffffffffffffff9, 0x7]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000002300)={{r3}, r6, 0x0, @unused=[0x5, 0x3, 0x3, 0x3], @name="4553ba5b5cd1f22b948a20f4cab11210082d0d3d463e844de6359e5cc040dd280f8c09302014dc2a467ed083a48bd9e51a6a9febbd2fab362ede0eda3a14972b347db4c90bc07fbe272ab6297559975ab6372bceac8f728463b4f8e0e77c2c8bdf01fe2960158103126bbe0da8801ca33b61f1247d6f2f1d9aa3d06f7504e309cac03c9990b3befba4d00fdbe90718596e2e22335d4b81824dc5fab0f2a0e3312ac878c5d99a6ed3cf68b7908d5b4b174f6e07ce26f25be2ecdfed12119fdd6c4442205a9fa7602eba6f7daf7bd7678006c13cb777fe501ef4b8cef7fbbe8f0362579bbbc53d88ea0ce95673f2e9d5791f309e2bbbdf0d00c613e75ee74cf418bbfef60919db0076a87aa6c0d563526d1dea088e5868581557ce4a7bbf47a0ba8e3e7778a6d9a8f25e642af891c6da771905a36ad110e35b9981d6e428a42997b9bb18b45317a68ca7ca06511bd91664f3b3cb04e6d1e922680d4ca771396002f40644605690b9f9d784b52243ee948ffffc5a0ddcf2c37edf9e39603e0d86762bf7e1ab62e3906ad03360fcb6d559ec6fa164aafd7ec60ba720bd63905d1e7b324afc0654417ebf9409cb77a026d73541f6ddeb4678039940c96f9ac9a2b175abfc3d2ab0a19277cd41920f18810ffff726ffade36a41107601a13dacfa5e4f5a4ca11b747e6b2120437011cdb47d1fee7d4127b633320702390044330152271e1808a085e3603bc49b08ef6479d994996f4a86133d5e1b0db6a56020ff446f4718ca60ee61a4762ed86af31ab0d8ba3fc533b1d9cedfe44434da840becb5c9729a2e77d249bda4a678b4e192de4ff908ad3446bd25cd1a36a7cbadb65ded5cb8ad0f28d5d9fd7ead890216598349693002438b9fdadea02e76e176622016a41b082c7a22b81c09fcb022ddec18f3a1e0cbe39fda0d19bf48df0d9a114e008d6a246b706a7d3cee355e4932bc27b7d5b25e18a895c7c6e2738ceab3f4ccb1b7363f1f3d00c77b1605ffd6181be546ecd69c20ba99e0bf2d1b9db10714fb8adac033bf9061a265e5e185dc8b44c554cd7d7d7fff66f500b9e71bf463b2b1e6a8e767421bc124060270b9ca8e9f7e19a29625e72f92e1c54c1ab2ae1a8e42e61dd7b9c9e92e746c198b8b652038877f4a3183cf415e3e7f982efdcf65b2aab43a12da81f9ee62b9eccd9aa8cd6ee165d4f910c5ea57e04983b88ed79b2d87f60af7ffb74d22be9b7694dd68a01008cb0a46c13c67902eee554cf705c15df93dd8a8a87be96547cd3c04586e723d3d972faabf72fe8a0513b58bd2944a8215b0ac5cf97f36b68199c1894f31297328b3f44136295141549fa5fb8106ba6c1d2aacdbf7bf6e394fc09d6729af2da1895cb0b3914dfb30c3465ab53e5f1526a25c71e4b848829e2a4a90607b9a68dc6de8fa7b25ddbd0e28ad0d069ee86de8634087177983d341e5b595c2b393948989e6279ec5528993c5be47cbdf54933151f4c49ed34f97d12558928eacc1c79b9e42dd43d667ac536f85e21a2dc8121b97d6da96d39f44bfca60a0dc9e0e9d1a2fc9a2b85302372c216abb26cededbcec10984ed02b14acdb71b0d1fc17d3b15071b8f794186cb8b81d9a92c3a3e88a05577122210212ac835a41d2db6eb207136b47d9ddb5954b8452b1170dfdd7a5ef20609cad937454747a9ba2d40b32729d10fb85a91403d5b849bd06954fce78760856ca2505eff2b3fd24c2ffd975f3db6875bae1e835e4917efef1348a0124eb82e78b9e00b6fb44ccd420bd71c4b2e19433d3cc7572390b7e9936f6e16acb6ddfb521fe695483a4b16e26b50d1a595a038f3e52f22199a07c82921ad6788613b401d67be0352500edcc346a2f86f79773dcb61bf8ee978915274303fb4d5c2267903110367c84eb9556668f7b80dd77064545716d2053ac08348bbd002c04e00d7b109fb6ec45b3323da75f05d7e5ae7639fa9d431442c930436c0cedb0c7efc24f349432bb43ff79a6535925a760f1fa0a896f252806947cdd31bfd1c9dca2571c7581fd547b77131f9ac19ac4c5bc3c6ff1a8fc38e2590cb624804dce1ae1fdc06b812de62fbf7fa30aed1f50def526bcc2ddeb7ef2d1a941e4434bff5597b8e2f032908e8a51653f44781bbdd4fe6e8d8382bde9675c70159159f229f61dec6a036bbfd0da42a7972e3a19789d46ad23d894838d69cdaf11164710a3ec3bf4c14eba49e5c695aa42f53d1db0911beecf3aeb4ba331696699102a6b81e12d5e82183a9412c13c221b3efcba79143ab21f428efc076f1fcc65c055064a17118f77bcedbe914ebef5546fb4e658b4a352876775b84018a1a7aefbac9838ecf4fac0273f96c0369842692e3819576abc0d968c9b0f07e23c4d9b592fea4760de6fa377b3536114bc9e8aa722a9a36cd94c8291a5a570168212d57c78af57b0d6547b401cbda9145409eea23c640f2e8caaf56483edd6ae3d5a1276aec59956267648edc4f088025d238c2d43054302b0ef82c0b5c7ec02ed028c4d325fb19cf55efb2b16f7025de1e822e99c8c74b717097203177f9599140fae2c7df881eea59d6748de74764166e27200ffcd148f44a1bfb326e03e7735849b778f3e329c14036a5d3ba246e7fe4d974681ef1e638561325e8dacdd1e4fc56912106775e6f3ffe40dbbd37fbc107de32acd7f6fa41a90bdcabf1f4841cb31977f462d7c7c78a528f347baed51067ddc092b239fc060d1a0ec102e2e494bcf857d29757589d24c3ea6c31793e38792b42ac4b0c7be6713b514d4e3b70d1cf11a37a74eae937a546d124891fb3358cfca24824094f637005f189330f06254a765eb8fed2beee0dbdf99a73f21c617e3ad7b9c56269b50210fa802fcf72c8f2a553bff0ce1f569dd5504be0a436325fc9d4dd807157dd96550a4275fd96b5a981ca3375aa766a4d774f3210daf4518c71a8b4bcec78705625045245d7747eaa8c6c55cef12bc382791e243a57a8fec74d913933d0320fa9186ed1b1509936813dee148abe53c4fef64ae1e6e872fc5e6f3932b88f4bc8417c87881494d4d6b31943a3b715baba8ebef6814a4d5edfc1e36c48cf6be885b37e0144eeaec46b79f8e0664ad14bd2ef2e9eb8032ef5a7b56fe82279289a03be19ecda2da76b3affd5309311ec7d94dded092c3763265f26150df2e000341e5f1bbd2da98baacdaf7bb76ccbb3d99f107378eaf537798b4bdd59df4d757d7fc77687aa8af216e13b33ccd55d3b7050af398c30b6401b3bb09c187d5a279bb31fc7f0aba2e20c5860b7915fd2fc7ebc244a57d51d0643d75493a490736793401aa4c08e107abec9f2b3dc950e514fdfd5e402535bc5fc46b66c619ca9ff1d39bcae847aa3fb8579278c21b7344c9f88ff5ccade42d72fb8b8b0d7b7dbd62fc45c1e27c1da3f7ab2f6403618bbd77aa59eb5096fd079aa42fdd4283f75ff0904d589f0658532c1b728795c5f2cf82d28bc5951bb685d2ea945ed61fe583109a1e614177985d413f2fd4791ee99d898d901fef5a91129697219318107890b2e279fba99fb21bb7fda789e0970c9a7c8bf71ef5038db7e9b11ab700d6aa5c8b9e6b91e347acddacb3584a2aff136a612a143b2e2b923c82a900c7edf17e2d922e28b0086da6b2712ea4d53178d68435f41f9f0ec7acb551799540200b6692260efc116d38ae5242b8e4db24ca3633156a1fe133e33812cdc3c04c96ca2f8780751efd0653223cd8defec092c526bc855ba0f0df9651ed92de543fc6aa1298b2936dd099e3fdcd88dd83983e34d6151417c3cab51389bcf9006249ff5f2053348d0cba3084f4745f754cf6a29f631a0c38b7ef3ae2bbd2d308904bab28f2f5f07d7412b2a030c0293b0e63301ecbcacf6079830f5fd61f7d0716136794a7ee5a0d9558987093de5ff1c8b5dd5391c43c5bce5963ce4487f9a41bde5e6d9dcb22c7c3d73333fe7a0ea150a8bd7583bf19ba81457d637a9c38181a56dc5291ad1a9d1bb2f8c10608f0329663c11f1045f6dffd0952dbd3e928739005b46f78e9d62be5db71e95067523c6140c6ecb6942c170633a01c9c25eaf776ba7919a18e1b11d1786bdc825980e186fd19fcadd68c8b68a7b001b723e093d8c0587867a067b7481ffb89c472b318d9dd55c3c9ea8484e8034dfbb4520afe16bde1457b5f5925b21fc3a61b3599883ba0035034454131db5cef66314438caec13106d2f54fd98039036d512642a758152571e6dccfe706330b096cdb3cba4c60beebdcc2ec715226c0f2cf3ddcaac7b2974f3521f98a3f8e5ff85783e728fdf1b49c4a3826489a46d6fcc1160a36c3ba194413d109dbe8d58f2f9c9c16492f026b8a3089459381bc2cd15c0cbcb57fc8365b5e01b2aaabd0b0d89e39ca011d5be8449afc32870db969914e79be6cffd70acb0f9e565cd4aeadeff913a287ce372277149423287b8e97b5cea38d94341a1b99c8402b83f4d0fa3fe19150281a964fe881a4ff4a54b711566c4384295791a492efcad94875656d7a84f25fc486909d8bc55ffe970a6454bfc5e071aefd93b88177880b96916f5f2fbc8e90969d4c27a22d7b4ba603ee1a001a31a23378b8ed83719b4b0ae88d33688c2b5428ea547fc79a720605c510d24be5456814f4d0440b4c2e0368adfe77f88e9ecee3ce67a78a55696ac956e296ae3f9d7a3cf8671aabceeafcb1c78ef401b9ef47943a7d6ca97472d9e11c1300923c9e30c63063045846dc804c2bb2b22a3253dd2e17b64280da43a28b003457ba158438e78d7a302161dec2ef6ca4f64ddace14ff29e5bee3a8c1cbd29a47e2edd79afdb791590e7bb20530cb3dd365cf5e91250f39a1df44b399eafc3e235c0aa07095798f57a841ede112ff1beae5cf95fecabd29b2d79b208c2d98a52c840380f91525d993ff69f407216ffa44661d81248fe81aa5255299583a28ad172c2855549ca8066eecf280954402317fee3572583adfc07e3f73fd7817c08ce846d0b0b85de2c6c0b0bc6542bb5586f9ef8e9105f44a80d2e49bc041c05f8aa938d9abe837519dce9cabcfaa7c877e24d9fac3832929fd296eeca11dc47cebcafc4527fc969fa95fef53864359df14281c6c6d78597d26ef4ee11a334ed273eba482670ffda4e0af0577a2d3cee11a602daf3dfdac36d841177b5987275c3542a0b764e404d7b94329d1b4b29db3a729767e89ede42dbafde33f05f898b28869a4c1db1b47a4d770fd3d46654496cceefbfb436a72b3d5779b423d1f6820b9847b3349536bca95337ee73a77e90146521c7d162281e45dfb0a13fe18309cfd92fa34c10fb8c402353eed92c5dc2ef9a8570eb9a57db73f56576e9680e099ba43d55b79f781927164102f3ed7c18c26fa62cac20f7ce372644b751c64dac5badbb9b46e02b4f2dd38535c24cbd851cee9d9f4683b7ed59ec571c9261a5080759824f32b65b6a2e1eaade087ec27ad091f3388717b2481f329268ac68c491ef0e67402b1d68c4d4d6bfa9a0f1e9cfbd0ebe3322135f2cc0c88395be00d9d24c4b00e6c4cb739a49ef2ece6665538eeeb294459a6ab783f5526ed9d448d93bac6a7bcb21dbab31490be552a1c8545c3643b93d715b84a5f5a19f1d781e8f144cb24a8117f7c52ff2e0698fc21000ed5c4afd256025d5395af531726a905498348283ff31814d9123e6c76bd192ee36d70636159c6e61ef265e27af1"}) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) write$binfmt_script(r1, &(0x7f0000003300)={'#! ', './file0', [{0x20, 'r/$}'}], 0xa, "ce97038aedb55ef48569fb122e4904e484438ab7f25f6b1d82ff64ce974c66457720205eab599fadb3954fefe340ce5deb41a4e68ccd81e2cf18df740508a6200c1f3106bbdcd07d26a509c48e1b5986909aa83308055d951c489dabd1f075e036ce0cdf8d032bd224b8e76f6b553d4a229f457973e19d6da7e3e3142a2a7637da03dea06f5d6a57b8af09bdfbe6125d2b0e609194ab4fca0ba4f8d3e50e2cb32a414581f183495d44186566363a06340dd8d825cbd846b9f1adbfa7c9e0fc41931022ab7bb5b1e16cd714243d750e8bf6626220c157cb138f084d51f662f102f483aa2ad563b8c9398000"}, 0xfb) bind$inet(r1, &(0x7f0000003400)={0x2, 0x4e22, @broadcast}, 0x10) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9000, 0x3, &(0x7f0000ff7000/0x9000)=nil) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000003440)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x1000, 0x2}) setrlimit(0x7, &(0x7f0000003480)={0x10000, 0x9}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000034c0)={0x32, @remote, 0x4e21, 0x4, 'lblc\x00', 0x24, 0xe, 0x7}, 0x2c) 3.100402051s ago: executing program 4 (id=5560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000028c0), 0x20a40, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00'}) socketpair(0xf, 0x4, 0xfffffffe, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) time(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x2}, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.950682673s ago: executing program 9 (id=5562): setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0xf, &(0x7f0000000080)={0x6, 0x4}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x140) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x18000000000002a0, 0x4b, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffef7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x42, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x7, r6}, 0x38) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7bbc}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'pimreg1\x00', @random="007ef52000"}) sched_setscheduler(r0, 0x0, &(0x7f0000000400)=0xd) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="78000000100019"], 0x78}}, 0x18002) 2.783255316s ago: executing program 9 (id=5563): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28a0053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x42}, 0x48005) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) rmdir(0x0) userfaultfd(0x80001) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fallocate(r3, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 2.52014257s ago: executing program 2 (id=5564): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000080)={[{@noblock_validity}, {@nojournal_checksum}, {@grpjquota}, {@nomblk_io_submit}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r0 = open(&(0x7f0000000000)='./file1\x00', 0x147040, 0x60) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_wake_idle_without_ipi\x00', r6}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) pwritev2(r0, 0x0, 0x0, 0x5, 0x1, 0x26) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20) 2.134973496s ago: executing program 4 (id=5565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syslog(0x4, 0xfffffffffffffffc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r6, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3, 0x162, 0xb) syz_pidfd_open(0x0, 0x0) umount2(0x0, 0x2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2.132183246s ago: executing program 0 (id=5566): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) syslog(0x4, &(0x7f00000002c0)=""/18, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x44010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r4, @ANYRESHEX, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4(r7, &(0x7f0000000200)=@caif, &(0x7f0000000040)=0x80, 0x0) 1.471870357s ago: executing program 9 (id=5567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x3, 0x80, 0x1}, 0x10) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.440048607s ago: executing program 5 (id=5561): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x6, 0x3}, 0x100, './file0\x00'}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002780)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x60000084) recvmmsg(r3, &(0x7f0000008c80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000380)=""/84, 0x54}], 0x3, &(0x7f0000000440)=""/87, 0x57}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x3, &(0x7f0000000880)=""/201, 0xc9}, 0x2}, {{&(0x7f0000000980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000009040)=""/4105, 0x1009}, {&(0x7f0000000580)=""/16, 0x10}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/90, 0x5a}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000d00)=""/114, 0x72}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f0000008f80)=""/168, 0xa8}, {&(0x7f0000000e40)=""/89, 0x59}], 0xa, &(0x7f0000000f80)=""/199, 0xc7}, 0x80}, {{&(0x7f0000001080)=@nfc, 0x80, &(0x7f0000001100)=[{&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000a00)}], 0x2, &(0x7f0000001140)=""/153, 0x99}, 0x7e6}, {{&(0x7f0000001200)=@hci, 0x80, &(0x7f0000001300)=[{&(0x7f0000001280)=""/33, 0x21}], 0x1, &(0x7f0000001340)=""/203, 0xcb}}, {{&(0x7f0000001440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001540)=[{&(0x7f00000014c0)=""/91, 0x5b}], 0x1, &(0x7f0000001580)=""/34, 0x22}, 0x4}, {{&(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003780)=""/244, 0xf4}, {&(0x7f0000001640)=""/156, 0x9c}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/121, 0x79}, {&(0x7f0000004900)=""/58, 0x3a}, {&(0x7f0000004940)=""/69, 0x45}, {&(0x7f00000049c0)=""/54, 0x36}, {&(0x7f0000004a00)=""/177, 0xb1}, {&(0x7f0000004ac0)=""/132, 0x84}], 0x9, &(0x7f0000004c40)=""/165, 0xa5}, 0x800}, {{&(0x7f0000004d00)=@x25, 0x80, &(0x7f0000005100)=[{&(0x7f0000004d80)=""/99, 0x63}, {&(0x7f0000004e00)=""/202, 0xca}, {&(0x7f0000004f00)=""/244, 0xf4}, {&(0x7f0000005000)=""/118, 0x76}, {&(0x7f0000005080)=""/67, 0x43}], 0x5, &(0x7f0000005180)=""/71, 0x47}, 0xfffffff8}, {{&(0x7f0000005200)=@qipcrtr, 0x80, &(0x7f0000005400)}, 0x4}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000005440)=""/53, 0x35}, {&(0x7f0000005480)=""/255, 0xff}, {&(0x7f0000005580)=""/56, 0x38}, {&(0x7f00000055c0)=""/241, 0xf1}, {&(0x7f00000056c0)=""/114, 0x72}, {&(0x7f0000005740)=""/183, 0xb7}, {&(0x7f0000000d80)=""/154, 0x9a}], 0x7, &(0x7f0000005940)=""/11, 0xb}, 0x8af8}, {{&(0x7f0000005980)=@x25, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/181, 0xb5}], 0x2, &(0x7f0000006b00)=""/4096, 0x1000}, 0xfff}, {{0x0, 0x0, &(0x7f0000008c40)=[{&(0x7f0000007b00)=""/98, 0x62}, {&(0x7f0000007b80)=""/98, 0x62}, {&(0x7f0000007c00)=""/4096, 0x1000}, {&(0x7f0000008c00)=""/13, 0xd}], 0x4}, 0x10000}], 0xc, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000b0000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, 0xfffffffffffffffe) newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001700), 0x400) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa07, 0x0) 746.947998ms ago: executing program 2 (id=5568): r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0xe0, &(0x7f0000000440)={0x77359400}) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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") socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) 234.069386ms ago: executing program 4 (id=5569): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000a00000040"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32, @ANYBLOB="0000000001000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 181.926197ms ago: executing program 0 (id=5570): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) pipe2(&(0x7f00000001c0), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="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"/475], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000280)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) accept$packet(r0, 0x0, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0x3}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 71.095729ms ago: executing program 4 (id=5571): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 51.782939ms ago: executing program 0 (id=5572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000006c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x21, 0x4, 0xffffff79) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r10, 0x540e, 0x9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) 0s ago: executing program 0 (id=5573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)="c276eb2dae71faa3094c28a8224b0a389ef331c61baf418319c89eb3d6f00b0b38d020b0db43cd99a068808cf9d7"}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400d5d0000001a4657a75b9139ee170f4bb785474545af501e0c1356f824761a6b5d20e8a1f2b98e8c05382c35cdb3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t pid=16232 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 820.119202][ T30] audit: type=1326 audit(1751299982.440:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16232 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 820.143268][ T30] audit: type=1326 audit(1751299982.440:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16232 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 820.329571][T16247] loop7: detected capacity change from 0 to 512 [ 820.334824][T16249] 9pnet: p9_errstr2errno: server reported unknown error [ 820.356066][T16247] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 820.356066][T16247] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 820.356066][T16247] [ 820.451370][T16247] EXT4-fs (loop7): can't mount with commit=1, fs mounted w/o journal [ 820.562330][T16254] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5118'. [ 820.779032][T16256] loop7: detected capacity change from 0 to 256 [ 820.792824][T16256] exFAT-fs (loop7): bogus data start sector [ 820.841119][T16256] exFAT-fs (loop7): failed to read boot sector [ 820.867650][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5117'. [ 820.901978][T16256] exFAT-fs (loop7): failed to recognize exfat type [ 821.042597][T16264] loop7: detected capacity change from 0 to 16 [ 821.059366][T16264] erofs: (device loop7): mounted with root inode @ nid 36. [ 821.857043][T16288] loop8: detected capacity change from 0 to 256 [ 821.881787][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 821.997985][T16288] FAT-fs (loop8): Directory bread(block 64) failed [ 822.005027][T16288] FAT-fs (loop8): Directory bread(block 65) failed [ 822.011746][T16288] FAT-fs (loop8): Directory bread(block 66) failed [ 822.018364][T16288] FAT-fs (loop8): Directory bread(block 67) failed [ 822.025034][T16288] FAT-fs (loop8): Directory bread(block 68) failed [ 822.031699][T16288] FAT-fs (loop8): Directory bread(block 69) failed [ 822.038416][T16288] FAT-fs (loop8): Directory bread(block 70) failed [ 822.045023][T16288] FAT-fs (loop8): Directory bread(block 71) failed [ 822.052025][T16288] FAT-fs (loop8): Directory bread(block 72) failed [ 822.058637][T16288] FAT-fs (loop8): Directory bread(block 73) failed [ 822.351853][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 822.477251][T16291] sch_fq: defrate 0 ignored. [ 824.681464][T16320] xt_hashlimit: max too large, truncated to 1048576 [ 825.305458][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5139'. [ 825.314376][T16326] bridge_slave_1: default FDB implementation only supports local addresses [ 825.631182][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 825.956267][T16330] sch_fq: defrate 0 ignored. [ 826.119792][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 826.119807][ T30] audit: type=1400 audit(1751299988.730:4536): avc: denied { mounton } for pid=16346 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 826.259418][T16346] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.266644][T16346] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.274664][T16346] device bridge_slave_0 entered promiscuous mode [ 826.282185][T16346] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.289351][T16346] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.311203][T16346] device bridge_slave_1 entered promiscuous mode [ 826.364047][T16357] loop7: detected capacity change from 0 to 512 [ 826.568375][T16358] device wg1 entered promiscuous mode [ 826.577419][T16357] EXT4-fs (loop7): Test dummy encryption mode enabled [ 826.588483][T16358] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 826.596219][T16357] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 826.603759][T16357] EXT4-fs (loop7): Unrecognized mount option "subj_user=sched_switch" or missing value [ 826.637717][T16358] device sit2 entered promiscuous mode [ 826.671422][ T585] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 826.827179][T16346] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.834295][T16346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.841636][T16346] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.848746][T16346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.955036][T16368] usb usb8: usbfs: process 16368 (syz.7.5147) did not claim interface 0 before use [ 827.351513][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.359162][ T30] audit: type=1400 audit(1751299989.970:4537): avc: denied { name_bind } for pid=16374 comm="syz.4.5153" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 827.382867][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.390858][T16373] sch_fq: defrate 0 ignored. [ 827.411056][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 827.431443][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.480850][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.494303][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.503920][ T4089] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.511009][ T4089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.518673][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.527435][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.535886][ T4089] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.543221][ T4089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.563333][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.574500][T16382] loop7: detected capacity change from 0 to 256 [ 827.581439][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.590705][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 827.601335][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 827.611576][T16382] exfat: Deprecated parameter 'utf8' [ 827.617457][T16382] exfat: Deprecated parameter 'namecase' [ 827.631937][T11739] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 827.635928][T16382] exfat: Deprecated parameter 'utf8' [ 827.642797][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 827.653815][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 827.665453][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 827.673643][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 827.676589][T16382] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 827.683295][T16346] device veth0_vlan entered promiscuous mode [ 827.700449][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 827.717294][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 827.718791][ T30] audit: type=1400 audit(1751299990.330:4538): avc: denied { write } for pid=16378 comm="syz.7.5155" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 827.739668][T16346] device veth1_macvtap entered promiscuous mode [ 827.751141][ T585] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 827.762123][T16379] attempt to access beyond end of device [ 827.762123][T16379] loop7: rw=0, want=34359738491, limit=256 [ 827.765936][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 827.790720][ T30] audit: type=1400 audit(1751299990.370:4539): avc: denied { add_name } for pid=16378 comm="syz.7.5155" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 827.790885][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 827.831519][ T30] audit: type=1400 audit(1751299990.380:4540): avc: denied { associate } for pid=16378 comm="syz.7.5155" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 827.847750][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 827.858334][ T30] audit: type=1400 audit(1751299990.380:4541): avc: denied { read write } for pid=16378 comm="syz.7.5155" name="file1" dev="loop7" ino=1048739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 827.885057][ T30] audit: type=1400 audit(1751299990.380:4542): avc: denied { open } for pid=16378 comm="syz.7.5155" path="/163/file0/file1" dev="loop7" ino=1048739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 827.909780][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 827.921369][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 827.991565][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 828.000207][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 828.018227][ T30] audit: type=1400 audit(1751299990.630:4543): avc: denied { mounton } for pid=16346 comm="syz-executor" path="/root/syzkaller.TSZSym/syz-tmp" dev="sda1" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 828.049506][ T30] audit: type=1400 audit(1751299990.630:4544): avc: denied { mount } for pid=16346 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 828.551495][ T30] audit: type=1400 audit(1751299990.630:4545): avc: denied { mounton } for pid=16346 comm="syz-executor" path="/root/syzkaller.TSZSym/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 829.025373][ T585] usb 9-1: Using ep0 maxpacket: 32 [ 829.137810][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5163'. [ 830.256321][T16415] FAULT_INJECTION: forcing a failure. [ 830.256321][T16415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.271366][T16415] CPU: 0 PID: 16415 Comm: syz.7.5165 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 830.281347][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.291484][T16415] Call Trace: [ 830.294755][T16415] [ 830.297693][T16415] __dump_stack+0x21/0x30 [ 830.302017][T16415] dump_stack_lvl+0xee/0x150 [ 830.306688][T16415] ? show_regs_print_info+0x20/0x20 [ 830.311978][T16415] dump_stack+0x15/0x20 [ 830.316142][T16415] should_fail+0x3c1/0x510 [ 830.320553][T16415] should_fail_usercopy+0x1a/0x20 [ 830.325659][T16415] _copy_to_user+0x20/0x90 [ 830.330171][T16415] simple_read_from_buffer+0xe9/0x160 [ 830.335544][T16415] proc_fail_nth_read+0x19a/0x210 [ 830.340563][T16415] ? proc_fault_inject_write+0x2f0/0x2f0 [ 830.346191][T16415] ? security_file_permission+0x83/0xa0 [ 830.351732][T16415] ? proc_fault_inject_write+0x2f0/0x2f0 [ 830.357358][T16415] vfs_read+0x282/0xbe0 [ 830.361509][T16415] ? kernel_read+0x1f0/0x1f0 [ 830.366097][T16415] ? __kasan_check_write+0x14/0x20 [ 830.371198][T16415] ? mutex_lock+0x95/0x1a0 [ 830.375697][T16415] ? wait_for_completion_killable_timeout+0x10/0x10 [ 830.382281][T16415] ? __fget_files+0x2c4/0x320 [ 830.386954][T16415] ? __fdget_pos+0x2d2/0x380 [ 830.391540][T16415] ? ksys_read+0x71/0x240 [ 830.395863][T16415] ksys_read+0x140/0x240 [ 830.400096][T16415] ? vfs_write+0xf70/0xf70 [ 830.404501][T16415] ? sched_clock_cpu+0x18/0x3c0 [ 830.409349][T16415] ? debug_smp_processor_id+0x17/0x20 [ 830.414717][T16415] __x64_sys_read+0x7b/0x90 [ 830.419211][T16415] x64_sys_call+0x96d/0x9a0 [ 830.423706][T16415] do_syscall_64+0x4c/0xa0 [ 830.428115][T16415] ? clear_bhb_loop+0x50/0xa0 [ 830.432784][T16415] ? clear_bhb_loop+0x50/0xa0 [ 830.437463][T16415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 830.443520][T16415] RIP: 0033:0x7f7a7d5af33c [ 830.447929][T16415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 830.467544][T16415] RSP: 002b:00007f7a7bbd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.475956][T16415] RAX: ffffffffffffffda RBX: 00007f7a7d7d8160 RCX: 00007f7a7d5af33c [ 830.484029][T16415] RDX: 000000000000000f RSI: 00007f7a7bbd70a0 RDI: 000000000000000a [ 830.492002][T16415] RBP: 00007f7a7bbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 830.499970][T16415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.508363][T16415] R13: 0000000000000000 R14: 00007f7a7d7d8160 R15: 00007fff33c81cd8 [ 830.516334][T16415] [ 830.526138][T16399] device xfrm0 entered promiscuous mode [ 830.534718][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5161'. [ 830.543761][T16413] bridge_slave_1: default FDB implementation only supports local addresses [ 830.611888][T16418] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 830.631226][ T585] usb 9-1: unable to read config index 0 descriptor/all [ 830.639564][ T585] usb 9-1: can't read configurations, error -71 [ 831.319369][T16437] loop0: detected capacity change from 0 to 256 [ 831.459178][T16437] FAT-fs (loop0): Directory bread(block 64) failed [ 831.465912][T16437] FAT-fs (loop0): Directory bread(block 65) failed [ 831.472980][T16437] FAT-fs (loop0): Directory bread(block 66) failed [ 831.479657][T16437] FAT-fs (loop0): Directory bread(block 67) failed [ 831.486467][T16437] FAT-fs (loop0): Directory bread(block 68) failed [ 831.493107][T16437] FAT-fs (loop0): Directory bread(block 69) failed [ 831.499974][T16437] FAT-fs (loop0): Directory bread(block 70) failed [ 831.506587][T16437] FAT-fs (loop0): Directory bread(block 71) failed [ 831.513387][T16437] FAT-fs (loop0): Directory bread(block 72) failed [ 831.520003][T16437] FAT-fs (loop0): Directory bread(block 73) failed [ 832.161426][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5174'. [ 832.221905][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 832.221920][ T30] audit: type=1400 audit(1751299994.840:4598): avc: denied { mount } for pid=16453 comm="syz.5.5177" name="/" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 832.351820][T16460] sch_fq: defrate 0 ignored. [ 833.347424][ T30] audit: type=1400 audit(1751299995.960:4599): avc: denied { read write } for pid=16470 comm="syz.0.5183" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 833.430830][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5186'. [ 833.441188][ T30] audit: type=1400 audit(1751299995.990:4600): avc: denied { open } for pid=16470 comm="syz.0.5183" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 833.464739][ T30] audit: type=1400 audit(1751299995.990:4601): avc: denied { create } for pid=16470 comm="syz.0.5183" dev="anon_inodefs" ino=68538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 833.536189][ T30] audit: type=1400 audit(1751299995.990:4602): avc: denied { ioctl } for pid=16470 comm="syz.0.5183" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=68538 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 833.562702][ T30] audit: type=1326 audit(1751299995.990:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.7.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7d5b0929 code=0x7ffc0000 [ 834.094588][ T30] audit: type=1326 audit(1751299995.990:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.7.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7d5b0929 code=0x7ffc0000 [ 834.130705][ T30] audit: type=1326 audit(1751299995.990:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.7.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7d5b0929 code=0x7ffc0000 [ 834.207602][T16500] syz.4.5189[16500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.207962][T16500] syz.4.5189[16500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.403115][T16506] netlink: 'syz.7.5192': attribute type 6 has an invalid length. [ 834.443188][ T30] audit: type=1326 audit(1751299995.990:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.7.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7d5b0929 code=0x7ffc0000 [ 834.518825][ T30] audit: type=1326 audit(1751299995.990:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.7.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7d5b0929 code=0x7ffc0000 [ 834.787397][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5198'. [ 834.787546][T16521] loop7: detected capacity change from 0 to 512 [ 834.842656][T16521] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 834.890253][T16536] loop8: detected capacity change from 0 to 256 [ 835.367419][T16555] loop0: detected capacity change from 0 to 2048 [ 835.403862][T16555] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 835.425809][T16555] fuse: Bad value for 'rootmode' [ 835.431877][T16555] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 835.507070][T16553] loop7: detected capacity change from 0 to 40427 [ 835.553000][T16553] F2FS-fs (loop7): Found nat_bits in checkpoint [ 835.577084][T16553] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 835.598455][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5209'. [ 835.654013][T16574] : renamed from vlan1 [ 835.733313][T13078] attempt to access beyond end of device [ 835.733313][T13078] loop7: rw=2049, want=45104, limit=40427 [ 836.083601][T16591] sch_fq: defrate 0 ignored. [ 836.192217][T16599] loop7: detected capacity change from 0 to 256 [ 836.275081][T16602] fuse: Bad value for 'rootmode' [ 837.252005][T16628] loop8: detected capacity change from 0 to 512 [ 837.532330][T16628] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 837.539485][T16628] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 837.550718][T16628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 837.558858][T16628] System zones: 1-12 [ 837.563999][T16628] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2228: inode #15: comm syz.8.5229: corrupted in-inode xattr [ 837.576487][T16628] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.5229: couldn't read orphan inode 15 (err -117) [ 837.589038][T16628] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 837.615598][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 837.615699][ T30] audit: type=1400 audit(1751300000.230:4718): avc: denied { create } for pid=16623 comm="syz.8.5229" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 837.687477][T16638] sch_fq: defrate 0 ignored. [ 837.714662][T16640] netlink: 'syz.0.5232': attribute type 10 has an invalid length. [ 837.885107][ T30] audit: type=1400 audit(1751300000.470:4719): avc: denied { read } for pid=16712 comm="syz.5.5233" path="socket:[69815]" dev="sockfs" ino=69815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 837.999580][ T30] audit: type=1326 audit(1751300000.570:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b8f208e7 code=0x7ffc0000 [ 838.088901][ T30] audit: type=1326 audit(1751300000.570:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b8ec5b19 code=0x7ffc0000 [ 838.183021][ T30] audit: type=1326 audit(1751300000.570:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b8f208e7 code=0x7ffc0000 [ 838.237319][ T30] audit: type=1326 audit(1751300000.570:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b8ec5b19 code=0x7ffc0000 [ 838.331235][ T30] audit: type=1326 audit(1751300000.570:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 838.419726][ T30] audit: type=1326 audit(1751300000.570:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 838.450533][T16788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 838.474111][T16788] binder: 16787:16788 ioctl c0306201 200000000300 returned -14 [ 838.517360][ T30] audit: type=1326 audit(1751300000.570:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 838.576340][ T30] audit: type=1326 audit(1751300000.570:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.5.5235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b8f208e7 code=0x7ffc0000 [ 838.612791][T16803] sch_fq: defrate 0 ignored. [ 838.960752][T16811] loop7: detected capacity change from 0 to 512 [ 839.015136][T16811] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 839.015136][T16811] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 839.015136][T16811] [ 839.105594][T16811] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 839.113495][T16811] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 839.123511][T16811] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 839.134026][T16811] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 839.144644][T16811] EXT4-fs (loop7): 1 truncate cleaned up [ 839.150297][T16811] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,nouser_xattr,grpjquota=.dont_appraise,,errors=continue. Quota mode: writeback. [ 839.177668][T16809] EXT4-fs (loop7): shut down requested (1) [ 839.184249][T16809] fscrypt (loop7, inode 2): Error -5 getting encryption context [ 839.191030][ T60] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 839.192106][T16809] fscrypt (loop7, inode 2): Error -5 getting encryption context [ 839.561097][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 839.572373][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.589235][ T60] usb 9-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 839.599933][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.608932][ T60] usb 9-1: config 0 descriptor?? [ 839.629755][T16827] loop7: detected capacity change from 0 to 512 [ 839.704542][T16832] loop0: detected capacity change from 0 to 256 [ 839.844063][T16832] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 839.961272][T16827] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,stripe=0x0000000000000002,. Quota mode: writeback. [ 840.132560][T16827] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.604252][T16849] sch_fq: defrate 0 ignored. [ 840.612841][ T60] thrustmaster 0003:044F:B324.0017: item fetching failed at offset 4/5 [ 840.626967][ T60] thrustmaster 0003:044F:B324.0017: parse failed [ 840.641034][ T60] thrustmaster: probe of 0003:044F:B324.0017 failed with error -22 [ 840.686641][T16854] capability: warning: `syz.4.5257' uses 32-bit capabilities (legacy support in use) [ 840.834809][T16866] loop7: detected capacity change from 0 to 512 [ 840.875168][T16866] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 840.899521][ T9347] usb 9-1: USB disconnect, device number 12 [ 840.940952][T16866] EXT4-fs (loop7): 1 truncate cleaned up [ 840.946800][T16866] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 841.031160][ T26] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 841.301057][ T26] usb 1-1: device descriptor read/64, error -71 [ 841.450662][T16877] loop8: detected capacity change from 0 to 512 [ 841.477859][T16881] netlink: 'syz.7.5265': attribute type 4 has an invalid length. [ 841.482134][T16877] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 841.502297][T16877] EXT4-fs (loop8): 1 truncate cleaned up [ 841.508179][T16877] EXT4-fs (loop8): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 841.711808][T16889] loop7: detected capacity change from 0 to 256 [ 841.731156][ T26] usb 1-1: device descriptor read/64, error -71 [ 841.784123][T16889] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 842.031326][ T26] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 842.331251][ T26] usb 1-1: device descriptor read/64, error -71 [ 842.428119][T16893] sch_fq: defrate 0 ignored. [ 842.447310][T16896] fuse: Bad value for 'fd' [ 842.452084][T16897] fuse: Bad value for 'fd' [ 842.791060][ T26] usb 1-1: device descriptor read/64, error -71 [ 842.823824][ T60] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 842.911482][ T26] usb usb1-port1: attempt power cycle [ 843.071020][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 843.191075][ T60] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 843.199265][ T60] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.209628][ T60] usb 9-1: config 0 has no interface number 0 [ 843.337840][ T26] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 843.346485][T16933] sch_fq: defrate 0 ignored. [ 843.359931][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 843.359946][ T30] audit: type=1326 audit(1751300005.970:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.391174][ T60] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 843.394772][ T30] audit: type=1326 audit(1751300005.970:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.424528][ T30] audit: type=1326 audit(1751300005.980:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.426180][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.449817][ T30] audit: type=1326 audit(1751300005.980:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.480299][ T60] usb 9-1: Product: syz [ 843.484609][ T60] usb 9-1: Manufacturer: syz [ 843.489420][ T60] usb 9-1: SerialNumber: syz [ 843.499174][ T30] audit: type=1326 audit(1751300005.980:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.499726][ T60] usb 9-1: config 0 descriptor?? [ 843.528540][ T30] audit: type=1326 audit(1751300005.980:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.551247][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 843.552318][ T30] audit: type=1326 audit(1751300005.980:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.584429][ T60] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 843.590910][ T60] usb 9-1: No valid video chain found. [ 843.591120][ T26] usb 1-1: device descriptor read/8, error -71 [ 843.603129][ T30] audit: type=1326 audit(1751300005.980:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.627301][ T30] audit: type=1326 audit(1751300005.980:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.658071][ T30] audit: type=1326 audit(1751300005.980:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 843.659591][T16940] loop7: detected capacity change from 0 to 256 [ 843.737636][T16940] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 843.795538][T16887] UDC core: couldn't find an available UDC or it's busy: -16 [ 843.803179][T16887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 843.811444][T16887] UDC core: couldn't find an available UDC or it's busy: -16 [ 843.818964][T16887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 843.828586][ T60] usb 9-1: USB disconnect, device number 13 [ 843.831046][ T26] usb 1-1: device descriptor read/8, error -71 [ 844.028971][T16948] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5286'. [ 844.361020][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 844.454181][T16953] loop8: detected capacity change from 0 to 128 [ 844.526529][T16954] device lo entered promiscuous mode [ 844.537125][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 844.553427][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 844.568188][T16954] device tunl0 entered promiscuous mode [ 844.580458][T16954] device gre0 entered promiscuous mode [ 844.594936][T16954] device erspan0 entered promiscuous mode [ 844.601161][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.609224][T16954] device ip_vti0 entered promiscuous mode [ 844.617487][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.633607][T16954] device ip6_vti0 entered promiscuous mode [ 844.637787][ T26] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 844.648454][T16954] device sit0 entered promiscuous mode [ 844.656667][T16954] device ip6tnl0 entered promiscuous mode [ 844.671047][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.672808][T16954] device ip6gre0 entered promiscuous mode [ 844.690424][ T26] usb 1-1: config 0 descriptor?? [ 844.744604][T16954] device syz_tun entered promiscuous mode [ 844.757464][T16954] device ip6gretap0 entered promiscuous mode [ 844.767808][T16954] bridge0: port 3(gretap0) entered blocking state [ 844.774307][T16954] bridge0: port 3(gretap0) entered forwarding state [ 844.794058][T16954] device bridge0 entered promiscuous mode [ 844.800349][T16954] device dummy0 entered promiscuous mode [ 844.806937][T16954] device veth0 entered promiscuous mode [ 844.814548][T16954] device veth1 entered promiscuous mode [ 844.821796][T16954] device wg0 entered promiscuous mode [ 844.830682][T16954] device wg1 entered promiscuous mode [ 844.837172][T16954] device wg2 entered promiscuous mode [ 844.843058][T16954] device veth0_to_bridge entered promiscuous mode [ 844.850027][T16954] device veth1_to_bridge entered promiscuous mode [ 844.857187][T16954] device veth0_to_bond entered promiscuous mode [ 844.863871][T16954] device bond_slave_0 entered promiscuous mode [ 844.870824][T16954] device veth1_to_bond entered promiscuous mode [ 844.877656][T16954] device bond_slave_1 entered promiscuous mode [ 844.884403][T16954] device veth0_to_team entered promiscuous mode [ 844.902311][T16954] device team_slave_0 entered promiscuous mode [ 844.911312][T16954] device veth1_to_team entered promiscuous mode [ 844.923805][T16954] device team_slave_1 entered promiscuous mode [ 844.931927][T16954] device veth0_to_batadv entered promiscuous mode [ 844.964161][T16954] device batadv_slave_0 entered promiscuous mode [ 844.975736][T16954] device veth1_to_batadv entered promiscuous mode [ 844.986703][T16954] device batadv_slave_1 entered promiscuous mode [ 844.997728][T16954] device xfrm0 entered promiscuous mode [ 845.008148][T16954] device veth0_to_hsr entered promiscuous mode [ 845.018509][T16954] device hsr_slave_0 entered promiscuous mode [ 845.027499][T16954] device veth1_to_hsr entered promiscuous mode [ 845.035162][T16954] device hsr_slave_1 entered promiscuous mode [ 845.041562][T16954] device veth1_virt_wifi entered promiscuous mode [ 845.048388][T16954] device veth0_virt_wifi entered promiscuous mode [ 845.055193][T16954] device veth1_vlan entered promiscuous mode [ 845.061679][T16954] device veth0_vlan left promiscuous mode [ 845.067434][T16954] device veth0_vlan entered promiscuous mode [ 845.074294][T16954] device vlan0 entered promiscuous mode [ 845.080077][T16954] device vlan1 entered promiscuous mode [ 845.085983][T16954] device veth1_macvtap left promiscuous mode [ 845.092055][T16954] device veth1_macvtap entered promiscuous mode [ 845.098749][T16954] device veth0_macvtap entered promiscuous mode [ 845.105406][T16954] device macsec0 entered promiscuous mode [ 845.111576][T16954] device syztnl1 entered promiscuous mode [ 845.117684][T16954] device ip6gre1 entered promiscuous mode [ 845.123778][T16954] device vlan2 entered promiscuous mode [ 845.129689][T16954] device gre1 entered promiscuous mode [ 845.135338][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 845.142529][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 845.149783][T16954] device bridge1 entered promiscuous mode [ 845.155964][T16954] device gre2 entered promiscuous mode [ 845.161544][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 845.168792][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 845.177094][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 845.185065][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 845.192846][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.200496][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.209195][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.216286][ T4094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.224046][ T26] samsung 0003:0419:0600.0018: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.0-1/input0 [ 845.224305][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.250235][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.258689][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.265754][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.273384][T16965] loop7: detected capacity change from 0 to 256 [ 845.288951][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 845.301382][T16965] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 845.308445][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 845.321637][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 845.322219][T16965] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 845.329956][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 845.339807][T16965] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 845.346748][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 845.367113][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 845.375767][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 845.384302][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 845.394130][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 845.402674][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 845.411167][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 845.419650][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 845.428646][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 845.437384][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 845.445557][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 845.453829][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 845.462144][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 845.472416][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 845.481283][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 845.490153][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 845.498433][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 845.506455][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 845.514130][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 845.521733][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 845.530097][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 845.538343][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 845.547849][ T3268] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 845.555733][ T3268] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 845.571428][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 845.610202][T16968] xt_bpf: check failed: parse error [ 845.690692][T16968] exFAT-fs (loop7): hint_cluster is invalid (17) [ 845.927731][T16974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64272 sclass=netlink_route_socket pid=16974 comm=syz.5.5295 [ 846.072930][T16981] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.080095][T16981] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.293556][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 846.304979][T16981] device bridge_slave_0 entered promiscuous mode [ 846.394605][T16981] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.409087][T16981] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.525930][T16981] device bridge_slave_1 entered promiscuous mode [ 846.591487][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 846.807433][ T3268] usb 1-1: USB disconnect, device number 5 [ 846.985360][T16990] loop0: detected capacity change from 0 to 1024 [ 847.128173][T16988] loop7: detected capacity change from 0 to 40427 [ 847.136869][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 847.145114][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 847.159050][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 847.168822][T16988] F2FS-fs (loop7): invalid crc value [ 847.204106][T16988] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 847.221463][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 847.239971][T16703] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.247079][T16703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.264780][T16988] F2FS-fs (loop7): Start checkpoint disabled! [ 847.268074][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 847.279369][T16988] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 847.866327][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 848.012669][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 848.044138][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 848.054470][T16751] attempt to access beyond end of device [ 848.054470][T16751] loop7: rw=2049, want=45104, limit=40427 [ 848.054834][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.072837][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.080740][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 848.089454][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 848.113828][T17002] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5303'. [ 848.124999][T17003] device gretap0 entered promiscuous mode [ 848.130778][T17003] device vlan1 entered promiscuous mode [ 848.159127][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 848.171804][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 848.190083][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 848.201463][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 848.210001][T16981] device veth0_vlan entered promiscuous mode [ 848.313739][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 848.331632][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 848.362031][T16798] device veth1_macvtap left promiscuous mode [ 848.368080][T16798] device veth0_vlan left promiscuous mode [ 849.331598][T17016] device wg2 left promiscuous mode [ 849.338967][T16981] device veth1_macvtap entered promiscuous mode [ 849.352567][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5309'. [ 849.361486][T17025] bridge_slave_1: default FDB implementation only supports local addresses [ 849.391070][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 849.486695][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 849.908087][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 849.926920][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 849.948665][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 850.022727][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 850.022742][ T30] audit: type=1326 audit(1751300012.580:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 850.058382][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 850.066920][ T30] audit: type=1326 audit(1751300012.580:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 850.124106][T17022] device wg2 entered promiscuous mode [ 850.361677][ T30] audit: type=1326 audit(1751300012.580:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 850.393853][ T30] audit: type=1326 audit(1751300012.580:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 850.422658][ T30] audit: type=1326 audit(1751300012.580:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 850.488039][ T30] audit: type=1326 audit(1751300012.580:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 850.571437][ T30] audit: type=1326 audit(1751300012.580:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 850.728017][T17049] loop9: detected capacity change from 0 to 256 [ 850.778583][T17049] FAT-fs (loop9): Directory bread(block 64) failed [ 850.785421][T17049] FAT-fs (loop9): Directory bread(block 65) failed [ 850.792318][T17049] FAT-fs (loop9): Directory bread(block 66) failed [ 850.798939][T17049] FAT-fs (loop9): Directory bread(block 67) failed [ 850.840052][T17049] FAT-fs (loop9): Directory bread(block 68) failed [ 850.846731][T17049] FAT-fs (loop9): Directory bread(block 69) failed [ 850.853507][T17049] FAT-fs (loop9): Directory bread(block 70) failed [ 850.860126][T17049] FAT-fs (loop9): Directory bread(block 71) failed [ 850.866927][T17049] FAT-fs (loop9): Directory bread(block 72) failed [ 850.873888][T17049] FAT-fs (loop9): Directory bread(block 73) failed [ 851.449575][ T30] audit: type=1326 audit(1751300012.580:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 851.474380][ T30] audit: type=1326 audit(1751300012.580:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 851.513982][ T30] audit: type=1326 audit(1751300012.580:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17035 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 851.611478][T17065] FAULT_INJECTION: forcing a failure. [ 851.611478][T17065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.651032][T17065] CPU: 0 PID: 17065 Comm: syz.9.5319 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 851.661051][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 851.671124][T17065] Call Trace: [ 851.674404][T17065] [ 851.677330][T17065] __dump_stack+0x21/0x30 [ 851.681665][T17065] dump_stack_lvl+0xee/0x150 [ 851.686259][T17065] ? show_regs_print_info+0x20/0x20 [ 851.691459][T17065] ? stack_trace_save+0x98/0xe0 [ 851.696310][T17065] ? __stack_depot_save+0x34/0x480 [ 851.701428][T17065] dump_stack+0x15/0x20 [ 851.705590][T17065] should_fail+0x3c1/0x510 [ 851.710032][T17065] should_fail_usercopy+0x1a/0x20 [ 851.715066][T17065] _copy_from_user+0x20/0xd0 [ 851.719690][T17065] __copy_msghdr_from_user+0xaf/0x5e0 [ 851.725064][T17065] ? _kstrtoull+0x3c0/0x4d0 [ 851.729575][T17065] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 851.734876][T17065] ? kstrtouint_from_user+0x1a0/0x200 [ 851.740267][T17065] ___sys_sendmsg+0x156/0x260 [ 851.745045][T17065] ? __sys_sendmsg+0x250/0x250 [ 851.749834][T17065] ? __fdget+0x1a1/0x230 [ 851.754078][T17065] __x64_sys_sendmsg+0x1e2/0x2a0 [ 851.759351][T17065] ? ___sys_sendmsg+0x260/0x260 [ 851.764210][T17065] ? ksys_write+0x1eb/0x240 [ 851.769175][T17065] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 851.775472][T17065] x64_sys_call+0x4b/0x9a0 [ 851.779907][T17065] do_syscall_64+0x4c/0xa0 [ 851.784330][T17065] ? clear_bhb_loop+0x50/0xa0 [ 851.789014][T17065] ? clear_bhb_loop+0x50/0xa0 [ 851.793691][T17065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 851.799934][T17065] RIP: 0033:0x7fc5d27c5929 [ 851.804354][T17065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.824048][T17065] RSP: 002b:00007fc5d0e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.832488][T17065] RAX: ffffffffffffffda RBX: 00007fc5d29ecfa0 RCX: 00007fc5d27c5929 [ 851.840472][T17065] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 851.848444][T17065] RBP: 00007fc5d0e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 851.856434][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.864924][T17065] R13: 0000000000000000 R14: 00007fc5d29ecfa0 R15: 00007fff24bca148 [ 851.873621][T17065] [ 852.203722][T17076] 9pnet: Insufficient options for proto=fd [ 852.435896][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5323'. [ 852.489358][T17082] loop0: detected capacity change from 0 to 512 [ 852.522753][T17082] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 852.540930][T17082] EXT4-fs (loop0): Test dummy encryption mode enabled [ 852.548775][T17082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 852.590246][T17082] EXT4-fs (loop0): 1 truncate cleaned up [ 852.596250][T17082] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,nomblk_io_submit,quota,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 852.668772][T17080] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.5323: bad entry in directory: inode out of bounds - offset=60, inode=33, rec_len=16, size=1024 fake=0 [ 852.946853][T17095] xt_CT: No such helper "pptp" [ 852.960649][T17094] loop7: detected capacity change from 0 to 1024 [ 852.991691][T17094] EXT4-fs (loop7): Ignoring removed orlov option [ 853.014291][T17094] EXT4-fs (loop7): dax option not supported [ 853.099591][T17097] xt_bpf: check failed: parse error [ 853.269132][T17108] loop9: detected capacity change from 0 to 512 [ 853.361454][T17108] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 853.369034][T17108] EXT4-fs (loop9): Test dummy encryption mode enabled [ 853.376599][T17108] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 853.384068][T17108] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 853.391665][T17108] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 853.403127][T17108] EXT4-fs (loop9): 1 truncate cleaned up [ 853.408905][T17108] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 853.874387][T17124] syz.9.5335[17124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.874439][T17124] syz.9.5335[17124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.887150][T17124] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5335'. [ 853.907747][T17124] 0XD: renamed from gretap0 [ 854.347367][T17124] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 854.502358][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5337'. [ 854.610143][T17132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5336'. [ 855.029642][T17166] loop0: detected capacity change from 0 to 512 [ 855.073384][T17166] EXT4-fs (loop0): Test dummy encryption mode enabled [ 855.080282][T17166] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 855.093223][T17166] EXT4-fs (loop0): Unrecognized mount option "subj_user=sched_switch" or missing value [ 855.161022][ T6659] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 855.324340][T17169] usb usb8: usbfs: process 17169 (syz.0.5346) did not claim interface 0 before use [ 855.988524][T17174] SELinux: failed to load policy [ 855.995479][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 855.995492][ T30] audit: type=1400 audit(1751300018.600:5002): avc: denied { load_policy } for pid=17170 comm="syz.7.5347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 856.077989][ T30] audit: type=1326 audit(1751300018.690:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.081296][ T6659] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 856.102582][ T30] audit: type=1326 audit(1751300018.690:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.110922][ T6659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.134449][ T30] audit: type=1326 audit(1751300018.690:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.144123][ T6659] usb 10-1: Product: syz [ 856.170833][ T6659] usb 10-1: Manufacturer: syz [ 856.176179][ T6659] usb 10-1: SerialNumber: syz [ 856.182768][ T30] audit: type=1326 audit(1751300018.690:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.207390][ T30] audit: type=1326 audit(1751300018.690:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.231336][ T30] audit: type=1326 audit(1751300018.690:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.232614][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5351'. [ 856.261951][ T30] audit: type=1326 audit(1751300018.690:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.291216][ T30] audit: type=1326 audit(1751300018.690:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.315141][ T30] audit: type=1326 audit(1751300018.690:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.0.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 856.395785][T17188] fuse: Bad value for 'fd' [ 856.702592][T17214] loop7: detected capacity change from 0 to 2048 [ 856.987090][T17214] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 857.018024][T17198] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 857.056186][T17198] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 857.080406][T17198] EXT4-fs (loop7): This should not happen!! Data will be lost [ 857.080406][T17198] [ 857.091913][T17198] EXT4-fs (loop7): Total free blocks count 0 [ 857.097389][T17228] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5365'. [ 857.097966][T17198] EXT4-fs (loop7): Free/Dirty block details [ 857.112927][T17198] EXT4-fs (loop7): free_blocks=2415919104 [ 857.118719][T17198] EXT4-fs (loop7): dirty_blocks=16 [ 857.124286][T17198] EXT4-fs (loop7): Block reservation details [ 857.132719][T17198] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 857.210024][T17232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 857.347246][T17236] loop0: detected capacity change from 0 to 256 [ 857.378233][T17236] FAT-fs (loop0): Directory bread(block 64) failed [ 857.386372][T17236] FAT-fs (loop0): Directory bread(block 65) failed [ 857.393230][T17236] FAT-fs (loop0): Directory bread(block 66) failed [ 857.399987][T17236] FAT-fs (loop0): Directory bread(block 67) failed [ 857.406619][T17236] FAT-fs (loop0): Directory bread(block 68) failed [ 857.413302][T17236] FAT-fs (loop0): Directory bread(block 69) failed [ 857.419880][T17236] FAT-fs (loop0): Directory bread(block 70) failed [ 857.426434][T17236] FAT-fs (loop0): Directory bread(block 71) failed [ 857.433122][T17236] FAT-fs (loop0): Directory bread(block 72) failed [ 857.439805][T17236] FAT-fs (loop0): Directory bread(block 73) failed [ 857.550116][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 857.641347][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 857.893300][ T9103] usb 10-1: USB disconnect, device number 5 [ 857.975461][T17249] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 858.506526][T17263] binder: BINDER_SET_CONTEXT_MGR already set [ 858.514172][T17263] binder: 17261:17263 ioctl 40046207 0 returned -16 [ 858.670120][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5379'. [ 858.679162][T17271] bridge_slave_1: default FDB implementation only supports local addresses [ 858.754725][T17274] 9pnet: Insufficient options for proto=fd [ 858.949599][T17278] loop9: detected capacity change from 0 to 128 [ 859.649542][T17292] loop7: detected capacity change from 0 to 256 [ 859.701781][T17292] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 860.067330][T17296] loop9: detected capacity change from 0 to 512 [ 860.131077][T17296] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 860.325280][T17296] EXT4-fs (loop9): 1 truncate cleaned up [ 860.351941][T17296] EXT4-fs (loop9): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 860.743334][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 860.754368][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 860.762510][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5386'. [ 860.774305][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 860.783779][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 860.793542][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 860.802428][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 860.811294][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 860.846155][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 860.864172][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 860.871832][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 860.882440][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 860.976191][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 860.987819][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 861.014239][T17306] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 863.016159][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5394'. [ 863.025100][T17333] bridge_slave_1: default FDB implementation only supports local addresses [ 863.220620][T17336] 9pnet: Insufficient options for proto=fd [ 863.235390][T13078] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 863.273511][T13078] FAT-fs (loop7): Filesystem has been set read-only [ 863.316106][T13078] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 863.332591][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 863.332607][ T30] audit: type=1326 audit(1751300025.950:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.409940][ T30] audit: type=1326 audit(1751300025.990:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.433507][ T30] audit: type=1326 audit(1751300025.990:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.457155][ T30] audit: type=1326 audit(1751300025.990:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.485306][ T30] audit: type=1326 audit(1751300025.990:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.529577][ T30] audit: type=1326 audit(1751300025.990:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.629371][ T30] audit: type=1326 audit(1751300025.990:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.660797][ T30] audit: type=1326 audit(1751300025.990:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.704129][ T30] audit: type=1326 audit(1751300025.990:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.768772][ T30] audit: type=1326 audit(1751300025.990:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.0.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 863.803219][T17355] loop9: detected capacity change from 0 to 512 [ 863.845649][T17355] EXT4-fs (loop9): Unrecognized mount option "obj_user=syz`ller" or missing value [ 863.874957][T17357] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.883838][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.891863][T17357] device bridge_slave_0 entered promiscuous mode [ 863.906872][T17357] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.965869][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.008006][T17357] device bridge_slave_1 entered promiscuous mode [ 864.139869][T17368] loop9: detected capacity change from 0 to 512 [ 864.406672][T17368] EXT4-fs error (device loop9): ext4_do_update_inode:5234: inode #3: comm syz.9.5407: corrupted inode contents [ 864.419564][T17368] EXT4-fs error (device loop9): ext4_dirty_inode:6070: inode #3: comm syz.9.5407: mark_inode_dirty error [ 864.433647][T17368] EXT4-fs error (device loop9): ext4_do_update_inode:5234: inode #3: comm syz.9.5407: corrupted inode contents [ 864.446426][T17368] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #3: comm syz.9.5407: mark_inode_dirty error [ 864.460466][T17368] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5407: Failed to acquire dquot type 0 [ 864.478858][T17368] EXT4-fs (loop9): 1 orphan inode deleted [ 864.484949][T17368] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 864.496499][T17368] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.511030][ C1] ------------[ cut here ]------------ [ 864.516653][ C1] refcount_t: addition on 0; use-after-free. [ 864.522747][ C1] WARNING: CPU: 1 PID: 17367 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 864.532943][ C1] Modules linked in: [ 864.536842][ C1] CPU: 1 PID: 17367 Comm: syz.9.5407 Not tainted 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 864.546860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 864.556940][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 864.563141][ C1] Code: 04 01 48 c7 c7 a0 f2 62 85 e8 58 ae 50 02 0f 0b eb df e8 ff c8 1c ff c6 05 0a f0 99 04 01 48 c7 c7 e0 f1 62 85 e8 3c ae 50 02 <0f> 0b eb c3 e8 e3 c8 1c ff c6 05 ef ef 99 04 01 48 c7 c7 40 f2 62 [ 864.582877][ C1] RSP: 0018:ffffc900001d09e0 EFLAGS: 00010246 [ 864.588949][ C1] RAX: d6e0b65ae13a3b00 RBX: 0000000000000002 RCX: ffff888115c54f00 [ 864.597017][ C1] RDX: 0000000000000100 RSI: 0000000080000100 RDI: 0000000000000000 [ 864.605015][ C1] RBP: ffffc900001d09f0 R08: dffffc0000000000 R09: fffff5200003a089 [ 864.613001][ C1] R10: fffff5200003a089 R11: 1ffff9200003a088 R12: ffff888117141208 [ 864.621014][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc900001d0ba0 [ 864.629334][ C1] FS: 00007fc5d0e0d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 864.638359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.644994][ C1] CR2: 000020000054e030 CR3: 000000012d326000 CR4: 00000000003506a0 [ 864.653069][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 864.661057][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 864.669017][ C1] Call Trace: [ 864.672307][ C1] [ 864.675148][ C1] tipc_crypto_xmit+0x1938/0x2400 [ 864.680178][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 864.685409][ C1] ? __copy_skb_header+0x437/0x600 [ 864.690540][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 864.695754][ C1] ? __skb_clone+0x47a/0x790 [ 864.700346][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 864.705297][ C1] ? skb_clone+0x202/0x360 [ 864.709710][ C1] tipc_disc_timeout+0x6a2/0x830 [ 864.714677][ C1] ? update_rq_clock+0x1eb/0x580 [ 864.719641][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 864.724947][ C1] ? __kasan_check_write+0x14/0x20 [ 864.730057][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 864.735622][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 864.740818][ C1] call_timer_fn+0x38/0x290 [ 864.745335][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 864.750860][ C1] __run_timers+0x639/0x9a0 [ 864.755392][ C1] ? calc_index+0x200/0x200 [ 864.759986][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 864.764859][ C1] run_timer_softirq+0x6a/0xf0 [ 864.769631][ C1] handle_softirqs+0x250/0x560 [ 864.774415][ C1] __irq_exit_rcu+0x52/0xf0 [ 864.778919][ C1] irq_exit_rcu+0x9/0x10 [ 864.783179][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 864.788912][ C1] [ 864.791923][ C1] [ 864.794869][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 864.800854][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x60 [ 864.807056][ C1] Code: 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 83 fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 <8b> 89 3c 0b 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d c3 66 [ 864.826687][ C1] RSP: 0018:ffffc90000ebf5f0 EFLAGS: 00000246 [ 864.832783][ C1] RAX: ffffffff84178375 RBX: ffffc90000ebf7a0 RCX: ffff888115c54f00 [ 864.840762][ C1] RDX: ffffc9000e53b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 864.848745][ C1] RBP: ffffc90000ebf5f0 R08: dffffc0000000000 R09: ffffed10223b6882 [ 864.856749][ C1] R10: ffffed10223b6882 R11: 1ffff110223b6881 R12: ffffc90000ebf7a8 [ 864.865123][ C1] R13: dffffc0000000000 R14: ffffc90000ebf7a8 R15: ffff888111db4408 [ 864.873119][ C1] ? scm_recv+0x3a5/0x540 [ 864.877438][ C1] scm_recv+0x3a5/0x540 [ 864.881619][ C1] ? __unix_dgram_recvmsg+0xd50/0xd50 [ 864.886999][ C1] ? skb_copy_datagram_iter+0x150/0x150 [ 864.892996][ C1] ? sock_load_diag_module+0x140/0x140 [ 864.898471][ C1] ? pid_vnr+0xf9/0x1c0 [ 864.902661][ C1] __unix_dgram_recvmsg+0x9bd/0xd50 [ 864.907858][ C1] ? unix_unhash+0x10/0x10 [ 864.912285][ C1] ? exc_page_fault+0x5e/0xb0 [ 864.917049][ C1] unix_dgram_recvmsg+0xc2/0xe0 [ 864.921910][ C1] ? unix_dgram_sendmsg+0x1880/0x1880 [ 864.927281][ C1] ____sys_recvmsg+0x291/0x580 [ 864.932050][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 864.937084][ C1] ? memset+0x35/0x40 [ 864.941253][ C1] ? import_iovec+0x7c/0xb0 [ 864.945753][ C1] ___sys_recvmsg+0x1af/0x4f0 [ 864.950411][ C1] ? memcpy+0x56/0x70 [ 864.954577][ C1] ? __sys_recvmsg+0x250/0x250 [ 864.959428][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 864.965596][ C1] ? do_recvmmsg+0x51a/0x780 [ 864.970193][ C1] do_recvmmsg+0x344/0x780 [ 864.974634][ C1] ? do_user_addr_fault+0xa64/0x1180 [ 864.979929][ C1] ? __sys_recvmmsg+0x280/0x280 [ 864.984964][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 864.989991][ C1] ? do_recvmmsg+0x780/0x780 [ 864.994595][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 865.000662][ C1] x64_sys_call+0x297/0x9a0 [ 865.005176][ C1] do_syscall_64+0x4c/0xa0 [ 865.009587][ C1] ? clear_bhb_loop+0x50/0xa0 [ 865.014270][ C1] ? clear_bhb_loop+0x50/0xa0 [ 865.018948][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 865.024845][ C1] RIP: 0033:0x7fc5d27c5929 [ 865.029255][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.048876][ C1] RSP: 002b:00007fc5d0e0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 865.057353][ C1] RAX: ffffffffffffffda RBX: 00007fc5d29ed080 RCX: 00007fc5d27c5929 [ 865.065416][ C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000006 [ 865.073409][ C1] RBP: 00007fc5d2847b39 R08: 0000000000000000 R09: 0000000000000000 [ 865.081398][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 865.089477][ C1] R13: 0000000000000001 R14: 00007fc5d29ed080 R15: 00007fff24bca148 [ 865.097462][ C1] [ 865.100507][ C1] ---[ end trace b9d027323c908a5c ]--- [ 865.105995][ C1] ------------[ cut here ]------------ [ 865.111453][ C1] refcount_t: underflow; use-after-free. [ 865.117125][ C1] WARNING: CPU: 1 PID: 17367 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 865.126600][ C1] Modules linked in: [ 865.130485][ C1] CPU: 1 PID: 17367 Comm: syz.9.5407 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 865.141859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.151945][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 865.158093][ C1] Code: 04 01 48 c7 c7 e0 f1 62 85 e8 3c ae 50 02 0f 0b eb c3 e8 e3 c8 1c ff c6 05 ef ef 99 04 01 48 c7 c7 40 f2 62 85 e8 20 ae 50 02 <0f> 0b eb a7 e8 c7 c8 1c ff c6 05 d0 ef 99 04 01 48 c7 c7 80 f1 62 [ 865.177909][ C1] RSP: 0018:ffffc900001d09e0 EFLAGS: 00010246 [ 865.183998][ C1] RAX: d6e0b65ae13a3b00 RBX: 0000000000000003 RCX: ffff888115c54f00 [ 865.192064][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 865.200033][ C1] RBP: ffffc900001d09f0 R08: dffffc0000000000 R09: ffffed103ee24e93 [ 865.208095][ C1] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: ffff888117141208 [ 865.216106][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 865.224720][ C1] FS: 00007fc5d0e0d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 865.233663][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.240230][ C1] CR2: 000020000054e030 CR3: 000000012d326000 CR4: 00000000003506a0 [ 865.248217][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 865.256205][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 865.264196][ C1] Call Trace: [ 865.267463][ C1] [ 865.270285][ C1] tipc_crypto_xmit+0x1a82/0x2400 [ 865.275330][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 865.280527][ C1] ? __copy_skb_header+0x437/0x600 [ 865.285644][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 865.290843][ C1] ? __skb_clone+0x47a/0x790 [ 865.295439][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 865.300480][ C1] ? skb_clone+0x202/0x360 [ 865.304910][ C1] tipc_disc_timeout+0x6a2/0x830 [ 865.309842][ C1] ? update_rq_clock+0x1eb/0x580 [ 865.314883][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 865.320085][ C1] ? __kasan_check_write+0x14/0x20 [ 865.325220][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 865.330904][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 865.336116][ C1] call_timer_fn+0x38/0x290 [ 865.340614][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 865.345819][ C1] __run_timers+0x639/0x9a0 [ 865.350328][ C1] ? calc_index+0x200/0x200 [ 865.354845][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 865.359691][ C1] run_timer_softirq+0x6a/0xf0 [ 865.364462][ C1] handle_softirqs+0x250/0x560 [ 865.369223][ C1] __irq_exit_rcu+0x52/0xf0 [ 865.375567][ C1] irq_exit_rcu+0x9/0x10 [ 865.379804][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 865.385446][ C1] [ 865.388366][ C1] [ 865.391824][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 865.397806][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x60 [ 865.403969][ C1] Code: 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 83 fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 <8b> 89 3c 0b 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d c3 66 [ 865.423594][ C1] RSP: 0018:ffffc90000ebf5f0 EFLAGS: 00000246 [ 865.429660][ C1] RAX: ffffffff84178375 RBX: ffffc90000ebf7a0 RCX: ffff888115c54f00 [ 865.437631][ C1] RDX: ffffc9000e53b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 865.445618][ C1] RBP: ffffc90000ebf5f0 R08: dffffc0000000000 R09: ffffed10223b6882 [ 865.453594][ C1] R10: ffffed10223b6882 R11: 1ffff110223b6881 R12: ffffc90000ebf7a8 [ 865.461578][ C1] R13: dffffc0000000000 R14: ffffc90000ebf7a8 R15: ffff888111db4408 [ 865.469667][ C1] ? scm_recv+0x3a5/0x540 [ 865.474015][ C1] scm_recv+0x3a5/0x540 [ 865.478170][ C1] ? __unix_dgram_recvmsg+0xd50/0xd50 [ 865.483549][ C1] ? skb_copy_datagram_iter+0x150/0x150 [ 865.489094][ C1] ? sock_load_diag_module+0x140/0x140 [ 865.494648][ C1] ? pid_vnr+0xf9/0x1c0 [ 865.498801][ C1] __unix_dgram_recvmsg+0x9bd/0xd50 [ 865.504105][ C1] ? unix_unhash+0x10/0x10 [ 865.508528][ C1] ? exc_page_fault+0x5e/0xb0 [ 865.513217][ C1] unix_dgram_recvmsg+0xc2/0xe0 [ 865.518156][ C1] ? unix_dgram_sendmsg+0x1880/0x1880 [ 865.523534][ C1] ____sys_recvmsg+0x291/0x580 [ 865.528380][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 865.533413][ C1] ? memset+0x35/0x40 [ 865.537412][ C1] ? import_iovec+0x7c/0xb0 [ 865.541917][ C1] ___sys_recvmsg+0x1af/0x4f0 [ 865.546591][ C1] ? memcpy+0x56/0x70 [ 865.550651][ C1] ? __sys_recvmsg+0x250/0x250 [ 865.555441][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 865.561610][ C1] ? do_recvmmsg+0x51a/0x780 [ 865.566245][ C1] do_recvmmsg+0x344/0x780 [ 865.570671][ C1] ? do_user_addr_fault+0xa64/0x1180 [ 865.575964][ C1] ? __sys_recvmmsg+0x280/0x280 [ 865.580816][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 865.586076][ C1] ? do_recvmmsg+0x780/0x780 [ 865.590702][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 865.596861][ C1] x64_sys_call+0x297/0x9a0 [ 865.601398][ C1] do_syscall_64+0x4c/0xa0 [ 865.605811][ C1] ? clear_bhb_loop+0x50/0xa0 [ 865.610471][ C1] ? clear_bhb_loop+0x50/0xa0 [ 865.615157][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 865.621181][ C1] RIP: 0033:0x7fc5d27c5929 [ 865.625620][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.645759][ C1] RSP: 002b:00007fc5d0e0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 865.654217][ C1] RAX: ffffffffffffffda RBX: 00007fc5d29ed080 RCX: 00007fc5d27c5929 [ 865.662195][ C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000006 [ 865.670166][ C1] RBP: 00007fc5d2847b39 R08: 0000000000000000 R09: 0000000000000000 [ 865.678184][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 865.686181][ C1] R13: 0000000000000001 R14: 00007fc5d29ed080 R15: 00007fff24bca148 [ 865.694174][ C1] [ 865.697192][ C1] ---[ end trace b9d027323c908a5d ]--- [ 865.702875][ C1] ------------[ cut here ]------------ [ 865.708332][ C1] refcount_t: saturated; leaking memory. [ 865.714051][ C1] WARNING: CPU: 1 PID: 17367 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 865.723548][ C1] Modules linked in: [ 865.727610][ C1] CPU: 1 PID: 17367 Comm: syz.9.5407 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 865.739012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.749117][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 865.755289][ C1] Code: 04 01 48 c7 c7 80 f1 62 85 e8 04 ae 50 02 0f 0b eb 8b e8 ab c8 1c ff c6 05 b5 ef 99 04 01 48 c7 c7 80 f1 62 85 e8 e8 ad 50 02 <0f> 0b e9 6c ff ff ff e8 8c c8 1c ff c6 05 9a ef 99 04 01 48 c7 c7 [ 865.774911][ C1] RSP: 0018:ffffc900001d09e0 EFLAGS: 00010246 [ 865.780983][ C1] RAX: d6e0b65ae13a3b00 RBX: 0000000000000001 RCX: ffff888115c54f00 [ 865.789231][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 865.797483][ C1] RBP: ffffc900001d09f0 R08: dffffc0000000000 R09: fffff5200003a089 [ 865.805489][ C1] R10: fffff5200003a089 R11: 1ffff9200003a088 R12: ffff888117141208 [ 865.813501][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc900001d0ba0 [ 865.821784][ C1] FS: 00007fc5d0e0d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 865.830711][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.837401][ C1] CR2: 000020000054e030 CR3: 000000012d326000 CR4: 00000000003506a0 [ 865.845478][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 865.853569][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 865.861573][ C1] Call Trace: [ 865.864835][ C1] [ 865.867696][ C1] tipc_crypto_xmit+0x1938/0x2400 [ 865.872755][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 865.877970][ C1] ? __copy_skb_header+0x437/0x600 [ 865.883110][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 865.888321][ C1] ? __skb_clone+0x47a/0x790 [ 865.892951][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 865.897992][ C1] ? skb_clone+0x202/0x360 [ 865.902508][ C1] tipc_disc_timeout+0x6a2/0x830 [ 865.907849][ C1] ? irqtime_account_irq+0xbe/0x390 [ 865.913070][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 865.918268][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 865.923385][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 865.928686][ C1] call_timer_fn+0x38/0x290 [ 865.933206][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 865.938404][ C1] __run_timers+0x639/0x9a0 [ 865.942917][ C1] ? calc_index+0x200/0x200 [ 865.947419][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 865.952278][ C1] run_timer_softirq+0x6a/0xf0 [ 865.957041][ C1] handle_softirqs+0x250/0x560 [ 865.961811][ C1] __irq_exit_rcu+0x52/0xf0 [ 865.966316][ C1] irq_exit_rcu+0x9/0x10 [ 865.970622][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 865.976262][ C1] [ 865.979181][ C1] [ 865.982176][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 865.988299][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x60 [ 865.994673][ C1] Code: 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 00 74 2c 8b 91 38 0b 00 00 83 fa 02 75 21 48 8b 91 40 0b 00 00 48 8b 32 48 8d 7e 01 <8b> 89 3c 0b 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 5d c3 66 [ 866.014305][ C1] RSP: 0018:ffffc90000ebf5f0 EFLAGS: 00000246 [ 866.020366][ C1] RAX: ffffffff84178375 RBX: ffffc90000ebf7a0 RCX: ffff888115c54f00 [ 866.028344][ C1] RDX: ffffc9000e53b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 866.036330][ C1] RBP: ffffc90000ebf5f0 R08: dffffc0000000000 R09: ffffed10223b6882 [ 866.044313][ C1] R10: ffffed10223b6882 R11: 1ffff110223b6881 R12: ffffc90000ebf7a8 [ 866.052313][ C1] R13: dffffc0000000000 R14: ffffc90000ebf7a8 R15: ffff888111db4408 [ 866.060444][ C1] ? scm_recv+0x3a5/0x540 [ 866.064781][ C1] scm_recv+0x3a5/0x540 [ 866.068933][ C1] ? __unix_dgram_recvmsg+0xd50/0xd50 [ 866.074338][ C1] ? skb_copy_datagram_iter+0x150/0x150 [ 866.080330][ C1] ? sock_load_diag_module+0x140/0x140 [ 866.085796][ C1] ? pid_vnr+0xf9/0x1c0 [ 866.089944][ C1] __unix_dgram_recvmsg+0x9bd/0xd50 [ 866.095156][ C1] ? unix_unhash+0x10/0x10 [ 866.099586][ C1] ? exc_page_fault+0x5e/0xb0 [ 866.104293][ C1] unix_dgram_recvmsg+0xc2/0xe0 [ 866.109144][ C1] ? unix_dgram_sendmsg+0x1880/0x1880 [ 866.114525][ C1] ____sys_recvmsg+0x291/0x580 [ 866.119288][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 866.124322][ C1] ? memset+0x35/0x40 [ 866.128307][ C1] ? import_iovec+0x7c/0xb0 [ 866.132907][ C1] ___sys_recvmsg+0x1af/0x4f0 [ 866.137576][ C1] ? memcpy+0x56/0x70 [ 866.141562][ C1] ? __sys_recvmsg+0x250/0x250 [ 866.146324][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 866.152498][ C1] ? do_recvmmsg+0x51a/0x780 [ 866.157084][ C1] do_recvmmsg+0x344/0x780 [ 866.161578][ C1] ? do_user_addr_fault+0xa64/0x1180 [ 866.166872][ C1] ? __sys_recvmmsg+0x280/0x280 [ 866.171726][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 866.176747][ C1] ? do_recvmmsg+0x780/0x780 [ 866.181340][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 866.187422][ C1] x64_sys_call+0x297/0x9a0 [ 866.192044][ C1] do_syscall_64+0x4c/0xa0 [ 866.196457][ C1] ? clear_bhb_loop+0x50/0xa0 [ 866.201156][ C1] ? clear_bhb_loop+0x50/0xa0 [ 866.205860][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 866.211755][ C1] RIP: 0033:0x7fc5d27c5929 [ 866.216165][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.235868][ C1] RSP: 002b:00007fc5d0e0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 866.244571][ C1] RAX: ffffffffffffffda RBX: 00007fc5d29ed080 RCX: 00007fc5d27c5929 [ 866.252570][ C1] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000006 [ 866.260544][ C1] RBP: 00007fc5d2847b39 R08: 0000000000000000 R09: 0000000000000000 [ 866.268548][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 866.276539][ C1] R13: 0000000000000001 R14: 00007fc5d29ed080 R15: 00007fff24bca148 [ 866.284631][ C1] [ 866.287645][ C1] ---[ end trace b9d027323c908a5e ]--- [ 866.423637][T17357] device veth0_vlan entered promiscuous mode [ 866.437261][T17357] device veth1_macvtap entered promiscuous mode [ 866.511941][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 866.522463][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 866.530087][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 866.547973][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 866.841920][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 866.850196][T16703] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.857273][T16703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.866535][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 866.875450][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 866.898360][T16703] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.905549][T16703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.916385][T17385] loop9: detected capacity change from 0 to 1024 [ 866.942329][T17385] EXT4-fs (loop9): Ignoring removed nobh option [ 866.952258][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 866.960255][T17385] EXT4-fs (loop9): Ignoring removed bh option [ 866.967410][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 866.975934][T17385] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 866.989498][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 866.998362][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 867.007186][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 867.015587][T17385] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 867.024433][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 867.033168][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 867.041485][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 867.049651][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 867.057962][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 867.066021][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 867.081301][T17380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5410'. [ 867.131731][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 867.141997][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 867.217574][T16759] tipc: Disabling bearer [ 867.235232][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 867.245256][T16759] tipc: Left network mode [ 867.677794][T16703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 867.886233][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5416'. [ 868.391726][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5414'. [ 868.406209][T17396] bridge_slave_1: default FDB implementation only supports local addresses [ 869.320814][T17411] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5417'. [ 869.353084][T17394] loop2: detected capacity change from 0 to 40427 [ 869.421115][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 869.421187][ T30] audit: type=1326 audit(1751300032.030:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 869.465473][T17426] loop0: detected capacity change from 0 to 256 [ 869.479405][T17394] F2FS-fs (loop2): fault_injection options not supported [ 869.488908][T16759] ------------[ cut here ]------------ [ 869.510340][T17426] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 869.602731][T16759] refcount_t: saturated; leaking memory. [ 869.662276][T16759] WARNING: CPU: 1 PID: 16759 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 869.752039][T17394] F2FS-fs (loop2): fault_type options not supported [ 869.824132][T16759] Modules linked in: [ 869.846972][T17394] F2FS-fs (loop2): invalid crc value [ 869.872826][T16759] CPU: 1 PID: 16759 Comm: kworker/u4:104 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 869.925462][ T30] audit: type=1326 audit(1751300032.120:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 869.999496][T16759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 870.012072][T16759] Workqueue: netns cleanup_net [ 870.022876][T17394] F2FS-fs (loop2): Found nat_bits in checkpoint [ 870.033449][T16759] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 870.046741][ T30] audit: type=1326 audit(1751300032.180:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.094137][T16759] Code: 04 01 48 c7 c7 40 f2 62 85 e8 20 ae 50 02 0f 0b eb a7 e8 c7 c8 1c ff c6 05 d0 ef 99 04 01 48 c7 c7 80 f1 62 85 e8 04 ae 50 02 <0f> 0b eb 8b e8 ab c8 1c ff c6 05 b5 ef 99 04 01 48 c7 c7 80 f1 62 [ 870.137204][T16759] RSP: 0000:ffffc9000159f7c0 EFLAGS: 00010246 [ 870.144710][T16759] RAX: 8f76427915ab6e00 RBX: 0000000000000000 RCX: ffff888138e1a780 [ 870.152834][T16759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.160872][T16759] RBP: ffffc9000159f7d0 R08: dffffc0000000000 R09: ffffed103ee265e8 [ 870.168915][T16759] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: 1ffff920002b3f04 [ 870.177001][T16759] R13: ffff88811fa6608c R14: 0000000000000000 R15: 0000000000000cc0 [ 870.185055][T16759] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 870.194327][T16759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 870.200923][T16759] CR2: 00007fc5d29eebac CR3: 000000000660f000 CR4: 00000000003506b0 [ 870.208963][T16759] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 870.217045][T16759] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 870.225486][T16759] Call Trace: [ 870.234455][T16759] [ 870.237456][T16759] nf_nat_masq_schedule+0x439/0x4c0 [ 870.242861][ T30] audit: type=1326 audit(1751300032.180:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.268074][T16759] ? nf_nat_masq_schedule+0x4c0/0x4c0 [ 870.274116][T16759] ? masq_device_event+0xd0/0xd0 [ 870.279646][T16759] ? nfqnl_rcv_dev_event+0x441/0x470 [ 870.292805][ T30] audit: type=1326 audit(1751300032.190:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.320923][ T30] audit: type=1326 audit(1751300032.200:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.473552][T16759] ? __kasan_check_read+0x11/0x20 [ 870.489687][T17439] loop0: detected capacity change from 0 to 512 [ 870.497236][T16759] masq_device_event+0x9b/0xd0 [ 870.505091][T16759] raw_notifier_call_chain+0x90/0x100 [ 870.544493][T17439] EXT4-fs (loop0): Test dummy encryption mode enabled [ 870.564413][T16759] dev_close_many+0x32d/0x4d0 [ 870.569145][T16759] ? __dev_open+0x4c0/0x4c0 [ 870.577416][T17439] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 870.591302][ T30] audit: type=1326 audit(1751300032.200:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.615993][T16759] ? finish_task_switch+0x16b/0x780 [ 870.625158][T17439] EXT4-fs (loop0): Unrecognized mount option "subj_user=sched_switch" or missing value [ 870.641088][T16759] ? __kasan_check_read+0x11/0x20 [ 870.651195][T16759] unregister_netdevice_many+0x44c/0x1990 [ 870.661236][T16759] ? __cond_resched+0xb0/0xb0 [ 870.665937][T16759] ? alloc_netdev_mqs+0xc90/0xc90 [ 870.691428][ T30] audit: type=1326 audit(1751300032.200:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.719457][T16759] ? irqentry_exit+0x37/0x40 [ 870.729280][T16759] ? sysvec_reschedule_ipi+0x78/0x80 [ 870.737298][T16759] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 870.743241][T16759] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 870.748695][ T30] audit: type=1326 audit(1751300032.210:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.773394][T16759] ? irqentry_exit+0x37/0x40 [ 870.778002][T16759] ? sysvec_reschedule_ipi+0x78/0x80 [ 870.784730][T16759] ? ip6gre_init_net+0x340/0x340 [ 870.789690][T16759] ? ip6gre_init_net+0x340/0x340 [ 870.791454][ T30] audit: type=1326 audit(1751300032.210:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17422 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b8f29929 code=0x7ffc0000 [ 870.795165][T16759] cleanup_net+0x602/0xad0 [ 870.822701][T16759] ? ops_init+0x4a0/0x4a0 [ 870.827020][T16759] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 870.832522][T16759] process_one_work+0x6be/0xba0 [ 870.837401][T16759] worker_thread+0xa59/0x1200 [ 870.842171][T16759] ? __kthread_parkme+0xac/0x200 [ 870.847116][T16759] kthread+0x411/0x500 [ 870.851195][T16759] ? worker_clr_flags+0x190/0x190 [ 870.856233][T16759] ? kthread_blkcg+0xd0/0xd0 [ 870.861041][T16759] ret_from_fork+0x1f/0x30 [ 870.865450][T16759] [ 870.868446][T16759] ---[ end trace b9d027323c908a5f ]--- [ 870.896361][T17447] netlink: 'syz.2.5427': attribute type 27 has an invalid length. [ 870.942760][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.950112][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.567289][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.574422][T17448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.647241][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.654370][T17448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.839884][T17448] device veth0_vlan left promiscuous mode [ 871.846343][T17448] device veth0_vlan entered promiscuous mode [ 871.853912][T17448] device veth1_macvtap left promiscuous mode [ 871.860942][T17448] device veth1_macvtap entered promiscuous mode [ 871.880426][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 871.888666][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 871.911494][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 871.930734][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 871.949479][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 871.960680][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 871.969614][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 871.978495][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 871.987120][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 871.995799][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 872.004452][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 872.013029][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 872.021481][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 872.029737][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 872.038501][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 872.046962][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 872.055525][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 872.063984][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 872.072406][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 872.086091][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5430'. [ 872.245094][T17475] loop0: detected capacity change from 0 to 512 [ 872.539366][T17479] loop9: detected capacity change from 0 to 1024 [ 874.571420][T17479] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 874.589365][T17475] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 874.677260][T17475] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.692480][T16759] bridge0: port 3(gretap0) entered disabled state [ 874.710509][T16759] bridge0: port 3(gretap0) entered disabled state [ 874.747511][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 874.747525][ T30] audit: type=1326 audit(1751300037.360:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17474 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 874.901025][ T30] audit: type=1326 audit(1751300037.440:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17474 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 874.934081][ T30] audit: type=1326 audit(1751300037.440:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17474 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 874.963523][ T30] audit: type=1326 audit(1751300037.440:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17474 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 874.987509][ T30] audit: type=1326 audit(1751300037.450:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17474 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 875.001840][T17499] 9pnet: Insufficient options for proto=fd [ 875.011382][ T30] audit: type=1326 audit(1751300037.450:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17474 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 875.206657][T16759] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.271604][ T30] audit: type=1326 audit(1751300037.450:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17474 comm="syz.0.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 875.315557][T16759] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.805545][ T30] audit: type=1326 audit(1751300037.780:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17497 comm="syz.0.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 875.863207][T17505] 9pnet: Insufficient options for proto=fd [ 875.916391][ T30] audit: type=1326 audit(1751300037.780:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17497 comm="syz.0.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 875.940081][ T30] audit: type=1326 audit(1751300038.080:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17497 comm="syz.0.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f4a3c41a929 code=0x7ffc0000 [ 876.243514][T17491] loop2: detected capacity change from 0 to 40427 [ 876.411293][T17491] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 876.525058][T17491] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 876.841952][T17491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 876.934223][T17491] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 876.952909][T17491] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 876.963574][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5442'. [ 876.972982][T17509] bridge_slave_1: default FDB implementation only supports local addresses [ 877.174474][T17525] syz.5.5444[17525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.174840][T17525] syz.5.5444[17525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.238556][T17525] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 877.258723][T17525] netlink: 20 bytes leftover after parsing attributes in process `wg1'. [ 877.267302][T17525] netlink: 20 bytes leftover after parsing attributes in process `wg1'. [ 878.043350][T17527] 9pnet: Insufficient options for proto=fd [ 878.084352][T17531] 9pnet: Insufficient options for proto=fd [ 878.363505][T17544] loop2: detected capacity change from 0 to 256 [ 878.462460][T17544] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 879.358207][T17558] loop0: detected capacity change from 0 to 256 [ 879.591047][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5454'. [ 879.626499][ T1645] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 882.525553][T17558] FAT-fs (loop0): Directory bread(block 64) failed [ 882.532239][T17558] FAT-fs (loop0): Directory bread(block 65) failed [ 882.538775][T17558] FAT-fs (loop0): Directory bread(block 66) failed [ 882.545315][T17558] FAT-fs (loop0): Directory bread(block 67) failed [ 882.552531][T17558] FAT-fs (loop0): Directory bread(block 68) failed [ 882.559076][T17558] FAT-fs (loop0): Directory bread(block 69) failed [ 882.565691][T17558] FAT-fs (loop0): Directory bread(block 70) failed [ 882.572299][T17558] FAT-fs (loop0): Directory bread(block 71) failed [ 882.578874][T17558] FAT-fs (loop0): Directory bread(block 72) failed [ 882.585455][T17558] FAT-fs (loop0): Directory bread(block 73) failed [ 882.843315][T17570] tipc: MTU too low for tipc bearer [ 882.880827][T17575] 9pnet: Insufficient options for proto=fd [ 882.899396][T17562] loop0: detected capacity change from 0 to 40427 [ 882.920886][T17562] F2FS-fs (loop0): invalid crc value [ 882.940085][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5464'. [ 882.945011][T17562] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 882.981695][T17562] F2FS-fs (loop0): Start checkpoint disabled! [ 882.988352][T17562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 883.553233][T17594] attempt to access beyond end of device [ 883.553233][T17594] loop0: rw=10241, want=45104, limit=40427 [ 883.776198][ T1645] usb 10-1: device descriptor read/64, error -71 [ 883.776246][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5458'. [ 884.031163][T16677] attempt to access beyond end of device [ 884.031163][T16677] loop0: rw=1, want=45168, limit=40427 [ 884.101277][ T3268] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 884.108924][T16677] attempt to access beyond end of device [ 884.108924][T16677] loop0: rw=1, want=45104, limit=40427 [ 884.121066][T16677] attempt to access beyond end of device [ 884.121066][T16677] loop0: rw=2049, want=45176, limit=40427 [ 884.834251][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5470'. [ 884.843689][T17610] bridge_slave_1: default FDB implementation only supports local addresses [ 885.543084][T17589] UDC core: couldn't find an available UDC or it's busy: -16 [ 885.581358][T17589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 885.610843][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 885.610859][ T30] audit: type=1400 audit(1751300048.220:5270): avc: denied { remount } for pid=17588 comm="syz.2.5465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 885.639794][T17618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5468'. [ 885.649544][T17589] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 885.747430][T17589] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 885.759635][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5468'. [ 886.063497][T17634] loop2: detected capacity change from 0 to 512 [ 886.072161][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5475'. [ 886.141029][T17648] 9pnet: Insufficient options for proto=fd [ 886.149581][ T30] audit: type=1400 audit(1751300048.760:5271): avc: denied { setopt } for pid=17642 comm="syz.9.5477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 886.170607][T17634] EXT4-fs (loop2): too many log groups per flexible block group [ 886.187420][T17634] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 886.406803][T17634] EXT4-fs (loop2): mount failed [ 886.418254][ T30] audit: type=1400 audit(1751300049.030:5272): avc: denied { nlmsg_read } for pid=17647 comm="syz.0.5479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 886.442572][ T30] audit: type=1400 audit(1751300049.050:5273): avc: denied { read write } for pid=17642 comm="syz.9.5477" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 886.467953][ T30] audit: type=1400 audit(1751300049.050:5274): avc: denied { open } for pid=17642 comm="syz.9.5477" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 886.651070][ T3268] usb 3-1: unable to get BOS descriptor or descriptor too short [ 886.711071][ T3268] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 886.718701][ T3268] usb 3-1: can't read configurations, error -71 [ 886.741099][T11739] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 887.341492][ T30] audit: type=1326 audit(1751300049.950:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802b8c929 code=0x7ffc0000 [ 887.443317][ T30] audit: type=1326 audit(1751300049.990:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8802b8c929 code=0x7ffc0000 [ 887.815866][ T30] audit: type=1326 audit(1751300049.990:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802b8c929 code=0x7ffc0000 [ 887.848097][ T30] audit: type=1326 audit(1751300050.000:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8802b8c929 code=0x7ffc0000 [ 887.855803][T11739] usb 1-1: device descriptor read/64, error -71 [ 887.958433][T17673] loop2: detected capacity change from 0 to 256 [ 888.015620][T17673] FAT-fs (loop2): Directory bread(block 64) failed [ 888.022681][T17673] FAT-fs (loop2): Directory bread(block 65) failed [ 888.029593][T17673] FAT-fs (loop2): Directory bread(block 66) failed [ 888.036240][T17673] FAT-fs (loop2): Directory bread(block 67) failed [ 888.043221][T17673] FAT-fs (loop2): Directory bread(block 68) failed [ 888.050180][T17673] FAT-fs (loop2): Directory bread(block 69) failed [ 888.056979][T17673] FAT-fs (loop2): Directory bread(block 70) failed [ 888.063661][T17673] FAT-fs (loop2): Directory bread(block 71) failed [ 888.070606][T17673] FAT-fs (loop2): Directory bread(block 72) failed [ 888.077193][T17673] FAT-fs (loop2): Directory bread(block 73) failed [ 888.632719][ T30] audit: type=1326 audit(1751300050.000:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802b8c929 code=0x7ffc0000 [ 888.953117][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5488'. [ 889.035982][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5486'. [ 889.191083][T11739] usb 1-1: device descriptor read/64, error -71 [ 889.372889][T17695] 9pnet: Insufficient options for proto=fd [ 889.631048][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 890.009292][T17693] SELinux: security_context_str_to_sid(7$kj+fjڗ~ʥdӛ ڍNvzZ3&+fZ'+ kkW7Nzde_t3߱.>'o޸zz;7_KŠ=JV.Uk\hTL!_xh{o_ ?acRw[=!^?D) failed for (dev ?, type ?) errno=-22 [ 890.037481][T17693] SELinux: security_context_str_to_sid(7$kj+fjڗ~ʥdӛ ڍNvzZ3&+fZ'+ kkW7Nzde_t3߱.>'o޸zz;7_KŠ=JV.Uk\hTL!_xh{o_ ?acRw[=!^?D) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 891.233063][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5499'. [ 891.358569][T17715] loop0: detected capacity change from 0 to 40427 [ 891.375690][T17715] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 891.402981][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 891.403007][ T30] audit: type=1326 audit(1751300054.020:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.441929][T17715] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 891.451051][ T30] audit: type=1326 audit(1751300054.020:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.477352][ T30] audit: type=1326 audit(1751300054.050:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.477897][T17715] F2FS-fs (loop0): invalid crc value [ 891.514737][ T30] audit: type=1326 audit(1751300054.050:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.539827][ T30] audit: type=1326 audit(1751300054.050:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.564974][ T30] audit: type=1326 audit(1751300054.050:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.589148][ T30] audit: type=1326 audit(1751300054.050:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.613047][ T30] audit: type=1326 audit(1751300054.050:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.614028][T17715] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 891.637041][ T30] audit: type=1326 audit(1751300054.050:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.680352][T17715] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 891.692464][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5504'. [ 891.791278][ T30] audit: type=1326 audit(1751300054.050:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf19a8929 code=0x7ffc0000 [ 891.937967][T17748] 9pnet: Insufficient options for proto=fd [ 891.997332][T17715] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 892.010481][T17715] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 892.549356][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5510'. [ 892.581881][T17762] loop2: detected capacity change from 0 to 2048 [ 892.623602][T17762] loop2: p1 < > p4 [ 892.628237][T17762] loop2: p4 size 8388608 extends beyond EOD, truncated [ 893.020082][T17775] loop0: detected capacity change from 0 to 16 [ 893.261424][T17775] erofs: (device loop0): mounted with root inode @ nid 36. [ 893.367320][T13616] udevd[13616]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 893.567447][T17781] sch_fq: defrate 0 ignored. [ 893.735858][T17783] loop2: detected capacity change from 0 to 128 [ 893.940832][T17796] overlayfs: bad mount option "redirect_dir=on:/" [ 894.053710][T17805] 9pnet: Insufficient options for proto=fd [ 894.055979][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5521'. [ 894.125945][T17813] device sit0 entered promiscuous mode [ 894.133442][T17813] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5524'. [ 894.247411][T17816] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5522'. [ 894.938016][T17838] sch_fq: defrate 0 ignored. [ 895.275879][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5534'. [ 895.301725][T17852] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5535'. [ 895.331641][T17854] loop0: detected capacity change from 0 to 512 [ 895.405949][T17854] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 895.416669][T17854] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.5536: iget: bogus i_mode (5) [ 895.428248][T17854] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.5536: couldn't read orphan inode 15 (err -117) [ 895.440596][T17854] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 895.452584][T17854] ext2 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.489473][T17864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 895.496892][T17864] IPv6: NLM_F_CREATE should be set when creating new route [ 895.504182][T17864] IPv6: NLM_F_CREATE should be set when creating new route [ 895.530482][T17867] SELinux: ebitmap: truncated map [ 895.542662][T17867] SELinux: failed to load policy [ 895.550521][T17854] netem: change failed [ 895.565199][T17875] 9pnet: Insufficient options for proto=fd [ 895.608822][ T6659] kernel write not supported for file /uinput (pid: 6659 comm: kworker/0:9) [ 895.619206][T17877] input: syz0 as /devices/virtual/input/input25 [ 895.770296][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5545'. [ 896.141075][ T347] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 896.213763][T17906] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 896.225148][T17906] FAT-fs (loop11): unable to read boot sector [ 896.241126][ T9347] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 896.293600][T17908] 9pnet: Insufficient options for proto=fd [ 896.391043][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 896.531123][ T347] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 896.539150][ T347] usb 1-1: config 0 has no interface number 0 [ 896.545265][ T347] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.556135][ T347] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.565885][ T347] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 896.575014][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.584278][ T347] usb 1-1: config 0 descriptor?? [ 896.611110][ T9347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.622210][ T9347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.738421][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5558'. [ 896.801113][ T9347] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 896.810815][ T9347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.819224][ T9347] usb 3-1: Product: syz [ 896.823638][ T9347] usb 3-1: Manufacturer: syz [ 896.828329][ T9347] usb 3-1: SerialNumber: syz [ 896.838714][ T9347] usb 3-1: config 0 descriptor?? [ 896.883128][ T9347] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 896.889941][ T9347] usb 3-1: No valid video chain found. [ 897.083900][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 897.083915][ T30] audit: type=1400 audit(1751300059.700:5473): avc: denied { bind } for pid=17901 comm="syz.2.5550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 897.116374][ T30] audit: type=1400 audit(1751300059.730:5474): avc: denied { read } for pid=17901 comm="syz.2.5550" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 897.140888][ T6659] usb 3-1: USB disconnect, device number 13 [ 897.147022][ T30] audit: type=1400 audit(1751300059.730:5475): avc: denied { open } for pid=17901 comm="syz.2.5550" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 897.281272][ T347] uclogic 0003:28BD:0071.0019: pen parameters not found [ 897.288619][ T347] uclogic 0003:28BD:0071.0019: interface is invalid, ignoring [ 897.335115][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.343123][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.352180][T17932] device bridge_slave_0 entered promiscuous mode [ 897.365271][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.372364][T17932] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.379898][T17932] device bridge_slave_1 entered promiscuous mode [ 897.422508][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5562'. [ 897.435899][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5562'. [ 897.450906][T17938] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5562'. [ 897.477313][T17940] loop9: detected capacity change from 0 to 1024 [ 897.483575][ T9347] usb 1-1: USB disconnect, device number 8 [ 897.511842][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.519022][T17932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.522070][T17940] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 897.526482][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.544333][T17932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.557470][ T30] audit: type=1326 audit(1751300060.170:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17939 comm="syz.9.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d27c5929 code=0x7ffc0000 [ 897.593337][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 897.602196][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.609685][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.626248][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 897.635067][ T30] audit: type=1326 audit(1751300060.170:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17939 comm="syz.9.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fc5d27c5929 code=0x7ffc0000 [ 897.641905][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.659324][ T30] audit: type=1326 audit(1751300060.170:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17939 comm="syz.9.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d27c5929 code=0x7ffc0000 [ 897.665632][ T4094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.689983][ T30] audit: type=1326 audit(1751300060.170:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17939 comm="syz.9.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fc5d27c5929 code=0x7ffc0000 [ 897.702176][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 897.722708][ T30] audit: type=1326 audit(1751300060.170:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17939 comm="syz.9.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d27c5929 code=0x7ffc0000 [ 897.733748][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.756018][ T30] audit: type=1326 audit(1751300060.170:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17939 comm="syz.9.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc5d27c5929 code=0x7ffc0000 [ 897.758371][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.782201][ T30] audit: type=1326 audit(1751300060.170:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17939 comm="syz.9.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc5d27c5963 code=0x7ffc0000 [ 897.804969][T17944] loop2: detected capacity change from 0 to 512 [ 897.821310][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 897.832404][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 897.855236][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 897.868115][T17944] EXT4-fs (loop2): Mount option "nojournal_checksum" incompatible with ext3 [ 897.919844][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 898.011668][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 898.019233][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 898.031421][T17932] device veth0_vlan entered promiscuous mode [ 898.044251][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 898.105434][T17950] 9pnet: Insufficient options for proto=fd [ 898.109262][T17932] device veth1_macvtap entered promiscuous mode [ 898.776540][T16759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 898.796054][T16759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 900.113239][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 900.122478][T17969] device veth0 entered promiscuous mode [ 900.137353][T17961] loop2: detected capacity change from 0 to 40427 [ 900.141621][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5570'. [ 900.184884][T17961] F2FS-fs (loop2): Found nat_bits in checkpoint [ 900.207988][T17977] IPv4: Oversized IP packet from 127.202.26.0 [ 900.224226][T17977] sch_fq: defrate 0 ignored. [ 900.224975][T17961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 900.281029][ T9347] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 900.320261][T17982] attempt to access beyond end of device [ 900.320261][T17982] loop2: rw=2049, want=79912, limit=40427 [ 900.337652][T17982] attempt to access beyond end of device [ 900.337652][T17982] loop2: rw=2049, want=81920, limit=40427 [ 900.356620][T17982] attempt to access beyond end of device [ 900.356620][T17982] loop2: rw=2049, want=51200, limit=40427 [ 900.372793][T17982] attempt to access beyond end of device [ 900.372793][T17982] loop2: rw=2049, want=53248, limit=40427 [ 900.384591][T16677] ================================================================== [ 900.388806][T17982] attempt to access beyond end of device [ 900.388806][T17982] loop2: rw=2049, want=59392, limit=40427 [ 900.392766][T16677] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 900.392794][T16677] Read of size 4 at addr ffff88811fa6608c by task kworker/u4:40/16677 [ 900.392810][T16677] [ 900.409224][T17982] attempt to access beyond end of device [ 900.409224][T17982] loop2: rw=2049, want=61456, limit=40427 [ 900.411669][T16677] CPU: 1 PID: 16677 Comm: kworker/u4:40 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 900.411689][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.411701][T16677] Workqueue: netns cleanup_net [ 900.424793][T17982] attempt to access beyond end of device [ 900.424793][T17982] loop2: rw=2049, want=63504, limit=40427 [ 900.433380][T16677] [ 900.433389][T16677] Call Trace: [ 900.433396][T16677] [ 900.433404][T16677] __dump_stack+0x21/0x30 [ 900.433425][T16677] dump_stack_lvl+0xee/0x150 [ 900.433438][T16677] ? show_regs_print_info+0x20/0x20 [ 900.433450][T16677] ? load_image+0x3a0/0x3a0 [ 900.433469][T16677] ? ____kasan_slab_free+0x130/0x160 [ 900.452418][T17982] attempt to access beyond end of device [ 900.452418][T17982] loop2: rw=2049, want=65552, limit=40427 [ 900.455137][T16677] ? pde_put+0x14e/0x1a0 [ 900.455166][T16677] print_address_description+0x7f/0x2c0 [ 900.465292][T17982] attempt to access beyond end of device [ 900.465292][T17982] loop2: rw=2049, want=67608, limit=40427 [ 900.471086][T16677] ? tcp_metrics_flush_all+0xd3/0x210 [ 900.471112][T16677] kasan_report+0xf1/0x140 [ 900.471127][T16677] ? _raw_spin_lock_bh+0x8e/0xe0 [ 900.471142][T16677] ? tcp_metrics_flush_all+0xd3/0x210 [ 900.482012][T17982] attempt to access beyond end of device [ 900.482012][T17982] loop2: rw=2049, want=71120, limit=40427 [ 900.483941][T16677] kasan_check_range+0x280/0x290 [ 900.483969][T16677] __kasan_check_read+0x11/0x20 [ 900.521201][ T585] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 900.524399][T16677] tcp_metrics_flush_all+0xd3/0x210 [ 900.589641][T16677] ? tcp_net_metrics_init+0x150/0x150 [ 900.595126][T16677] tcp_net_metrics_exit_batch+0x10/0x20 [ 900.600754][T16677] cleanup_net+0x602/0xad0 [ 900.605153][T16677] ? ops_init+0x4a0/0x4a0 [ 900.609461][T16677] ? __schedule+0xb76/0x14c0 [ 900.614049][T16677] process_one_work+0x6be/0xba0 [ 900.618885][T16677] worker_thread+0xa59/0x1200 [ 900.623549][T16677] kthread+0x411/0x500 [ 900.627602][T16677] ? worker_clr_flags+0x190/0x190 [ 900.632610][T16677] ? kthread_blkcg+0xd0/0xd0 [ 900.637186][T16677] ret_from_fork+0x1f/0x30 [ 900.641589][T16677] [ 900.644773][T16677] [ 900.647091][T16677] Allocated by task 13078: [ 900.651500][T16677] __kasan_slab_alloc+0xbd/0xf0 [ 900.656347][T16677] slab_post_alloc_hook+0x4f/0x2b0 [ 900.661438][T16677] kmem_cache_alloc+0xf7/0x260 [ 900.666186][T16677] copy_net_ns+0x145/0x5c0 [ 900.670584][T16677] create_new_namespaces+0x3a2/0x660 [ 900.675847][T16677] unshare_nsproxy_namespaces+0x120/0x170 [ 900.681547][T16677] ksys_unshare+0x4ac/0x7b0 [ 900.686036][T16677] __x64_sys_unshare+0x38/0x40 [ 900.690901][T16677] x64_sys_call+0x442/0x9a0 [ 900.695419][T16677] do_syscall_64+0x4c/0xa0 [ 900.699834][T16677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.705969][T16677] [ 900.708280][T16677] Freed by task 16759: [ 900.712337][T16677] kasan_set_track+0x4a/0x70 [ 900.716928][T16677] kasan_set_free_info+0x23/0x40 [ 900.721860][T16677] ____kasan_slab_free+0x125/0x160 [ 900.726976][T16677] __kasan_slab_free+0x11/0x20 [ 900.732086][T16677] slab_free_freelist_hook+0xc2/0x190 [ 900.737446][T16677] kmem_cache_free+0x100/0x320 [ 900.742202][T16677] cleanup_net+0xa2d/0xad0 [ 900.746625][T16677] process_one_work+0x6be/0xba0 [ 900.751459][T16677] worker_thread+0xa59/0x1200 [ 900.756117][T16677] kthread+0x411/0x500 [ 900.760164][T16677] ret_from_fork+0x1f/0x30 [ 900.764567][T16677] [ 900.767005][T16677] The buggy address belongs to the object at ffff88811fa66000 [ 900.767005][T16677] which belongs to the cache net_namespace of size 3968 [ 900.781299][T16677] The buggy address is located 140 bytes inside of [ 900.781299][T16677] 3968-byte region [ffff88811fa66000, ffff88811fa66f80) [ 900.794862][T16677] The buggy address belongs to the page: [ 900.800500][T16677] page:ffffea00047e9800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811fa62000 pfn:0x11fa60 [ 900.812039][T16677] head:ffffea00047e9800 order:3 compound_mapcount:0 compound_pincount:0 [ 900.820454][T16677] flags: 0x4000000000010200(slab|head|zone=1) [ 900.826547][T16677] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881001c4d80 [ 900.835302][T16677] raw: ffff88811fa62000 0000000080080002 00000001ffffffff 0000000000000000 [ 900.843870][T16677] page dumped because: kasan: bad access detected [ 900.850274][T16677] page_owner tracks the page as allocated [ 900.856000][T16677] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 281, ts 22034070284, free_ts 21991614882 [ 900.875005][T16677] post_alloc_hook+0x192/0x1b0 [ 900.879861][T16677] prep_new_page+0x1c/0x110 [ 900.884362][T16677] get_page_from_freelist+0x2cc5/0x2d50 [ 900.889914][T16677] __alloc_pages+0x18f/0x440 [ 900.894614][T16677] new_slab+0xa1/0x4d0 [ 900.898683][T16677] ___slab_alloc+0x381/0x810 [ 900.903341][T16677] __slab_alloc+0x49/0x90 [ 900.907710][T16677] kmem_cache_alloc+0x138/0x260 [ 900.912596][T16677] copy_net_ns+0x145/0x5c0 [ 900.917011][T16677] create_new_namespaces+0x3a2/0x660 [ 900.922286][T16677] unshare_nsproxy_namespaces+0x120/0x170 [ 900.927992][T16677] ksys_unshare+0x4ac/0x7b0 [ 900.932493][T16677] __x64_sys_unshare+0x38/0x40 [ 900.937249][T16677] x64_sys_call+0x442/0x9a0 [ 900.941739][T16677] do_syscall_64+0x4c/0xa0 [ 900.946227][T16677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.952107][T16677] page last free stack trace: [ 900.956755][T16677] free_unref_page_prepare+0x542/0x550 [ 900.962195][T16677] free_unref_page+0xa2/0x550 [ 900.966852][T16677] free_compound_page+0x78/0xa0 [ 900.971684][T16677] __put_compound_page+0x77/0xb0 [ 900.976790][T16677] __put_page+0xbc/0xe0 [ 900.981185][T16677] skb_release_data+0x3d3/0xa10 [ 900.986022][T16677] __kfree_skb+0x50/0x70 [ 900.990244][T16677] tcp_recvmsg_locked+0x14ac/0x2640 [ 900.995424][T16677] tcp_recvmsg+0x21b/0x720 [ 900.999825][T16677] inet_recvmsg+0x134/0x470 [ 901.004314][T16677] sock_read_iter+0x2a2/0x340 [ 901.008975][T16677] vfs_read+0x68b/0xbe0 [ 901.013111][T16677] ksys_read+0x140/0x240 [ 901.017335][T16677] __x64_sys_read+0x7b/0x90 [ 901.021906][T16677] x64_sys_call+0x96d/0x9a0 [ 901.026394][T16677] do_syscall_64+0x4c/0xa0 [ 901.030794][T16677] [ 901.033100][T16677] Memory state around the buggy address: [ 901.038708][T16677] ffff88811fa65f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 901.046753][T16677] ffff88811fa66000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.054793][T16677] >ffff88811fa66080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.062833][T16677] ^ [ 901.067315][T16677] ffff88811fa66100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.075460][T16677] ffff88811fa66180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 901.083513][T16677] ================================================================== [ 901.091552][T16677] Disabling lock debugging due to kernel taint [ 901.331040][ T585] usb 1-1: Using ep0 maxpacket: 16 [ 901.341181][ T9347] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.352265][ T9347] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.362160][ T9347] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 901.371313][ T9347] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.380775][ T9347] usb 10-1: config 0 descriptor?? [ 901.471079][ T585] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.482217][ T585] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.492064][ T585] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 901.505059][ T585] usb 1-1: config 0 interface 0 has no altsetting 0 [ 901.511689][ T585] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 901.520714][ T585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.529600][ T585] usb 1-1: config 0 descriptor?? [ 901.862439][ T9347] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 901.872026][ T9347] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 902.002093][ T585] hid (null): invalid report_size 27418 [ 902.071142][ T9347] cp2112 0003:10C4:EA90.001A: error requesting version [ 902.078714][ T9347] cp2112: probe of 0003:10C4:EA90.001A failed with error -5 [ 902.203863][ T359] usb 1-1: USB disconnect, device number 9 [ 903.374200][ T359] usb 10-1: USB disconnect, device number 7 [ 904.991087][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!