last executing test programs: 10m22.624072702s ago: executing program 32 (id=515): remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x1, 0x20000) r0 = openat(0xffffffffffffff9c, 0x0, 0x80400, 0x1bc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xffffffffffffff00, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, 'ip6_vti0\x00', 0x3a, './file0'}, 0x36) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x0) dup(0xffffffffffffffff) chdir(0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) poll(&(0x7f0000000180)=[{r0, 0x804c}], 0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbc78c26caa1b33b}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24054081}, 0x80) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd", 0x4}], 0x1, 0x0, 0x0, 0x8010}, 0x5) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x3}, {{0x0, 0x0, 0x0}, 0xa581}], 0x2, 0x10002, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m53.297656032s ago: executing program 33 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000040005"], 0x40}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$NFT_BATCH(r1, 0x0, 0x800) 9m36.299142288s ago: executing program 34 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000340)=""/48, 0x30}, {0x0, 0x3000}], 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x70bd2e, 0x25dfdbf8, {0x2, 0x20, 0x20, 0x0, 0xff, 0x3, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) 9m25.277684795s ago: executing program 35 (id=831): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd24, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x54000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x31}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x1, 0x0, r0, 0x589b, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_delroute={0x44, 0x19, 0x1, 0x70bd2e, 0x25dfdbff, {0x2, 0x20, 0x10, 0x0, 0xff, 0x2, 0xc8, 0x1}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010102}, @RTA_NH_ID={0x8, 0x1e, 0x6}, @RTA_PRIORITY={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) 9m12.189588715s ago: executing program 36 (id=909): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@nodelalloc}, {@jqfmt_vfsv1}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x1) 8m42.088536382s ago: executing program 37 (id=1042): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7m51.751608604s ago: executing program 38 (id=1304): io_setup(0x6, &(0x7f0000000000)=0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) r2 = eventfd(0xb) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.high\x00', 0x2, 0x0) r4 = eventfd2(0x3f, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000280), 0x5, 0x1) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000300)) r8 = eventfd(0x9) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000440)) r10 = eventfd2(0x9, 0x80800) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x6, &(0x7f0000000500)=[{0xacd, 0x2, 0x7, 0x4}, {0xe3, 0xa, 0x6b, 0x1}, {0x0, 0xff, 0x8, 0x7fff}, {0x0, 0xb5, 0x8, 0xfffffc00}, {0x7, 0x19, 0x4, 0x5}, {0x2f04, 0x7, 0x1, 0x1}]}) r12 = eventfd2(0x1, 0x401) r13 = socket$nl_audit(0x10, 0x3, 0x9) r14 = eventfd(0x5) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x24000, 0x0) io_submit(r0, 0x8, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x261f, r1, &(0x7f0000000040)="288846128be991865ec65b263b65208508c6b341b782cb37ce2751fc0591b48d2efa2060bdea593ba807fc49e2357088efb694969bbd970e050bad99cfbed493c66ad68545d4d9342dd2216185fac373f89eee776e6e6060aea1317e09d4d4d8a35e701b193b9c4e7949660be04b876f36774c3af979305b71f00c8c244eab7f", 0x80, 0xfd0, 0x0, 0x3, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x7, r3, &(0x7f0000000140)="2b74dce0972c310dac945af39e8a4779", 0x10, 0x8, 0x0, 0x0, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, r5, &(0x7f0000000200)="2094606991f0e678cb33beeed9c1548b129eee9edb0094c9d21e3a2af0bb967d8f0c1748b4f82c16a19408240e100f78f322b375ea574ae37b5676234e4b7a1437f4921f557544290c524a9880416bbcc243420db25896cf54092cc4fee2", 0x5e, 0xb, 0x0, 0x2, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x8, r7, &(0x7f0000000340)="f120f44b1b3bcc1400528c2682315a6d7b99167a3aaa38f45ef2c3e4f09ad352505f3d56ce1d104e99f0f7acc7695687cf1083dfaade0383530460d521a3b612736b5b495fc0596952adc0cef6ca1ddc1462399a0076328b1b7c5d883cedaeeac3d4c7b3be9d00f1cfc86116c6b1960eb45c3edf0f17f27b22ec42c7bb20a796d0dc4a5ff647db20440241f5109a007c937094ba41ac8b5793ac01e461d530bc39afbb10643fcb59d60621387f072a9bd78d24fec0253e", 0xb7, 0x8, 0x0, 0x2, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x1, r9, &(0x7f0000000480)="0dcc8b51914d8f", 0x7, 0x53da33f, 0x0, 0x5, r10}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x4, r11, &(0x7f0000000580), 0x0, 0x4, 0x0, 0x0, r12}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, r13, &(0x7f0000000600)="4c7f2ddd15d532a79d353acba6c782ead1faccc9069a2d220196bb59e1b0ff8db6e78a2d882d8afc485ed75e3e5748f72e66d285ef0badb7a0df45d96b58778146dcbfcbbfa2df641f4cb9b92b139bf853877b3bac8d795c415b4ed7f41c05037357552ff660eb3326190668bcd3342f8c7cdea73fa99a73f096a0565391fd47858a823ffac2a90f5792163d3fa2a43ef0c97be48044f6ef8113d17fa8c1d919e1db9a301e4f958b3c56308475b19224828236c8096742cd4a3760e12d8f3198f9c5a7478b4f8d8bb6135e8b57c7c07a302faafa0cd1cb7658", 0xd9, 0x9, 0x0, 0x2, r14}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x2, r15, &(0x7f0000000740)="9eca5ce5d08ca47d96862ee9ee7a15fe01743b5c0325cfac86a887f0c8c7c06b027a6989e72d0118368199597ab5011e0e674fcdefada392fed7def26d80493085eb740c023693e7372fd0e1887ce9c9bb6e9c0a18c8991bafe69983497919cbee8eebb43e029081d1de9c40ac404fb23a304f30ecb51ed522e25c770af92536eea6c971eb4ee807455176376fb099a1c0945714e16f19ae48ba66141b50436f71c1b94e9ba433c209da5be489783e9ac8a6147c8ba9861de235", 0xba, 0x8000000000000001, 0x0, 0x3, r16}]) lseek(r14, 0x7, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000900)={0x5, &(0x7f00000008c0)=[{0x5, 0x8, 0x9, 0x9}, {0x0, 0x0, 0x16, 0x4}, {0x1, 0x5, 0x21, 0x80000001}, {0xffff, 0x9b, 0x1, 0x6}, {0x4, 0x80, 0x9, 0xffff}]}) r17 = socket$tipc(0x1e, 0x2, 0x0) r18 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940), 0x4) fcntl$setstatus(r18, 0x4, 0x0) r19 = getpgrp(0xffffffffffffffff) read$FUSE(r5, &(0x7f0000000f00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r5, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r6, &(0x7f0000004fc0)={&(0x7f0000000980)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)=[{&(0x7f00000009c0)={0xec, 0x35, 0x1, 0x70bd27, 0x25dfdbff, "", [@generic="75ab65b4ce0fd04fbfd8139ac1ddb76dc224346ebc6bb8ffac612dca046240f0ef710a55c56eaeb33800570312bbd964c8da8659286072426b300d74b07f1af185e926f6b6", @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@empty}, @nested={0x80, 0x12b, 0x0, 0x1, [@nested={0x4, 0x50}, @generic="160240fcc2ec11e2da39e444e40718c6855d974bba77db118be810a1f6cd33c3880ef5cfeb9a311b2de7ee71074082cb66e848c39a042a0f58654a3c4da92b7fcca666944efb60ccba24fb3b523c69a2473a149e6b7866dee29f94cb33d0fb6655c6c802b585d96f554bff60df7e3b2bc7ab241ae8d5cccb"]}]}, 0xec}, {&(0x7f0000000ac0)={0x230, 0x14, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@generic="affb227885b69fb7929528e69503fffb866e95fbf6f738e8b092f812da372d5706e8b4a67e403bd1f18a91319fadda4f1dcce649116926d72aa7384b471276fc16762d39e7d09509933020b1cd0a3201f7d93a82ecb6e8185cfc1c9a878549dabdf9f57d5a89d6777aa28088d75e0debb115b1add99a1c95d81628311aaec6771e44609cac93eeabd5c5b012d9e9438048677f77369820ec4b5904a73265348aa3c14965d2d563ca511bebf630e3240546fd901e6f45d5665f41e277e6ae828a36237b95bcb448e0a880b572fa553c49344e79db3226ed", @nested={0x146, 0x2f, 0x0, 0x1, [@generic="d73a2d347e1273934bc89f8a291ad07b3db06c6c9b9d61d54a17c660cf5602ff2caf93026e65b528d5c145fb83da143f428bd490da0deecf2d38f72491873033bad0f05e43bba061", @nested={0x4, 0x80}, @generic="80abee3001cc85391c0d077cc96bd72c020ce1c0e19cbd1d4898f222db7e3e95d47fdcdb82c1d0ecd544c96d55da81318a56f33e48861f27c081bdcac667ecadd54e46", @generic="b26cb4bf9573805eb29c81597a2008e24f52d54c2caedf31beeba7c85037959de81dbf9c", @nested={0x4, 0xc0}, @nested={0x4, 0x10}, @generic="d3d37d5cffd11b3232e7483a7bc6bccbb59b51bb8012e1772b23f13468c514f022700cbd5c6fab1dc01ee81a80340c3d9943aa8e3120fec839a822cbf89505ed34549a9c22a345ba67fb6a1bf94552189d38f84a3a404efe7bd54497c76a8d78cb7e406a060a8e8915b47c431a2d99d6a2cdb2f7dfdfebd934108688970a9886dcd85404de744e"]}]}, 0x230}, {&(0x7f0000000d00)={0x18c, 0x41, 0x320, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x61, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x5c}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x1}, @generic="6a0976843fa1d54c6454aacb39c781341c5316e37b68f608b3993b007385e82f0ad96b38c70afd706b95748242d4dfb1572da6cf2200e8a24642ae58706ad78c359307cb090c78edc1b29941c73d04f4f403f561928ac30dc2297829f27a512abb92e91a21c73c4c93e0f3d4a3d35c74e0f6f596df2356f90ac2bfc9c200ccba4639307b57024cc1df50865bb5cb158a310c1469eba7a4d2513795c1a0ad5491b54be0e92fa1fc224f9dcadb85577cef15308f5abafb32598db93b3c5bcdb01e4a0932d94497849edf1c4f6a050894ab27bc411138517f41", @typed={0x7b, 0x13d, 0x0, 0x0, @binary="d2aec29479c93bb42a63b0c62708859aafd87554990ac554b113f49d58222cc8bdb480a526ef948c7d13fe5badafd3e4da1a2207d7ba47e814bfe6a8f49d10e0aae355a3de02e048c0973755e3c96edeb926bd99f1c510958b25243186a45954af54bfd34a0f92e5ed0d53f44cd1ba4ba53ad644134411"}, @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x18c}], 0x3, &(0x7f0000004f80)=[@cred={{0x1c, 0x1, 0x2, {r19, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r20, r21}}}], 0x40, 0x880}, 0x4000000) getsockopt$sock_buf(r17, 0x1, 0x37, &(0x7f0000005000)=""/164, &(0x7f00000050c0)=0xa4) socketpair(0x27, 0x1, 0x1, &(0x7f0000005100)) 7m22.763146262s ago: executing program 39 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) mount$overlay(0x0, 0x0, &(0x7f0000000300), 0x100029, 0x0) unshare(0xe040400) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) fallocate(r5, 0x0, 0x0, 0x1000f4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) 6m44.687493566s ago: executing program 40 (id=1634): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004bbf000000000000001200"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000014000000000000000080002000"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000004c0), &(0x7f0000000540)=r2}, 0x20) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000002c0)={0x1d, r5}, 0x10) 3m53.297807852s ago: executing program 41 (id=1908): syz_open_dev$tty1(0xc, 0x4, 0x2) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x24008054) (async, rerun: 64) recvmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000240)=@sco, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000600)=""/250, 0xfa}, {&(0x7f0000000800)=""/152, 0x98}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/218, 0xda}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f00000019c0)=""/234, 0xea}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000001ac0)=""/56, 0x38}], 0x9, &(0x7f0000001c40)=""/208, 0xd0}, 0xe4f}, {{&(0x7f0000001d40)=@in6, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001dc0)=""/233, 0xe9}, {&(0x7f0000001ec0)=""/87, 0x57}], 0x2, &(0x7f0000001f40)=""/185, 0xb9}, 0x6}], 0x2, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000580)={0x8, &(0x7f0000000000)=[{0x7ff, 0x7, 0x6, 0xfff}, {0x7, 0x19, 0x8, 0x5}, {0x9, 0x1, 0x7, 0x9}, {0x6ba0, 0x38, 0x8, 0x5}, {0x3400, 0x4, 0x6, 0x9db}, {0x72f, 0x6, 0x8, 0x2}, {0x401, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x4, 0x7}]}, 0x10) (async, rerun: 64) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x101, 0x2) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c00198008000200070500feffffff8005436e"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000c848bbd1d30e950e9e074226a659565571c75c1c6a148661c6f9957323411057c2e052bbb76cd288f5b3abeef9d282fb5c178153763485599c96ee5d7a1519901362d3c101e745eb677a7f0579667fdf70c84d3bbab6dc2005ea3b236dfd3f6cee921f8ad9d7e751", @ANYRES32], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000"], 0x5000) bind$tipc(0xffffffffffffffff, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x100000, 0x2}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fdffffff00000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 3m44.334569085s ago: executing program 42 (id=1966): sched_setscheduler(0x0, 0x1, 0x0) (async) getpid() (async) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1012) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000340)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xb0\x1e\x1c%z\xe1\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb|\x11f\x14\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xef\xc7\xf4\n]\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xfe\xfb#\xd1\xae\xd8\x19\xea\xcb\x99\xbd\x0f]}z*\xb6\xba\xe9\xfd\xd2U)\x03Y\x9bq\x84\x1b\x88\x9dg\xbc)$\xe7\xf8\xa6\xf7\xe2R\xa2\xd9%\xaa\xd2\xc0\x15|g\xa9\\I\xd1\xb7\xd13\xaae&\\\n4\xb0/?', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 3m26.109498642s ago: executing program 6 (id=2062): ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1012) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/31, 0x1f}], 0x4, &(0x7f00000001c0)=""/108, 0x6c}, 0x4da}, {{&(0x7f0000000240)=@phonet, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/4, 0x4}, {&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/78, 0x4e}], 0x6, &(0x7f0000000780)=""/149, 0x95}, 0x5}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/170, 0xaa}, 0x4}], 0x3, 0x2060, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x58}}, 0x18104) ptrace$setopts(0x4206, 0x0, 0x1ff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kheaders.tar.xz', 0x44302, 0x4a) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETLOCK(r2, &(0x7f0000002c80)={0x27, 0x37, 0x1, {0x0, 0x100000000, 0x2be7, r4, 0x9, 'mptcp_pm\x00'}}, 0x27) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000002cc0), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d40), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x20, r6, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7f}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48015}, 0x40040001) sendto$inet(r2, &(0x7f0000002e40)="1ad03ae5f816aceb0843c82e195f70b05ba05bdaf67c7a6d829b48cf505331df105b1ef42e5ce37511687751b89007e6501101f025a22a147a5862ce18da0dc0fbea316b1928882c8f58fdb2b259cfe2cb6c3c4fd3554cc607d23998c728f241c4c6c462a6d699757fd2bdcd5ba0f0b4c3a46ccbcd4fe0cb2fef952b0bd441782111f8164961d2c9632b9d66a33758a7b4e3fc555e3b1e72", 0x98, 0x8040, &(0x7f0000002f00)={0x2, 0x4e24, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002f80)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000003080)={'syztnl2\x00', &(0x7f0000002fc0)={'syztnl0\x00', 0x0, 0x7f07, 0x700, 0x0, 0x200, {{0x27, 0x4, 0x1, 0x7, 0x9c, 0x66, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@generic={0x4, 0xd, "5bbe1115bf1a30c80891fa"}, @rr={0x7, 0x1b, 0x1b, [@remote, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0xf, 0x7d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @lsrr={0x83, 0x7, 0xf4, [@remote]}, @rr={0x7, 0x7, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @local, @rand_addr=0x64010101, @private=0xa010100, @private=0xa010100]}, @generic={0x86, 0xd, "2216b17a5014648c8be56c"}, @timestamp_addr={0x44, 0x14, 0x76, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@empty, 0x8}]}]}}}}}) getsockname$packet(r2, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003100)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000003300)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003140)={0x16c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003340), 0x10080, 0x0) sendmsg$key(r2, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003380)={0x2, 0x1, 0xbf, 0x7, 0x1e, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_key={0x13, 0x8, 0x468, 0x0, "378b0f9555865730562029cfce2dcee4f546e50af5011ceaf5f693c0a7c94302afdd4bb2defb012a23235d930b62f655abdd6f25535eca8fa7951e5428ea2d90009c4aea7298ab472c7bb9bd4a3d1fc00cef393bd5aec84c8d0f7ac6568840440568f3f8f18d1d42e6eaac56f663cc898fdb16aecf078abdf89337cb97b4520a32e7d3f77c5c65d350f45c4e30"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb0, 0x7fffffff, {0x6, 0xff, 0x6, 0x0, 0x0, 0x4, 0x0, @in6=@remote, @in=@multicast2}}]}, 0xf0}}, 0x20000000) ioprio_set$pid(0x0, r4, 0x6000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000003500), &(0x7f0000003540)=0x14) io_setup(0x9, &(0x7f0000003580)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000035c0)={r2, 0x1, 0x3, r2}) write$P9_RLOCK(r2, &(0x7f0000003600)={0x8, 0x35, 0x1, 0x3}, 0x8) fsmount(r2, 0x1, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000003640)=0x9, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r10, 0x29, 0x45, &(0x7f0000003680)={'icmp6\x00'}, &(0x7f00000036c0)=0x1e) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000003740)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003700)={0x6, 0xfff}}) write$FUSE_GETXATTR(r2, &(0x7f0000003780)={0x18, 0xffffffffffffffda, r3, {0x7fffffff}}, 0x18) 3m25.762955096s ago: executing program 6 (id=2065): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@debug}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@sb={'sb', 0x3d, 0x9}}, {@usrquota}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@debug}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@sb={'sb', 0x3d, 0x9}}, {@usrquota}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) (async) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) (async) 3m25.286826633s ago: executing program 6 (id=2067): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3m24.335973317s ago: executing program 6 (id=2073): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x25e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='./control\x00', 0x0, 0x2000, 0x0) 3m24.083791152s ago: executing program 6 (id=2077): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2e78443e22f15d38, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="c9d01318139854ff5272c21f3d7349d161f48eab6887f4595e4755ace213fa56b82b8f957ef0e37955ff0a633661bfc8b490931d34e7eb19b5d4eb5547436a3b75d85f1bd446a629becead4cc92084f08bcfe38a25317edf0054ad5fca3d43ac729f5ad3ababf4ccd1acd7ded4f13258a9ee8ae3099c989652a462a02d6da53580384f4d2d546b99c9c1ec9ef9ffb59a749956883aa676396dea4aa216e3b011f8ae702c97804140aa0a81ded4187d08cd76a0ab92e11a7463ebae89a3822dadb3868a259828dc41dd71e0edee450f5253aafa70673b204fad7162ebc81744442c5448f410336c26bf", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x80) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x3c, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1, 0x1, 0x2, r0, 0x1ae9, 0x8, 0x2, 0x7ff3, 0x0, 0x4, 0x2f88}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x40000) unshare(0x64000600) 3m23.913033539s ago: executing program 6 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x700, 0x80, 0x2, 0x800, {{0x1f, 0x4, 0x1, 0x1f, 0x7c, 0x68, 0x0, 0xfc, 0x2b, 0x0, @broadcast, @empty, {[@generic={0x86, 0x7, "e2557ea410"}, @generic={0x7, 0x2}, @cipso={0x86, 0x1c, 0x2, [{0x7, 0xf, "12d0987d7cec6b65daf26db5ba"}, {0x1, 0x7, "5649a3c87b"}]}, @generic={0x7, 0xa, "8b8146efa1315982"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x18, 0x68, 0x0, 0x6, [0x80000001, 0x7, 0x2, 0x4, 0x9]}, @noop, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x9, [0x1, 0xfffffff8, 0xd, 0x6]}]}}}}}) sendto$packet(r2, &(0x7f0000000000)="735f358e5e17134e5261fe4402de475c63ecf45ea74c2f2af8bfef428a98ec2a094231dd7f4ee4150e082fb1ea8439778d773128d17e135590568491ac547fcd3f49fe", 0x43, 0x880, &(0x7f0000000180)={0x11, 0x18, r3, 0x1, 0xff}, 0x14) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018000080007564703a73797a32064c710b1c"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m23.89907432s ago: executing program 43 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x700, 0x80, 0x2, 0x800, {{0x1f, 0x4, 0x1, 0x1f, 0x7c, 0x68, 0x0, 0xfc, 0x2b, 0x0, @broadcast, @empty, {[@generic={0x86, 0x7, "e2557ea410"}, @generic={0x7, 0x2}, @cipso={0x86, 0x1c, 0x2, [{0x7, 0xf, "12d0987d7cec6b65daf26db5ba"}, {0x1, 0x7, "5649a3c87b"}]}, @generic={0x7, 0xa, "8b8146efa1315982"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x18, 0x68, 0x0, 0x6, [0x80000001, 0x7, 0x2, 0x4, 0x9]}, @noop, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x9, [0x1, 0xfffffff8, 0xd, 0x6]}]}}}}}) sendto$packet(r2, &(0x7f0000000000)="735f358e5e17134e5261fe4402de475c63ecf45ea74c2f2af8bfef428a98ec2a094231dd7f4ee4150e082fb1ea8439778d773128d17e135590568491ac547fcd3f49fe", 0x43, 0x880, &(0x7f0000000180)={0x11, 0x18, r3, 0x1, 0xff}, 0x14) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018000080007564703a73797a32064c710b1c"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m19.000079633s ago: executing program 5 (id=2119): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}}}}]}, 0x4c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r4, &(0x7f0000000200)=""/40, 0x28) getdents64(r4, 0x0, 0x36) recvfrom$inet_nvme(r4, &(0x7f0000000480)=""/159, 0x9f, 0x40010003, &(0x7f0000000800)=@vsock, 0x80) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='dots,check=strict,discard,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodkts,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,discard,dots,dmask=00000000000000000000003,nodots,allow_utime=00000000000000000007217,dmask=00000000000000000000010,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") 3m18.462425076s ago: executing program 5 (id=2120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00ffff000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617574685f63616368655f742095a167c867d8f91b"], 0x27) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r4, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r5], 0x0, 0x0, 0xfffffffffffffd2e, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3m17.384338672s ago: executing program 5 (id=2125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x13, 0x800010, 0x14, 0xc, 0x5, 0x20a9, 0x0, 0x2, 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="50000000b7a4889157e99fe86e4126e2cf788411a16d8f5b8d8aee8ec99428245772dd675b2af88da3672263d9e2ecdbf18dc2daf7d943ca1852b80c34e7394178766c2bf3f237afc9272dc1ebe39a30a9e5aed35065a351a0de5e948399b1b6dd5fcca40300bda0f9bc8bfd399391865da3a854d0694652cd8498c5ad8e001dacf105000000dd76a5d7", @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf25810000000c009900010000006d000000040067000a00060008021100000100000400670014003300f4005600ffffffffffffffffffffffff06006600ca880000"], 0x50}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0xed, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') read$FUSE(r9, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) 3m16.120507217s ago: executing program 5 (id=2135): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = fsmount(r1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="200028bd7000fbdbdf250b0000000c009900090000001e000000050008000300000010006e8004000200040002000400010004000b000a000a00233c8960287d0000340050800900010041c0f0777c00000020000880040001000400010004000200040001000400010004000200040001000400050009000700a521477e8a00000008003700020000000a000600ffffffffffff000028006e80040002000400010004000200040002000400020004000100040002000400010004000200"], 0xc4}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) fchdir(r5) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) 3m15.873492101s ago: executing program 5 (id=2137): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "154c072c"}]}}, 0x0}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdir(0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x800000000000097}, 0x18) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3m15.776431541s ago: executing program 5 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3m15.695630549s ago: executing program 44 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3m14.244050441s ago: executing program 0 (id=2149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', './bus', [{0x20, 'b\xbd\xde\x1b\x9c.throttle.io_serviced_recursive\x00'}, {0x20, '\r-,%)\'*['}, {0x20, 'blkioait_time\x00'/26}, {0x20, '#\xf2\xf64\xfd6(\xb9\xa6\xe6\xad\xdbv4\xef\b\xa8\x83\x15\xedc\x1cv\x92C7{\xc9\xfe\x85\xe3\xd0\x8d\xac\t\x05\xb1uSz\x85\x06\xec;\xe9\xe5\x96}\xa7f\xf4\xdd\xee\xb4I\xde\x96\x89\xb2\xc1\xd9U\x9d\x9d< ^[ \xb1\x87\xe3\xb9\xa5\x82J\xfc\xa1:\x915@\f\xe8\xad\xcf\x92t\x1a\xfaNS\xc8Jj\x8f\x8c5\x98\xffL\xbe\xff\xdd\xc3(\xc7\'&\x8a\xec\xab\xe9\x90\xd9\xd7\x95\xffGa\f\xb0y\xe2\xff\xbaN?\x89\xd2\xf6\x9f\xf9\xef;\x89F\x00'/149}], 0xa, "bda604e38107a01c13bcee98fbba7ebfe6a6453a42999800"/35}, 0x10c) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0xd3e0b000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r4, 0x21c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000400000000000b7080000000000000200000000000000bfa200000000009907020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffc6, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000000400)=0x8000000, &(0x7f0000000580)=r3}, 0x36) pipe(0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000002080)=ANY=[@ANYBLOB="0e000000060000000408b50ea7cba061b88a32442d0e4d68eff46748ca9814e82c92f1513632a892528ef28c1f5be63fc41d0d36690bb8913e0dc8d86e7c8179a62f8eee00fdb6eaa574946ffc4e2162cbec3401e7e1c10e83382722815879fbb3e863414942a6c7a084d50d5be28a8a3d59169c4c89e6086a5c6ccbf5a04d42da340ddc36c782cbef63cbd2b91aec8789a06fd6e77580b33284dc8f9c3ab968cef186e4ef045178f65116cd0b1fdf7173334b157bf99102ec86bf2dc0c20d26a32cec765bc838d1f935ce0a7dc5e4b733e8d4bedb887761567546df390177189add979c61e9538c2abd82ff933eca1b30f6514244acddfcd4a54b5fe404efc4202ca92b1448a64ee10cb6dace134903c8f9369582fcb2e32e7f4ceb6c8aa05a321589af72bd7871665387c7b0bad8960b079ad00289babc0e2fe580bdb04b336c21963acc5dde72457fc03fd9ee8cccdb4749bab2120f0173d7f2d481f97ca68f9c917d0306c4262a934411ffb991440585f3dd400f8e478b7612e75d3aab14ae31668a68e5a5d05273ac79431da4276182e9a719705a412af8755938fe4b2b325cb32a173d4f8df9efbcb809ce4226587ba5eddfba148c6539dd03b99c79965f082efcfea70865f67deae9d62f81a05cc612949ed54982fe0039d683eac185042997f614f002ab6a63abeaf690b6d13065d6d52420a31b3469bf6ae1afdb658f0ec7e2d351bd256e0d711c18034f13819ce7ae2bc7e30f564eed5c096aff15cf164e2be7e5de283dadc527613278c8a1410d13f6c9f4d0b8b5ddaf61bacf952fb9910b1416b98ed292fdc19f233e1c1730632ec3ce78550b65d253f55dbd24f6d926cff3cd54fd74266ba6a0225b3531c2e0be8c506eb41b91db0ea913a2bed7f7d72a0fe9a2e0d67e03314243797032bb67cf962077e4dd1b4c1af6c5974b56ef70e9a4d05bffb5bf6771a75a611718665d9b0cd94bd3c620123d1083caf50ebcbcee2f8581b4113a4638e64427b7f075a57b86e4b073c26349df8a23715cd569a2495b20a139e5cad3f3f070724a2673ff7f6b95a4352f47f34825b0f984c2b749c6d975999a6c4b37ca8ac0204e98db2342db6553aaac2d3a31df2629f33f6e1343776399dd4425596b21ee2233fda4d529b35e47359e838dfe29d94a12a638dd6efc4a551e8d3ab571ed2cd5008c81fbd6b8f1128e341df1e2c58fe85e48c05c7777691c5961c140a1673e60851d2d6fa9cba5b0837cc112d730407c8e4aba71537c05c1d507a2588bc882aaaec672c7d9b4caa5b010bcfec0e18d76e691c8f6342c7492bd649e5a260982917392a0aa23fcb4d1cfd7b494e96b2301f1b3a9e460a1d00076660b3111f7a2c7cf7a0299fdfebecd0d2b2322a3729259d5e856000d612cb502e66fdd8dfd2f4bd2debf10bcbab662b0e85b230bf23b9ba4a6d99e17bdba239d25ebfffd1667d7520067a42880ed02fed34a4ef16703578056c7d822eae4ca4a289716106061c786b95202b118c0e597dd7efbdc56e373265c959aea1ab60ab199496e848ee0aa7b787d0d028fa0668a884ca59721c991640e5463cf277517809ba53a0ae515a269fa306f873f5b7973a84f1e4a0b6653309b6b58578faaceed3041e8730aa9091ecf57ce681d70d5798be551ba469817d967577ddcf06d5978430d7d9ee420aa8e16f5f7b902a4c99d2337f14f83c6a7884db96f9df050b145f5425a340bc75832b3946770b010851b074219db259a619fc7512da9e6a09fa38b2f5564e6ec028b915026962dd810931e3389d452957aa2c24ea8b58c15b6178b9accca655353b30b0474aaf1098deabe37281080e05ce50ebc56d4ae02a21339198234358eba48f5fb425e079a578dad7176a034d2bd9cf05b9c5ed1b9facb61b071ec4cc82d999a5b15067fbeec39f88c91933487646c32c243e777293bd3d5c0172f584218294032973f347b1fc4aed6d6a7349403e2d70e73e6ead838be9801ba40382e9951d470950bb6d6df6c70be40114c54bcaf57adc6cab2738f62b441573fe61b98a45b632e35ce02fc8d9534ef432dcc7ef24e736d6f03000000000000008ee34cc5b5bc633a43a0d42d06081a8b758855a3ed25e8e47572e58cbd60cde25dcf4827118e2be1738c51af5f8aef37f25dd294548784520bc095753178599356e4080d426c72a5695de48dcc1f8338ee6644065cf064167bf17ff4f5ef4920b348b0d7e8a8b955927b0fcd365bbdf5c68e64a39ff609a38abd9d3efc8bff74d07fa4db5b0117561434852c2685bc6327e86cd4733972d2c0a35b1124f88aa8fb0bda64d4d7eac3d47a270e1d23b17e33b0c26ff018558123ffc5475bc5e7367af895c134dabf8ba7d070163c93dd1123ac55f5e76e5aafc2c08878b6df42cef2f7d0342c65af566b18fd17af5ad878087780a7f8be3355abe6839732d03fd558cf357922bdfaacca9c91a67b7dade4bfe214e8300d13f2e4118d046fef7b24347ea724fabb8d06544bec71720f1a147a75a9b07f8f6b1b4fcd0495bddd29d3579cebe9894c4186f7d55db8ac23c8dc59fe6c55c7b20962f61aa3dacf26548fff4698f89bc4601526000d87360fcb6eba14e877291551a0f6311f9bfc8bc0a4e1c81af5f3c58c367b9b50bb71865f51094a2266ea04b6a46bca4b10c7f34f21b77b9b78d8e7e363db4e8d19494d090b8858f1e8212bab99c5768d6128a057e70deef8b86b32765d1b7b8d73b9d2661b093895861dd1389145a19cd2c7ae7f2ad95146ef51fc74da6daef9800548727756566302f66f4c277fa6ebd2d8c78a30bb21a0c0da8ffd68d0caaa316e09e970e460b10d8895a4e585025a2aa736bde6125933e859c619cac9c47efec3af01c879f02efed1c1864079e4ada0b2c94e002f13190414adc5391e4b5a9acaad20569fd68f3ac9f6bb64a5f601bd1b847c57c0a6c322122aec4c02ca48a9e2e9b2c91854ea861d84a8d6870c8dcbe704f1293d023cfa0654f7c52c48e17e26ecc2b301b45c6f7d771898f611108233cb19b636125764d25caa20015057182f4a2b3d88fb82f8683dfd5f555b438309926dbd53392fda91db803e15d544c4bde5a205fc4ab480499465951d76719197ae74d6011ab8ba89feb847369badd3f18735274cc5cacec3578312a7124626b928c4ce357ec9c01d798ff06e8230bb38dae13320a1a7b509f58945bde07d9090d82f102167961206f6554064687a22e6e747214bb6f51896bd8547e192674f1a57b375db8a513c34dd057ef3bf49255b648117f15876fb5dfb8b425777b0ba12c247037020a1e38d6a09827925d54fb1f856a38500379c7c3ac9683c39d48ef42f251dd15d8fcfb8995e0ee748bf79e541ab8afd21737dffda02196c9ee6b3bb897170479230dd9e5b4fbf1a50ed9de6bbbefe0f6d54c9bda6fca773b4a3671f16dcbea13ba42a273f83da2b8420f31dbcc952246062e27a92d50027d13bb059f0e37b766f3470414f7e8977e69167845d3bab519d6b742b0f5e0a5080bd14bef63ed9931711da95b6a7a4c922aebefea10c27aa840ce2096b839a79c77419dd63857af9972e08dda94d7153abd935fbc34f8d2c9cf409cbd85c71499cfe003fb720d966ed52c8df453daf2032d857a016cc8ee38983d2427c507dd44a234b1ccbb0a897974448d42485bcfd78187094a1c0afd33bcbd35197547a66d9d7e2d8479c3c28885a6143b2f8af7b966cbce7ba49efe796dc8e93689a2687d776be4ba6c7eb04e1cf1430c929034880b8ebc7684fab8e92edcaa74b7ca55ff0df27f9dc7622a4056e11e5412353671977c5794a0328c16b844e0c11f14df3806fa711a265a0d930ed2dc97f84fe3e2a0d35b7ade7a8a7bf51b2972d12318b2b4300e5fc75d3a263aeeea7f728144063d822e71aa05fdbe46f2a0ae0e2e52cc5a4a7273c9f6c7d05c88fec9bd840eeb2f74eaab8e4c38fcedbf3c5c33e6be7c53d71e36f9950a7e5567e08831f920cf670ef8875df6d9f31bc151f6357e4c26658927f65e5020dac49a14bd26cbfff05065c26fdfed1493e4c4d3e5d6a439d7b08a849c4b2e1176a4dd1caa7d7b9e2e0fcbeca1f69e8f21ea1f11ec8f9d941e2e587149b30247a38d2106b98e68ee6d0fdd122cdbeb9447add2d0fbb0c807bf93a6330facaad0e6bc0cc30767b35b0cdf5cb34409120507ffc23dba2eb4caeaa608c3ca76bf59f67d586513b3de86a1fd895b3fa54e8bc2d62c14daeed07cc98f19c24dec9bf291d2e3bd89cef0ee6ed2c8179c929bba3fb8540f62c6b95a49e9bc8e3caf738c3d9419b800e96698ebb0e6a4db9c264f18ec3ccdfe74222c19c00122a63503e8d335b33c33e1c42444db551782cc1ce1e1aebee1359828d668d7013ca0b2ee5c74e7384b10c52ccc7072107702557338c8d8f86198f530ccf6ce686741ee3c0ab78f76878472af68bcfbdee76b1036c9851df7d0c7319a927182056e1e13c76ebf9d0d645e680375c781a0c1a3a869ee02913aefd0a158dbc16bbd80a1c199cd375555088c3b15195780af9936acf6c6dbd3ffc9704c813892b34cfa31718d9bd8ca8847e3ce59d445e25f6f9f88e263e8f4e6b62dfcea58291a6b00b7146fab0a731439161deb730cfe171550fa5320fd5acc129a3433b8a8c4c1d61a0c20531c69f8baf0812adb8f706b440a944423cec9aad1fcf1ba75bdbaf8ed9f4ca65c99168f3ba0db1c2a7bfda2b205f1afd2636db1a8476d64a5575d8e1947911be44f2bc4e9c020179b67bced3ececf34986262a57f4db1633afac34e6ab174c94d2f80a944fa97befe50f5b987dc3c99ba46f07c5446b0dee35f6b7832ce8947305e9f9c5d48a7b9cc8ba2417c6d069b155589901935a06e48f403a8065acbaec83e236c0f89e56e7fa7b16c1de6642169ba4bf949dd6010ebcd81586013cb3941f4ed4a94968ce6fea420d14cb61e13842a57fc6256f5bae971ea008dc810d29566309873d734b678c117876aedd9413b969ecab20be719ac4b14adaac20bdb49dcfa1dc38a5d8f4097f58815df2c113852ee97a2d9b54c1571884425cac9ee3aa1172ece95cb786c6347062892ddd87922b53b5a1a8147d5a985cff09e91f431b5472b3b67484bd3782f751aabe34b5b9c933b37b0897a5185244b29ee425b623c8c1980000000000000082a06e7b3e2295c5ea7b91cb3d8be62285fbcd0257ce00a3cb0460ae513beb4830afedb6b38df1d70d1f5717e22a39cdef22f5b53000c9dd4a0de527cdecb047aba5bcdf4679126950504cab2554e0018adfc126ee8e930c37dcc8cd8dde7ac78c3705a84ce6fecce01d"], 0xec1) process_vm_writev(r1, &(0x7f0000001a80), 0x0, &(0x7f0000000500), 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000100)="979ec97e10fe78932a100ce212d251ac617dcb3c14d40b28186afc8326d09ced6490f38e18925ca4c54158acc01b6fffa2a63ade02f0f507120f69481e5a81d6f700ed3c1508ab3d947e6018b59dbb340432cb2f3f0c5ff3011f8496c8f801cb3917875a1aac2b8d47140f0799c3ae60fce27d331b138abffa4728fefd2d9f1d92fb32b07701f86385bd5706d2bcc992624785f348a061fb01085b", &(0x7f0000000000)=""/37, &(0x7f00000001c0)="3d15914cd8185769ad4514b41fb53fd9", &(0x7f0000000300)="5a6dc90699299b7ecd987ae47bb5917ffe336178b7891597c014a713ee16b5563667593569f43a21c5a26b8535bbeb970fffa2eb93bbab160d9c175116ce1535427be2559491e077f3f5a0baab237da7dcdd4fe85a93906f6a4904f960e5539e24bf9b96cb8749d39e846671c6f583dfade3f5d9e44851886562f15ca558c15d19bc44979237833abd0a8edccd293a7691119ddacc1b58bc0b6752390bb70b3223443ea3a0c3202ff11a35c4ce2a8a5c13ea3277eef4962a21b99f5330b48040785b1c107eb950101208fd76d8deeca806b36baf7c5d26dfc1c2a0df9c3fb73692f3a894", 0x0, r0, 0x4}, 0x38) 3m13.35511673s ago: executing program 0 (id=2155): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000100)={0x6, 0x4}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 3m12.980557646s ago: executing program 0 (id=2156): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x13, 0x800010, 0x14, 0xc, 0x5, 0x20a9, 0x0, 0x2, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0xed, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 3m12.060491347s ago: executing program 0 (id=2164): syz_clone3(&(0x7f0000000100)={0x821400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_mount_image$fuse(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="4b72197916e6b10ef65e1d166bc20451e66cf5f0dbb42df38ef6878e6112c43d23c6a1e7db077783a962ae981f42cfcdcc31242c62c273ffef6be43f18a096172f31f9a548075d253407ef085f0ea61d523598221debfe439fa20aebb35400000000168f29653aac8def4d1bf95ef2f9899ca8f916a79919898ab09058bfe4fc51faa4bf46aeea7dc0687ab5ca492ecf", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000800,context=staff_u,measure,subj_type=GPL\x00,obj_role=-:(/[:@*^,dont_measure,\x00'], 0x0, 0x0, &(0x7f0000000bc0)="d069359ecfda0547441611d52fb64ffe3a9edf4c71f14f3707af8ca6c80fca98b1bb45b6f4608d39938b03f54cb21800ea5eacf219c037b1864eadd9340ac1e5a4dcab2c1ca82cfb096f861a94c71d00e05833a6706bb42eed732e1b9d4ec18ae3e7e99f0fc83b79eb97d0b06b3f32b3d162113a743bf09fa1114ef3960eecce764828cd5ab547c9cec8") r2 = openat(r1, &(0x7f0000000c80)='./file0/file0\x00', 0x40042, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0xb4, 0x5, 0x4, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x700, 0x20, 0x7ff, 0x8}}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x600000, 0xe8170aaf68586f4b, 0x35}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xe, 0x8001, 0x200, 0x6, 0x0, r2, 0x1, '\x00', r6, r2, 0x0, 0x4, 0x3}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x168, 0x700001b, 0x148, 0x168, 0x148, 0x200, 0x206, 0x240, 0x200, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'tunl0\x00', 'sit0\x00', {}, {}, 0x0, 0x2}, 0x1ea, 0x100, 0x168, 0x0, {0x390, 0x8f00}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@multicast2, @ipv6=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x32}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x168}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',\x00']) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000004c0), &(0x7f0000000880), 0x2, 0x0) 3m11.864527316s ago: executing program 0 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1e, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="e0ed5da611d1a7d21a2abd21d2324f0b60e7732534bf333a12aaf1660a1143e02db610b6eac507b48664153b93ff028ec47186b918053d8d40151f6e3b1b2ebc67a0aecb3605960308cfb83b198810bc03f3818b251d3061a5a265814110db9d377d0b672a59de750a76886a4191592b0b5b0c832cf9d009ddb4aa13feeae45746027ce99996b840cd0aabe0315f2821633127e3702c9264b13c0d7c71df78", 0x9f, 0x40, &(0x7f00000001c0)={0x11, 0x15, r5, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 3m11.851307588s ago: executing program 0 (id=2170): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbDb9rU2hFBWRQA9WajdN4o8KHupRtFjQe12SbSjZdEt2U5pYsD3YixcpgogF8a53j8V/wL+ioIUiJerBS2Q2M2ma3STbdOsG5/OBCe/tzO6btzPfl+/s22UCKKzR9E8p4sWI+CqJOBwRSbauHNnK0dXtlh9en0qXJFZWPv4jaW+X1vPXyp93MKu8EBG/fBFxstTZbnNxabZar9fms/pYa+7KWHNx6dSluepMbaZ2eWJy8sybkxPvvP1W3/r62vm/v/3o7vtnvjy+/M1P94/cTuJsHOrbq7fdWF8ZjdHsPRmOsxs2HO9vuwOXDHoH2JGhLM6HIx0DDsdQFvXA/9/nEbECFFQi/qGg8jwgv7Zffz1fBA/eW70A6ux/efWzkdjXvjY6sJw8dmWUXu+O9KH9tI2ff79zO11iw+cpAM/SjZsRcbpc7hz/kmz827nTPWyzsQ3jH/x37qb5z+vd8p/SWv4TXfKfg11idye2j//S/T40s6k0/3u3a/67Nmk1MpTVnmvnfMPJxUv1Wjq2PR8RJ2J4b1rfaj7nzPK91Tx7f+e69flfuqTt57lgth/3y3sff850tVV92n7nHtyMeKlr/pusHf+ky/FP34/zPbZxrHbnlc3Wbd//Z2vlh4hXux7/RzNaydbzk2Pt82EsPys6/XXr2K+btT/o/qfHf2jr/o8k6+drm0/exvf7/qlttu6x/kfv5/+e5JN2eU/22LVqqzU/HrEn+bDz8YlHz83r+fZp/08c33r863b+p6H8aY/9v3X0x5d76v+Ajv/0Ex3/Jy/c++Cz7zZrv7fx74126UT2SC/jX687+DTvHQAAAAAAAOw2pYg4FEmpslYulSqV1e93HI0DpXqj2Tp5sbFweTrav5UdieFSPtN9eN33Icaz78Pm9YkN9cmIOBIRXw/tb9crU4369KA7DwAAAAAAAAAAAAAAAAAAALvEwU1+/5/6bWjQewc8c275DcW1bfz3405PwK7k/z8UVzna97gGCsj/fygu8Q/FJf6huMQ/FJf4h+IS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBX58+dS5eV5YfXp9L69NXFhdnG1VPTteZsZW5hqjLVmL9SmWk0Zuq1ylRjbrvXqzcaV8YnYuHaWKvWbI01F5cuzDUWLrcuXJqrztQu1NxnEAAAAAAAAAAAAAAAAAAAADo1F5dmq/V6bV5BYUeFcl74c3fsj0J/CoMemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkX8DAAD//yRANW8=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) pwrite64(r0, &(0x7f0000000c80)="32e0a4da5bb7515b0ba94d4ff61edafd948018b9ae3f6394ebd43394a5b692ea28d8291949409514969af4987e", 0x2d, 0xfecc) 3m11.819191921s ago: executing program 45 (id=2170): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbDb9rU2hFBWRQA9WajdN4o8KHupRtFjQe12SbSjZdEt2U5pYsD3YixcpgogF8a53j8V/wL+ioIUiJerBS2Q2M2ma3STbdOsG5/OBCe/tzO6btzPfl+/s22UCKKzR9E8p4sWI+CqJOBwRSbauHNnK0dXtlh9en0qXJFZWPv4jaW+X1vPXyp93MKu8EBG/fBFxstTZbnNxabZar9fms/pYa+7KWHNx6dSluepMbaZ2eWJy8sybkxPvvP1W3/r62vm/v/3o7vtnvjy+/M1P94/cTuJsHOrbq7fdWF8ZjdHsPRmOsxs2HO9vuwOXDHoH2JGhLM6HIx0DDsdQFvXA/9/nEbECFFQi/qGg8jwgv7Zffz1fBA/eW70A6ux/efWzkdjXvjY6sJw8dmWUXu+O9KH9tI2ff79zO11iw+cpAM/SjZsRcbpc7hz/kmz827nTPWyzsQ3jH/x37qb5z+vd8p/SWv4TXfKfg11idye2j//S/T40s6k0/3u3a/67Nmk1MpTVnmvnfMPJxUv1Wjq2PR8RJ2J4b1rfaj7nzPK91Tx7f+e69flfuqTt57lgth/3y3sff850tVV92n7nHtyMeKlr/pusHf+ky/FP34/zPbZxrHbnlc3Wbd//Z2vlh4hXux7/RzNaydbzk2Pt82EsPys6/XXr2K+btT/o/qfHf2jr/o8k6+drm0/exvf7/qlttu6x/kfv5/+e5JN2eU/22LVqqzU/HrEn+bDz8YlHz83r+fZp/08c33r863b+p6H8aY/9v3X0x5d76v+Ajv/0Ex3/Jy/c++Cz7zZrv7fx74126UT2SC/jX687+DTvHQAAAAAAAOw2pYg4FEmpslYulSqV1e93HI0DpXqj2Tp5sbFweTrav5UdieFSPtN9eN33Icaz78Pm9YkN9cmIOBIRXw/tb9crU4369KA7DwAAAAAAAAAAAAAAAAAAALvEwU1+/5/6bWjQewc8c275DcW1bfz3405PwK7k/z8UVzna97gGCsj/fygu8Q/FJf6huMQ/FJf4h+IS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBX58+dS5eV5YfXp9L69NXFhdnG1VPTteZsZW5hqjLVmL9SmWk0Zuq1ylRjbrvXqzcaV8YnYuHaWKvWbI01F5cuzDUWLrcuXJqrztQu1NxnEAAAAAAAAAAAAAAAAAAAADo1F5dmq/V6bV5BYUeFcl74c3fsj0J/CoMemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkX8DAAD//yRANW8=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) pwrite64(r0, &(0x7f0000000c80)="32e0a4da5bb7515b0ba94d4ff61edafd948018b9ae3f6394ebd43394a5b692ea28d8291949409514969af4987e", 0x2d, 0xfecc) 2m54.596744569s ago: executing program 4 (id=2278): link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r2, 0x5000aea5, &(0x7f0000000080)=ANY=[]) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@gid}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}], [{@uid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@euid_lt}, {@subj_type={'subj_type', 0x3d, 'sched_switch\x00'}}, {@fowner_eq}, {@appraise_type}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") 2m54.18072447s ago: executing program 4 (id=2281): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002b14ac5408fd6850a7830010203010918120001e8cf5002090425100008045009"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000084) r7 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsmount(r7, 0x1, 0x9) 2m50.92535975s ago: executing program 4 (id=2292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES64], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xfffffffe}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@orlov}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@inlinecrypt}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@orlov}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@inlinecrypt}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x5, 0x7424}, {0x81, 0x2}]}, 0x14, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80642, 0x85) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000000a400000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006389a67b1bec188111b64f4a97143fcd93f54597fa33dc2171daa7b2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000000a400000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006389a67b1bec188111b64f4a97143fcd93f54597fa33dc2171daa7b2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 2m50.504694062s ago: executing program 4 (id=2295): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000580)=[{{0x3}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}}, {{0x2}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x1, 0x1}}], 0x48) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000180)=0x9, 0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000002000)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000017c0)="a905000000017464000100000000000700e5c06417e436a10699050000003102ab85df5a", 0x24}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x1, [{0x6, 0x5, "ec9a37"}, {0x5, 0x10, "51e3147ce00cf2eb2c678ff540b3"}, {0x1, 0x9, "7f716ae9557470"}, {0x0, 0x5, 'q\x00G'}]}]}}}], 0x40}}], 0x2, 0x40000) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r1]) 2m50.467106596s ago: executing program 4 (id=2298): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000280), 0x2, 0xbc1, &(0x7f00000028c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mmap(&(0x7f000033b000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x4000010, r0, 0x26383000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) timer_create(0x3, &(0x7f0000000100)={0x0, 0xc, 0x0, @tid=r1}, &(0x7f0000000300)=0x0) timer_getoverrun(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffff0f00}}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x28) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @pic={0xa, 0x2, 0x2e, 0x5, 0xff, 0x7, 0x5, 0x7, 0x4, 0x4, 0x5, 0x2, 0xae, 0x3, 0xe, 0x4}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) 2m50.336691028s ago: executing program 4 (id=2299): socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000001300)={[{@nomblk_io_submit}, {@nojournal_checksum}, {@norecovery}, {@nobarrier}, {@data_ordered}, {@test_dummy_encryption}, {@nogrpid}, {@debug}], [{@measure}, {@fowner_lt}, {@euid_gt}, {@audit}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x37, 0x31, 0x64, 0x36, 0x3c, 0x66, 0x65], 0x2d, [0x37, 0x61, 0x39], 0x2d, [0x35, 0x66, 0x61, 0x56], 0x2d, [0x3d, 0x65, 0x38, 0x63], 0x2d, [0x38, 0x34, 0x32, 0x65, 0x66, 0x64, 0x61, 0x63]}}}, {@flag='posixacl'}]}, 0xd, 0x607, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="20000000100001072abd7000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r3, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/4083, 0xff3}], 0x2}}], 0x0, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff0501008014000300050001"], 0x118}], 0x1}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) modify_ldt$write(0x1, &(0x7f00000000c0)={0xc11, 0x20000800, 0x1000, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) close(r8) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r6, 0x0, r9, 0x0, 0x5947, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m50.335442939s ago: executing program 46 (id=2299): socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000001300)={[{@nomblk_io_submit}, {@nojournal_checksum}, {@norecovery}, {@nobarrier}, {@data_ordered}, {@test_dummy_encryption}, {@nogrpid}, {@debug}], [{@measure}, {@fowner_lt}, {@euid_gt}, {@audit}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x37, 0x31, 0x64, 0x36, 0x3c, 0x66, 0x65], 0x2d, [0x37, 0x61, 0x39], 0x2d, [0x35, 0x66, 0x61, 0x56], 0x2d, [0x3d, 0x65, 0x38, 0x63], 0x2d, [0x38, 0x34, 0x32, 0x65, 0x66, 0x64, 0x61, 0x63]}}}, {@flag='posixacl'}]}, 0xd, 0x607, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="20000000100001072abd7000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r3, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/4083, 0xff3}], 0x2}}], 0x0, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff0501008014000300050001"], 0x118}], 0x1}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) modify_ldt$write(0x1, &(0x7f00000000c0)={0xc11, 0x20000800, 0x1000, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) close(r8) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r6, 0x0, r9, 0x0, 0x5947, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m0.428794768s ago: executing program 7 (id=2627): socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x8, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) (async) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x2000000000b09c, 0x0) (async) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) (async) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000200000183aff00000000000000000000ffffac1e0001fe8000000000000000000000000000aa87f1fe7800000000fe8000000000000000000000000000aabafa96c7f4feee2f0dc3effbb1b005c48bda740fb7"], 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x38080e4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYBLOB="ca17896408952fe6dbc489347b21550bfd992ea89d845481bf20a5ff4177accd2b9615b5a0"], 0x77, 0x2bd, &(0x7f0000000580)="$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") (async) socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd5000fdcbdf251f000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 2m0.393764212s ago: executing program 7 (id=2628): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_icmp_raw(0x2, 0x3, 0x1) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) (async) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5d114b68, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5d114b68, 0x12, r4, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@wr_crn={0x46, 0x20, {0x8, 0x800000000000000}}, @rdmsr={0x32, 0x18, {0x94}}, @wrmsr={0x1e, 0x20, {0xaf9, 0x1}}, @uexit={0x0, 0x18, 0xffffffffffffff8b}, @cpuid={0x14, 0x18, {0x5, 0x4}}, @rdmsr={0x32, 0x18, {0xbce}}, @wrmsr={0x1e, 0x20, {0x909, 0xfffffffffffffffe}}, @cpuid={0x14, 0x18, {0x1000, 0x9}}, @rdmsr={0x32, 0x18, {0x40}}, @cpuid={0x14, 0x18, {0x2, 0x37}}, @out_dx={0xaa, 0x28, {0x3059, 0x2, 0x8}}, @set_irq_handler={0xbe, 0x20, {0xd4}}, @cpuid={0x14, 0x18, {0xa524, 0xfe0000}}, @in_dx={0x82, 0x20, {0x367c, 0x2}}, @in_dx={0x82, 0x20, {0xf90d, 0x4}}, @set_irq_handler={0xbe, 0x20, {0x18, 0x2}}, @out_dx={0xaa, 0x28, {0x6f54, 0x6, 0xfff}}, @wr_crn={0x46, 0x20, {0x4, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x7}}, @cpuid={0x14, 0x18, {0x81, 0x5}}, @wr_crn={0x46, 0x20, {0x3, 0x8}}, @set_irq_handler={0xbe, 0x20, {0x37, 0x2}}, @in_dx={0x82, 0x20, {0x8c91, 0x1}}, @wr_drn={0x6e, 0x20, {0x3, 0xfffffffffffffffc}}, @wr_drn={0x6e, 0x20, {0x4, 0x1}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x10001}}, @rdmsr={0x32, 0x18, {0xc0000081}}], 0x358}) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@wr_crn={0x46, 0x20, {0x8, 0x800000000000000}}, @rdmsr={0x32, 0x18, {0x94}}, @wrmsr={0x1e, 0x20, {0xaf9, 0x1}}, @uexit={0x0, 0x18, 0xffffffffffffff8b}, @cpuid={0x14, 0x18, {0x5, 0x4}}, @rdmsr={0x32, 0x18, {0xbce}}, @wrmsr={0x1e, 0x20, {0x909, 0xfffffffffffffffe}}, @cpuid={0x14, 0x18, {0x1000, 0x9}}, @rdmsr={0x32, 0x18, {0x40}}, @cpuid={0x14, 0x18, {0x2, 0x37}}, @out_dx={0xaa, 0x28, {0x3059, 0x2, 0x8}}, @set_irq_handler={0xbe, 0x20, {0xd4}}, @cpuid={0x14, 0x18, {0xa524, 0xfe0000}}, @in_dx={0x82, 0x20, {0x367c, 0x2}}, @in_dx={0x82, 0x20, {0xf90d, 0x4}}, @set_irq_handler={0xbe, 0x20, {0x18, 0x2}}, @out_dx={0xaa, 0x28, {0x6f54, 0x6, 0xfff}}, @wr_crn={0x46, 0x20, {0x4, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x7}}, @cpuid={0x14, 0x18, {0x81, 0x5}}, @wr_crn={0x46, 0x20, {0x3, 0x8}}, @set_irq_handler={0xbe, 0x20, {0x37, 0x2}}, @in_dx={0x82, 0x20, {0x8c91, 0x1}}, @wr_drn={0x6e, 0x20, {0x3, 0xfffffffffffffffc}}, @wr_drn={0x6e, 0x20, {0x4, 0x1}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x10001}}, @rdmsr={0x32, 0x18, {0xc0000081}}], 0x358}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000080)={0x1, 0xa, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m0.074078783s ago: executing program 7 (id=2630): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0\x00', 0x0}) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) (async) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) (async) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0400000000000000000000000000002000"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b000000040000000a0000000600000080000000", @ANYRES32=r8, @ANYBLOB="4a8272d3ed57306060b000000000000000000000004600", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="00000000050000000200"/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYRES32=r7, @ANYRES8=r7, @ANYBLOB="d244ccf460343b27887c439b720071969da2331d12c6b113133dad24cfcf9fbad9d5f36a09257ed5f803157f87bab4e470cbf7f30c6ebbd45aefbffa759144822046325de26c573a2d9b3f41dba62e81d0ce24c7232d720230bd2f6754f00441edac5ac15842df96a7eb29f8c0962c2f26fdf715af8f36c592a88bb169964cfb63188a90dfdc6869f2258b39ec011c2e7572a17e3ba8ccb4dbdca6bb25382395550379ede9e9cb9c68b49a22b3d26cac9cd4b69da6be03692d6fa972a789fc9c0979", @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000740)=@req3={0x0, 0xea7, 0x0, 0x8, 0x8, 0x0, 0xbb82}, 0x1c) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='block_plug\x00', r10}, 0x18) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r12, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl2\x00', r3, 0x29, 0x9, 0x7, 0x4, 0x12, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8000, 0x1, 0x0, 0x2f}}) setsockopt$inet6_int(r12, 0x29, 0x24, &(0x7f0000000080)=0xcd6, 0x4) (async) sendto$unix(r12, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$sock_int(r11, 0x1, 0x3d, &(0x7f0000000000)=0x8, 0x4) 2m0.01272526s ago: executing program 7 (id=2631): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040), 0xfe, 0x249, &(0x7f0000000800)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x3f1, 0x0, 0x20}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a0000000800", @ANYRES32=r2], 0x1c}}, 0x40) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000000fc0)=""/4105, 0x0, 0xc}, 0x94) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lstat(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000b50000000000000004000000000000"], 0x0, 0x26}, 0x28) 1m59.754314245s ago: executing program 7 (id=2633): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0) openat$incfs(r0, &(0x7f00000004c0)='.pending_reads\x00', 0x1, 0x140) 1m59.332242846s ago: executing program 7 (id=2635): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m59.223522147s ago: executing program 47 (id=2635): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.776333856s ago: executing program 8 (id=3559): r0 = socket(0x22, 0x2, 0x3) unshare(0x2040400) getsockopt$packet_buf(r0, 0x107, 0xd, 0x0, 0x0) 1.771891995s ago: executing program 8 (id=3561): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r0, 0x1, 0x70bd26, 0x1, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) 1.712305232s ago: executing program 8 (id=3564): unshare(0x2c020400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, 0x0, 0x0) 1.711276501s ago: executing program 8 (id=3565): unshare(0x22020400) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x1, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0xfffffffd, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x11ffff, 0x3, 0x3, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf5c, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0xffffffff, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x8, 0x6, 0x4, 0x10080, 0x5, 0x80000008, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.686911994s ago: executing program 8 (id=3566): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x8002) 1.616667891s ago: executing program 8 (id=3568): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f00000014c0)=ANY=[@ANYBLOB="000503000000c16b0398b497542c7507923f0e378808ddd5f7f5cf"], 0x0, 0x0}) 721.562139ms ago: executing program 1 (id=3618): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x24020400) setsockopt(r0, 0xff, 0x6, &(0x7f0000000000)="fa794bfa", 0x4) 698.193291ms ago: executing program 1 (id=3620): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r1, 0x0, 0x22) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)={0x40, 0x10, 0x4, "6fad9531"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x97) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="100025bd7000fcdbd7250200000014002580050005008000000045000500ac00000008006200b109000008006900faffffff08000a0101000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) close(0x3) r6 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc000) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 208.00175ms ago: executing program 3 (id=3635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 207.81949ms ago: executing program 2 (id=3637): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff005}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/180, 0xb4}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000004e40)=""/4117, 0x1015}], 0x3}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000003e00)=""/4095, 0xfff}, {&(0x7f0000002e00)=""/4078, 0xfee}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f00000003c0)=""/112, 0x70}], 0x7}, 0x200}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x10122, 0x0) 207.73627ms ago: executing program 3 (id=3638): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8941, 0x0) 156.742645ms ago: executing program 9 (id=3639): syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 156.541535ms ago: executing program 3 (id=3640): r0 = socket$inet6(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 156.267955ms ago: executing program 9 (id=3641): r0 = socket$inet6(0xa, 0x3, 0x5) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0xa}) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 153.777305ms ago: executing program 3 (id=3642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a3200000000090001"], 0xc4}}, 0x0) 150.858425ms ago: executing program 1 (id=3643): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 147.634726ms ago: executing program 2 (id=3644): syz_emit_ethernet(0x5a, &(0x7f0000001440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x2, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0xb, 0x77, [@multicast1, @loopback]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x28}}}}}}, 0x0) 92.763471ms ago: executing program 9 (id=3645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 92.457621ms ago: executing program 2 (id=3646): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x7, 0xf, 0x200, 0x3, "d4f7c140b3e4980c877bc2c74cfde972ea7f67f827f551373efb59b25f216055"}) 92.348891ms ago: executing program 3 (id=3647): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4) 92.274321ms ago: executing program 9 (id=3648): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/123, 0x7b}, 0x1}], 0x1, 0x20102, 0x0) 92.196481ms ago: executing program 3 (id=3649): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10001) 91.975751ms ago: executing program 2 (id=3650): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 73.718243ms ago: executing program 1 (id=3651): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) close(0x3) 73.505393ms ago: executing program 9 (id=3652): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002e40)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x1000, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x0, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc8edf531dbea5038}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044000) 57.288055ms ago: executing program 1 (id=3653): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="7f", 0x1}], 0x1, 0x11, 0x0) 790.671µs ago: executing program 2 (id=3654): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x510) 427.46µs ago: executing program 9 (id=3655): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) accept$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 258.721µs ago: executing program 2 (id=3656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c30110000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @empty, 0xfff}, 0x1c) shutdown(r0, 0x0) 0s ago: executing program 1 (id=3657): unshare(0x2c020400) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000340)={0x1, &(0x7f0000000440)=[{0x7ff, 0x7, &(0x7f0000000000)="09d7f4ed508bdc", 0x1, 0x1}]}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): T445] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 612.066705][T11199] netlink: 'syz.1.2704': attribute type 5 has an invalid length. [ 612.119380][ T630] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.130675][ T630] usb 10-1: config 0 has no interface number 0 [ 612.143798][ T630] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.167923][ T630] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.189002][ T630] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.202775][ T630] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 612.213272][ T630] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.223323][ T630] usb 10-1: config 0 descriptor?? [ 612.309013][ T445] usb 9-1: Using ep0 maxpacket: 16 [ 612.739284][ T445] usb 9-1: config 4 has an invalid interface number: 51 but max is 0 [ 612.750642][ T445] usb 9-1: config 4 has no interface number 0 [ 612.768485][ T445] usb 9-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 612.784368][ T445] usb 9-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 612.794822][ T445] usb 9-1: config 4 interface 51 has no altsetting 0 [ 612.900806][T11183] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 612.969162][ T445] usb 9-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 613.012654][ T445] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.030963][ T445] usb 9-1: Product: syz [ 613.039703][ T445] usb 9-1: Manufacturer: syz [ 613.695319][T11227] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 614.262799][ T445] usb 9-1: SerialNumber: syz [ 614.289271][T11193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 614.296418][T11193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 614.310524][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2715'. [ 614.480806][T11246] EXT4-fs (loop3): Ignoring removed nobh option [ 614.494549][T11246] EXT4-fs (loop3): Ignoring removed bh option [ 614.500851][T11246] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 614.518294][T11193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 614.525419][ T24] kauditd_printk_skb: 429 callbacks suppressed [ 614.525433][ T24] audit: type=1400 audit(2000000324.258:43536): avc: denied { ioctl } for pid=11192 comm="syz.8.2702" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.531026][T11193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 614.532897][ T24] audit: type=1400 audit(2000000324.278:43537): avc: denied { ioctl } for pid=11192 comm="syz.8.2702" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.593408][ T445] cdc_eem 9-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.8-1, CDC EEM Device, f6:08:f9:32:d6:84 [ 614.605715][T11246] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock, [ 614.637083][ T24] audit: type=1400 audit(2000000324.368:43538): avc: denied { map_create } for pid=11251 comm="syz.2.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.656729][ T24] audit: type=1400 audit(2000000324.368:43539): avc: denied { bpf } for pid=11251 comm="syz.2.2721" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.682819][ T24] audit: type=1400 audit(2000000324.368:43540): avc: denied { map_write } for pid=11251 comm="syz.2.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.702670][ T24] audit: type=1400 audit(2000000324.368:43541): avc: denied { prog_load } for pid=11251 comm="syz.2.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.722532][ T24] audit: type=1400 audit(2000000324.368:43542): avc: denied { perfmon } for pid=11251 comm="syz.2.2721" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.744127][ T24] audit: type=1400 audit(2000000324.368:43543): avc: denied { prog_run } for pid=11251 comm="syz.2.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.763828][ T24] audit: type=1400 audit(2000000324.378:43544): avc: denied { mount } for pid=11244 comm="syz.3.2718" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 614.786129][ T24] audit: type=1400 audit(2000000324.378:43545): avc: denied { read write } for pid=11244 comm="syz.3.2718" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 614.821567][ T445] usb 9-1: USB disconnect, device number 24 [ 614.828539][ T445] cdc_eem 9-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.8-1, CDC EEM Device [ 615.210777][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2723'. [ 615.220116][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2723'. [ 615.463382][T11273] overlayfs: failed to clone upperpath [ 615.699349][ T630] usbhid 10-1:0.1: can't add hid device: -71 [ 615.707866][ T630] usbhid: probe of 10-1:0.1 failed with error -71 [ 615.728306][ T630] usb 10-1: USB disconnect, device number 27 [ 615.772024][T11278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 615.789630][T11278] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.827107][T11278] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 615.845108][T11278] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.2728: mark_inode_dirty error [ 615.862624][T11278] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 615.862715][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2727'. [ 615.881708][T11278] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.2728: mark_inode_dirty error [ 615.919479][T11278] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 615.941035][T11278] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 615.960510][T11278] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.2728: mark_inode_dirty error [ 615.974239][T11278] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 615.984978][T11299] EXT4-fs error (device loop3): ext4_get_first_dir_block:3719: inode #18: comm syz.3.2728: directory missing '.' [ 615.998490][T11299] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 616.007782][T11299] EXT4-fs error (device loop3): ext4_setent:3818: inode #2: comm syz.3.2728: mark_inode_dirty error [ 616.369021][ T630] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 616.553293][T11304] F2FS-fs (loop9): invalid crc value [ 616.561922][T11304] F2FS-fs (loop9): Found nat_bits in checkpoint [ 616.591674][T11304] F2FS-fs (loop9): Cannot turn on quotas: -2 on 0 [ 616.604006][T11304] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 616.739119][ T630] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 616.748639][ T630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.760111][ T630] usb 4-1: config 0 descriptor?? [ 616.919673][ T630] usb 4-1: unsupported MDLM descriptors [ 617.054633][ T9180] handle_bad_sector: 12548 callbacks suppressed [ 617.054647][ T9180] attempt to access beyond end of device [ 617.054647][ T9180] loop9: rw=2049, want=45104, limit=40427 [ 617.123038][ T630] usb 4-1: USB disconnect, device number 35 [ 617.221769][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 617.303302][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2745'. [ 617.388629][T11356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11356 comm=syz.8.2748 [ 617.407359][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2748'. [ 617.461700][T11364] cgroup: noprefix used incorrectly [ 617.950957][T11405] EXT4-fs (loop9): Ignoring removed orlov option [ 617.957393][T11405] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 618.104594][T11405] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,discard,barrier=0x0000000000000009,data_err=ignore,grpquota,orlov,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 619.119133][ T445] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 619.929004][ T24] kauditd_printk_skb: 569 callbacks suppressed [ 619.929018][ T24] audit: type=1400 audit(2000000329.038:44115): avc: denied { read } for pid=11444 comm="syz.3.2772" dev="nsfs" ino=4026532365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 619.965574][ T24] audit: type=1400 audit(2000000329.038:44116): avc: denied { open } for pid=11444 comm="syz.3.2772" path="net:[4026532365]" dev="nsfs" ino=4026532365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 619.991916][ T24] audit: type=1400 audit(2000000329.038:44117): avc: denied { create } for pid=11444 comm="syz.3.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 620.012849][ T24] audit: type=1400 audit(2000000329.038:44118): avc: denied { ioctl } for pid=11444 comm="syz.3.2772" path="socket:[56218]" dev="sockfs" ino=56218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 620.039185][ T24] audit: type=1400 audit(2000000329.038:44119): avc: denied { module_request } for pid=11444 comm="syz.3.2772" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 620.121205][ T24] audit: type=1400 audit(2000000329.088:44120): avc: denied { map_create } for pid=11445 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 620.140868][ T24] audit: type=1400 audit(2000000329.088:44121): avc: denied { map_read map_write } for pid=11445 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 620.161877][ T24] audit: type=1400 audit(2000000329.098:44122): avc: denied { execmem } for pid=11448 comm="syz.9.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 620.182767][ T24] audit: type=1400 audit(2000000329.298:44123): avc: denied { prog_load } for pid=11444 comm="syz.3.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 620.202682][ T445] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.211089][ T445] usb 9-1: config 0 has no interface number 0 [ 620.217553][ T445] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.241530][ T24] audit: type=1400 audit(2000000329.298:44124): avc: denied { bpf } for pid=11444 comm="syz.3.2772" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 620.262996][ T445] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.280880][ T445] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 620.291055][ T445] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.301035][ T445] usb 9-1: config 0 descriptor?? [ 620.783598][ T445] prodikeys 0003:041E:2801.003D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.8-1/input1 [ 620.802738][ T445] hid_prodikeys: hid-prodikeys: failed to find output report [ 620.802738][ T445] [ 621.006484][T11429] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2767'. [ 621.015759][T11429] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2767'. [ 621.026537][ T3034] usb 9-1: USB disconnect, device number 25 [ 621.214956][ T5230] kernel write not supported for file bpf-prog (pid: 5230 comm: kworker/1:46) [ 621.280601][T11495] bridge0: port 3(dummy0) entered blocking state [ 621.289016][T11495] bridge0: port 3(dummy0) entered disabled state [ 621.306305][T11495] device dummy0 entered promiscuous mode [ 621.312639][T11495] bridge0: port 3(dummy0) entered blocking state [ 621.319049][T11495] bridge0: port 3(dummy0) entered forwarding state [ 621.562847][T11482] F2FS-fs (loop9): fault_injection options not supported [ 621.660442][T11482] F2FS-fs (loop9): invalid crc value [ 621.674222][T11482] F2FS-fs (loop9): Found nat_bits in checkpoint [ 621.800412][T11482] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 621.859323][T11482] overlayfs: './file0' not a directory [ 621.889951][ T9180] attempt to access beyond end of device [ 621.889951][ T9180] loop9: rw=2049, want=45120, limit=40427 [ 622.159067][ T3034] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 622.311065][T11537] EXT4-fs (loop9): Ignoring removed orlov option [ 622.321158][T11537] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 622.365086][T11537] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 622.492690][T11537] netlink: 'syz.9.2795': attribute type 12 has an invalid length. [ 622.512912][T11537] netlink: 'syz.9.2795': attribute type 29 has an invalid length. [ 622.538832][T11537] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2795'. [ 622.591347][ T3034] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.603767][ T3034] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.614988][ T3034] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 622.869303][ T3034] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.880898][ T3034] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.896639][ T3034] usb 9-1: Product: syz [ 622.904681][ T3034] usb 9-1: Manufacturer: syz [ 622.909922][ T3034] usb 9-1: SerialNumber: syz [ 622.939241][T11523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 622.959723][ T3034] usb 9-1: selecting invalid altsetting 1 [ 623.641374][ T3034] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 623.654278][ T3034] cdc_ncm 9-1:1.0: bind() failure [ 623.886907][ T3034] usb 9-1: USB disconnect, device number 26 [ 623.932391][T11603] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2812'. [ 623.990746][T11608] EXT4-fs (loop3): Test dummy encryption mode enabled [ 623.999535][T11608] EXT4-fs (loop3): unsupported descriptor size 255 [ 624.226173][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2819'. [ 624.279015][ T445] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 624.409147][ T5230] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 624.769103][ T5230] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 624.780544][ T5230] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 624.791972][ T5230] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 624.801098][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.839356][T11608] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 624.909109][ T445] usb 10-1: device descriptor read/64, error -71 [ 625.054792][ T24] kauditd_printk_skb: 572 callbacks suppressed [ 625.054805][ T24] audit: type=1400 audit(2000000334.798:44697): avc: denied { prog_load } for pid=11637 comm="syz.1.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 625.092718][ T24] audit: type=1400 audit(2000000334.828:44698): avc: denied { ioctl } for pid=11613 comm="syz.9.2816" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.119985][ T24] audit: type=1400 audit(2000000334.828:44699): avc: denied { prog_load } for pid=11607 comm="syz.3.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 625.140108][ T24] audit: type=1400 audit(2000000334.868:44700): avc: denied { bpf } for pid=11607 comm="syz.3.2814" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 625.161518][ T24] audit: type=1400 audit(2000000334.868:44701): avc: denied { bpf } for pid=11637 comm="syz.1.2824" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 625.188882][ T24] audit: type=1400 audit(2000000334.868:44702): avc: denied { ioctl } for pid=11607 comm="syz.3.2814" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.221884][ T24] audit: type=1400 audit(2000000334.868:44703): avc: denied { bpf } for pid=11637 comm="syz.1.2824" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 625.244702][ T24] audit: type=1400 audit(2000000334.868:44704): avc: denied { perfmon } for pid=11637 comm="syz.1.2824" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 625.266917][ T24] audit: type=1400 audit(2000000334.888:44705): avc: denied { ioctl } for pid=11613 comm="syz.9.2816" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.292788][ T24] audit: type=1400 audit(2000000334.908:44706): avc: denied { ioctl } for pid=11613 comm="syz.9.2816" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.329017][ T445] usb 10-1: device descriptor read/64, error -71 [ 625.658998][ T445] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 625.938987][ T445] usb 10-1: device descriptor read/64, error -71 [ 626.161955][T11652] xt_bpf: check failed: parse error [ 626.339098][ T445] usb 10-1: device descriptor read/64, error -71 [ 626.459188][ T445] usb usb10-port1: attempt power cycle [ 626.878992][ T445] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 626.959046][ T5230] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 626.970264][ T5230] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input64 [ 627.017361][ T5230] usb 4-1: USB disconnect, device number 36 [ 627.023503][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 627.059071][ T445] usb 10-1: device descriptor read/8, error -71 [ 627.579243][ T445] usb 10-1: device descriptor read/8, error -71 [ 627.670472][T11673] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 627.677107][T11673] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 627.690461][T11673] F2FS-fs (loop3): invalid crc value [ 627.838714][T11673] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 628.044403][T11673] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 628.052117][T11673] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 628.429832][T11713] syz.2.2843[11713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.529465][T11718] hub 9-0:1.0: USB hub found [ 628.631682][T11718] hub 9-0:1.0: 1 port detected [ 628.677334][T11723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=11723 comm=syz.2.2847 [ 628.703213][T11723] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 628.719779][T11723] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 628.742556][T11723] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 628.851970][T11733] kvm [11732]: vcpu2, guest rIP: 0x9132 ignored wrmsr: 0x11e data 0xbe702111 [ 629.592774][T11743] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 629.610570][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 629.694445][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 629.866719][T11762] 9pnet: Insufficient options for proto=fd [ 630.229268][ T24] kauditd_printk_skb: 555 callbacks suppressed [ 630.229458][ T24] audit: type=1400 audit(2000000339.898:45262): avc: denied { prog_load } for pid=11772 comm="syz.8.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 630.333012][T11756] netlink: 102 bytes leftover after parsing attributes in process `syz.2.2852'. [ 630.356953][ T24] audit: type=1400 audit(2000000339.898:45263): avc: denied { bpf } for pid=11772 comm="syz.8.2859" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 630.378231][ T24] audit: type=1400 audit(2000000339.898:45264): avc: denied { perfmon } for pid=11772 comm="syz.8.2859" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 630.400947][ T24] audit: type=1400 audit(2000000339.908:45265): avc: denied { prog_run } for pid=11772 comm="syz.8.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 630.421860][ T24] audit: type=1400 audit(2000000339.948:45266): avc: denied { read write } for pid=11759 comm="syz.9.2855" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.446530][ T24] audit: type=1400 audit(2000000339.948:45267): avc: denied { open } for pid=11759 comm="syz.9.2855" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.470837][ T24] audit: type=1400 audit(2000000339.958:45268): avc: denied { ioctl } for pid=11759 comm="syz.9.2855" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.496595][ T24] audit: type=1400 audit(2000000340.058:45269): avc: denied { create } for pid=11747 comm="syz.2.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 630.517820][ T5224] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 630.517858][ T24] audit: type=1400 audit(2000000340.068:45270): avc: denied { write } for pid=11747 comm="syz.2.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 630.547295][ T24] audit: type=1400 audit(2000000340.168:45271): avc: denied { unmount } for pid=9669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 630.669224][T11786] overlayfs: failed to resolve './file0': -2 [ 630.759261][ T5224] usb 10-1: Using ep0 maxpacket: 16 [ 631.034273][ T5224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.068573][ T5224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.127611][ T5224] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.176771][ T5224] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.195204][ T5224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.211464][ T5224] usb 10-1: config 0 descriptor?? [ 631.570261][T11800] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 631.668997][ T3034] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 631.730240][ T5224] microsoft 0003:045E:07DA.003E: ignoring exceeding usage max [ 631.749674][ T5224] microsoft 0003:045E:07DA.003E: item fetching failed at offset 30/34 [ 631.758360][ T5224] microsoft 0003:045E:07DA.003E: parse failed [ 631.765810][ T5224] microsoft: probe of 0003:045E:07DA.003E failed with error -22 [ 631.841442][ T5] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 631.909003][ T3034] usb 4-1: Using ep0 maxpacket: 32 [ 631.987150][ T298] usb 10-1: USB disconnect, device number 32 [ 632.029221][ T3034] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 632.037566][ T3034] usb 4-1: config 0 has no interface number 0 [ 632.044608][ T3034] usb 4-1: config 0 interface 2 has no altsetting 0 [ 632.209284][ T3034] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 632.218821][ T3034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.227460][ T3034] usb 4-1: Product: syz [ 632.232105][ T3034] usb 4-1: Manufacturer: syz [ 632.237069][ T3034] usb 4-1: SerialNumber: syz [ 632.245079][ T3034] usb 4-1: config 0 descriptor?? [ 632.398418][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 632.407578][T11821] 8021q: VLANs not supported on lo [ 632.427110][T11821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11821 comm=syz.2.2873 [ 632.440025][T11821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11821 comm=syz.2.2873 [ 632.573168][ T3034] usb 4-1: USB disconnect, device number 37 [ 632.759012][T11834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 632.778360][T11834] System zones: 0-2, 18-18, 34-34 [ 632.784586][T11834] EXT4-fs (loop9): orphan cleanup on readonly fs [ 632.793026][T11834] EXT4-fs error (device loop9): ext4_orphan_get:1421: comm syz.9.2877: bad orphan inode 13 [ 632.810291][T11834] ext4_test_bit(bit=12, block=18) = 1 [ 632.816978][T11834] is_bad_inode(inode)=0 [ 632.824035][T11834] NEXT_ORPHAN(inode)=2130706432 [ 632.829219][T11834] max_ino=32 [ 632.832436][T11834] i_nlink=1 [ 632.835668][T11834] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue [ 632.864041][T11848] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2880'. [ 633.087681][T11852] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2882'. [ 633.119002][ T445] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 633.134691][T11862] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2884'. [ 633.149414][ T3034] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 633.188210][T11867] incfs: mount failed -22 [ 633.479042][ T445] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 633.490343][ T445] usb 10-1: config 0 has no interface number 0 [ 633.497154][ T445] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.508271][ T445] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.551587][ T3034] usb 4-1: config 0 has an invalid interface number: 186 but max is 1 [ 633.559877][ T445] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 633.569049][ T3034] usb 4-1: config 0 has no interface number 1 [ 633.575264][ T445] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.593591][ T445] usb 10-1: config 0 descriptor?? [ 633.703521][T11899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2895'. [ 633.729076][ T3034] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 633.748999][ T3034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.758918][ T3034] usb 4-1: Product: syz [ 633.763152][ T3034] usb 4-1: Manufacturer: syz [ 633.767766][ T3034] usb 4-1: SerialNumber: syz [ 633.790961][ T3034] usb 4-1: config 0 descriptor?? [ 634.033357][ T3034] usb 4-1: USB disconnect, device number 38 [ 634.427553][T11834] netlink: 124 bytes leftover after parsing attributes in process `syz.9.2877'. [ 634.453250][T11834] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2877'. [ 634.904614][ T445] prodikeys 0003:041E:2801.003F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.9-1/input1 [ 634.929246][ T445] hid_prodikeys: hid-prodikeys: failed to find output report [ 634.929246][ T445] [ 634.930476][T11925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2903'. [ 634.948454][T11925] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 634.960269][ T445] usb 10-1: USB disconnect, device number 33 [ 635.187391][T11934] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 635.247877][ T24] kauditd_printk_skb: 638 callbacks suppressed [ 635.247900][ T24] audit: type=1400 audit(2000000344.988:45910): avc: denied { mounton } for pid=11924 comm="syz.3.2902" path="/105/bus" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 635.300312][T11931] exfat: Deprecated parameter 'namecase' [ 635.342447][T11931] exfat: Deprecated parameter 'namecase' [ 635.394814][T11931] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000002, checksum : 0x1119abd0) [ 635.405190][ T24] audit: type=1400 audit(2000000345.138:45911): avc: denied { unmount } for pid=9180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 635.424994][T11931] exFAT-fs (loop3): invalid boot region [ 635.430615][T11931] exFAT-fs (loop3): failed to recognize exfat type [ 635.459607][ T24] audit: type=1400 audit(2000000345.208:45912): avc: denied { read write } for pid=11924 comm="syz.3.2902" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.484118][ T24] audit: type=1400 audit(2000000345.208:45913): avc: denied { open } for pid=11924 comm="syz.3.2902" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.511181][ T24] audit: type=1400 audit(2000000345.208:45914): avc: denied { map_create } for pid=11891 comm="syz.8.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 635.531211][ T24] audit: type=1400 audit(2000000345.208:45915): avc: denied { map_read map_write } for pid=11891 comm="syz.8.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 635.552133][ T24] audit: type=1400 audit(2000000345.208:45916): avc: denied { prog_load } for pid=11891 comm="syz.8.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 635.572079][ T24] audit: type=1400 audit(2000000345.208:45917): avc: denied { bpf } for pid=11891 comm="syz.8.2892" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 635.594302][ T24] audit: type=1400 audit(2000000345.208:45918): avc: denied { bpf } for pid=11891 comm="syz.8.2892" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 635.615494][ T24] audit: type=1400 audit(2000000345.208:45919): avc: denied { perfmon } for pid=11891 comm="syz.8.2892" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 635.817055][T11949] syz.3.2908[11949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.817122][T11949] syz.3.2908[11949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 636.009017][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 636.112049][T11949] syz.3.2908[11949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 636.113313][T11949] syz.3.2908[11949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.012255][T11951] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 637.283384][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2916'. [ 638.311292][T12003] overlayfs: upper fs does not support tmpfile. [ 638.348460][T12003] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 638.491808][T12003] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 638.513644][T12003] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 638.534641][T12003] SELinux: (dev overlay, type overlay) has no security xattr handler [ 639.131115][T12012] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 639.151982][T12012] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 639.162403][T12012] EXT4-fs (loop3): 1 truncate cleaned up [ 639.173367][T12012] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,barrier=0x0000000000000008,sysvgroups,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 639.197793][ T9427] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:7: Failed to release dquot type 1 [ 639.224731][T12020] overlayfs: failed to clone upperpath [ 639.230388][T12012] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 639.620847][T12039] cgroup: noprefix used incorrectly [ 639.895802][ T3034] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 640.181733][T12050] device veth4 entered promiscuous mode [ 640.248937][ T24] kauditd_printk_skb: 337 callbacks suppressed [ 640.248949][ T24] audit: type=1400 audit(2000000349.988:46256): avc: denied { create } for pid=12051 comm="syz.9.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 640.275267][ T24] audit: type=1400 audit(2000000349.998:46257): avc: denied { read } for pid=12051 comm="syz.9.2935" path="socket:[59536]" dev="sockfs" ino=59536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 640.300688][ T24] audit: type=1400 audit(2000000350.008:46258): avc: denied { ioctl } for pid=12028 comm="syz.2.2928" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 640.326455][ T24] audit: type=1400 audit(2000000350.048:46259): avc: denied { ioctl } for pid=12028 comm="syz.2.2928" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 640.327299][T12054] syz.3.2934[12054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.352071][T12054] syz.3.2934[12054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.374770][ T3034] usb 3-1: unable to get BOS descriptor or descriptor too short [ 640.395632][ T24] audit: type=1400 audit(2000000350.048:46260): avc: denied { prog_load } for pid=12049 comm="syz.3.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 640.416317][ T24] audit: type=1400 audit(2000000350.068:46261): avc: denied { bpf } for pid=12049 comm="syz.3.2934" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.444747][ T24] audit: type=1400 audit(2000000350.068:46262): avc: denied { perfmon } for pid=12049 comm="syz.3.2934" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.466233][ T24] audit: type=1400 audit(2000000350.068:46263): avc: denied { bpf } for pid=12049 comm="syz.3.2934" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.466254][ T24] audit: type=1400 audit(2000000350.068:46264): avc: denied { perfmon } for pid=12049 comm="syz.3.2934" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.466274][ T24] audit: type=1400 audit(2000000350.108:46265): avc: denied { create } for pid=12049 comm="syz.3.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.487742][ T3034] usb 3-1: config 176 has an invalid interface number: 218 but max is 0 [ 640.536002][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2937'. [ 640.548008][ T3034] usb 3-1: config 176 has no interface number 0 [ 640.554501][ T3034] usb 3-1: config 176 interface 218 has no altsetting 0 [ 640.729598][ T3034] usb 3-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 640.739014][ T3034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.747622][ T3034] usb 3-1: Product: syz [ 640.751955][ T3034] usb 3-1: Manufacturer: syz [ 640.756680][ T3034] usb 3-1: SerialNumber: syz [ 640.999010][ T5202] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 641.049733][T12086] device batadv_slave_1 entered promiscuous mode [ 641.056613][T12086] device batadv_slave_1 left promiscuous mode [ 641.070167][ T3034] ipheth 3-1:176.218: Unable to find alternate settings interface [ 641.080084][ T3034] usb 3-1: USB disconnect, device number 26 [ 641.082354][T12091] x_tables: ip_tables: hashlimit.1 match: invalid size 56 (kernel) != (user) 616 [ 641.359071][ T5202] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 641.367414][ T5202] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 641.376602][ T5202] usb 9-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 641.385730][ T5202] usb 9-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 641.396060][ T5202] usb 9-1: config 220 has no interface number 2 [ 641.402486][ T5202] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 641.415718][ T5202] usb 9-1: config 220 interface 0 has no altsetting 0 [ 641.422828][ T5202] usb 9-1: config 220 interface 76 has no altsetting 0 [ 641.429906][ T5202] usb 9-1: config 220 interface 1 has no altsetting 0 [ 641.521449][T12093] overlayfs: unrecognized mount option "verity=on" or missing value [ 641.629069][ T5202] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 641.636009][T12097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2947'. [ 641.638606][ T5202] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.795269][ T5202] usb 9-1: Product: syz [ 641.799777][ T5202] usb 9-1: Manufacturer: syz [ 641.805465][ T5202] usb 9-1: SerialNumber: syz [ 642.491594][T12109] syz.2.2951[12109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.491651][T12109] syz.2.2951[12109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.506187][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 642.629221][ T5202] uvcvideo: Unknown video format 6899a984-98c8-4c84-a844-c4c6955b5fc0 [ 642.637656][ T5202] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 642.644379][ T5202] uvcvideo: No valid video chain found. [ 642.650220][ T5202] usb 9-1: selecting invalid altsetting 0 [ 642.683587][T12111] device veth6 entered promiscuous mode [ 642.750715][ T5202] usb 9-1: USB disconnect, device number 27 [ 642.989019][ T3034] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 643.017626][T12131] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2958'. [ 643.123108][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2961'. [ 643.599076][ T3034] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.769197][ T3034] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 643.778705][ T3034] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.787022][ T3034] usb 10-1: Product: syz [ 643.791452][ T3034] usb 10-1: Manufacturer: syz [ 643.796199][ T3034] usb 10-1: SerialNumber: syz [ 643.991827][ T3034] usb 10-1: config 0 descriptor?? [ 644.009042][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 644.021602][T12157] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2965'. [ 644.113685][T12161] syz.2.2968[12161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.113751][T12161] syz.2.2968[12161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.249128][ T3034] snd-usb-audio: probe of 10-1:0.0 failed with error -2 [ 644.278664][ T3034] usb 10-1: USB disconnect, device number 34 [ 644.855515][T12185] device bridge_slave_0 left promiscuous mode [ 644.862301][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.923204][T12185] device bridge_slave_1 left promiscuous mode [ 644.930489][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.480707][T12201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.514520][ T24] kauditd_printk_skb: 513 callbacks suppressed [ 645.514533][ T24] audit: type=1400 audit(2000000355.098:46779): avc: denied { map_create } for pid=12188 comm="syz.2.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 645.541043][ T24] audit: type=1400 audit(2000000355.098:46780): avc: denied { map_read map_write } for pid=12188 comm="syz.2.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 645.562606][ T24] audit: type=1400 audit(2000000355.098:46781): avc: denied { prog_load } for pid=12188 comm="syz.2.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 645.582840][ T24] audit: type=1400 audit(2000000355.108:46782): avc: denied { bpf } for pid=12188 comm="syz.2.2976" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 645.604215][ T24] audit: type=1400 audit(2000000355.108:46783): avc: denied { perfmon } for pid=12188 comm="syz.2.2976" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 645.626485][ T24] audit: type=1400 audit(2000000355.108:46784): avc: denied { prog_run } for pid=12188 comm="syz.2.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 645.646244][ T24] audit: type=1400 audit(2000000355.268:46785): avc: denied { create } for pid=12199 comm="syz.8.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.666907][ T24] audit: type=1400 audit(2000000355.308:46786): avc: denied { execmem } for pid=12203 comm="syz.3.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 645.692812][ T24] audit: type=1400 audit(2000000355.438:46787): avc: denied { read write } for pid=12199 comm="syz.8.2980" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.717728][ T24] audit: type=1400 audit(2000000355.438:46788): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.760166][T12206] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2979'. [ 645.770512][T12207] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2979'. [ 645.982194][T12222] bridge_slave_0: mtu greater than device maximum [ 646.418847][T12232] netlink: 'syz.9.2988': attribute type 12 has an invalid length. [ 646.490588][T12235] device ip6tnl1 entered promiscuous mode [ 646.856753][T12255] fuse: Bad value for 'user_id' [ 646.908991][ T5184] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 647.189132][ T5184] usb 9-1: Using ep0 maxpacket: 16 [ 647.349753][ T5184] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.387916][ T5184] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.414283][ T5184] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 647.427182][ T5184] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.452476][ T5184] usb 9-1: config 0 descriptor?? [ 647.903077][T12250] udc-core: couldn't find an available UDC or it's busy [ 647.917915][T12250] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 648.039043][ T445] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 648.259295][ T5184] usbhid 9-1:0.0: can't add hid device: -71 [ 648.276329][ T5184] usbhid: probe of 9-1:0.0 failed with error -71 [ 648.293425][ T5184] usb 9-1: USB disconnect, device number 28 [ 649.077715][ T5184] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 649.349041][ T5184] usb 3-1: Using ep0 maxpacket: 16 [ 649.468967][ T445] usb 10-1: Using ep0 maxpacket: 8 [ 649.519102][ T5184] usb 3-1: config 7 has an invalid interface number: 163 but max is 0 [ 649.528493][ T5184] usb 3-1: config 7 has no interface number 0 [ 649.589023][ T445] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 649.597497][ T445] usb 10-1: config 179 has no interface number 0 [ 649.618993][ T445] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 649.638980][ T445] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 649.658974][ T445] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 649.688969][ T445] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 649.708964][ T445] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 649.709228][ T5184] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ce.47 [ 649.722525][ T445] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 649.740785][ T445] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.755547][ T5184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.764097][ T5184] usb 3-1: Product: syz [ 649.768492][ T5184] usb 3-1: Manufacturer: syz [ 649.773949][ T5184] usb 3-1: SerialNumber: syz [ 649.779331][T12281] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 649.942502][T12312] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3015'. [ 650.039722][ T445] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input67 [ 650.080730][ T5184] usb_ehset_test: probe of 3-1:7.163 failed with error -32 [ 650.090119][ T5184] usb 3-1: USB disconnect, device number 27 [ 650.134933][T12317] bridge0: port 3(gretap0) entered blocking state [ 650.142157][T12317] bridge0: port 3(gretap0) entered disabled state [ 650.222120][T12317] bridge0: port 3(gretap0) entered blocking state [ 650.228637][T12317] bridge0: port 3(gretap0) entered forwarding state [ 650.244658][T12319] bridge0: port 3(gretap0) entered disabled state [ 650.297319][T12281] udc-core: couldn't find an available UDC or it's busy [ 650.316194][T12281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.445488][T12322] 9pnet: Insufficient options for proto=fd [ 650.520917][ T24] kauditd_printk_skb: 547 callbacks suppressed [ 650.520931][ T24] audit: type=1400 audit(2000000360.238:47336): avc: denied { execmem } for pid=12323 comm="syz.3.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 650.564376][ T24] audit: type=1326 audit(2000000360.308:47337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12280 comm="syz.9.3005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40b9421fc9 code=0x0 [ 650.699416][ T24] audit: type=1400 audit(2000000360.418:47338): avc: denied { create } for pid=12323 comm="syz.3.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 650.809986][ T24] audit: type=1400 audit(2000000360.418:47339): avc: denied { prog_load } for pid=12323 comm="syz.3.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 650.862836][ T24] audit: type=1400 audit(2000000360.418:47340): avc: denied { bpf } for pid=12323 comm="syz.3.3019" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 650.885124][ T24] audit: type=1400 audit(2000000360.418:47341): avc: denied { bpf } for pid=12323 comm="syz.3.3019" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 651.007815][ T24] audit: type=1400 audit(2000000360.418:47342): avc: denied { perfmon } for pid=12323 comm="syz.3.3019" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 651.468708][ T24] audit: type=1400 audit(2000000360.428:47343): avc: denied { prog_run } for pid=12323 comm="syz.3.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 651.494544][ T24] audit: type=1400 audit(2000000360.438:47344): avc: denied { ioctl } for pid=12323 comm="syz.3.3019" path="socket:[60610]" dev="sockfs" ino=60610 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 651.520961][ T24] audit: type=1400 audit(2000000360.438:47345): avc: denied { setopt } for pid=12323 comm="syz.3.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 651.957928][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 652.107474][T12362] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3025'. [ 652.658839][T12369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 652.941852][ T445] usb 10-1: USB disconnect, device number 35 [ 652.958979][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 652.968049][ T445] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 653.482628][T12379] incfs_lookup_dentry err:-5 [ 653.690723][T12379] incfs: Can't find or create .index dir in ./file0 [ 653.835351][T12379] incfs: mount failed -5 [ 655.715993][ T24] kauditd_printk_skb: 204 callbacks suppressed [ 655.716006][ T24] audit: type=1400 audit(2000000365.168:47550): avc: denied { map_create } for pid=12399 comm="syz.1.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.758810][ T24] audit: type=1400 audit(2000000365.168:47551): avc: denied { bpf } for pid=12399 comm="syz.1.3038" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 655.780589][ T24] audit: type=1400 audit(2000000365.178:47552): avc: denied { map_read map_write } for pid=12399 comm="syz.1.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.801523][ T24] audit: type=1400 audit(2000000365.238:47553): avc: denied { prog_load } for pid=12399 comm="syz.1.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.820996][ T24] audit: type=1400 audit(2000000365.458:47554): avc: denied { create } for pid=12399 comm="syz.1.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 655.840854][ T24] audit: type=1400 audit(2000000365.458:47555): avc: denied { write } for pid=12399 comm="syz.1.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 655.916993][ T24] audit: type=1400 audit(2000000365.488:47556): avc: denied { read write } for pid=9180 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.942255][ T3034] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 655.965090][ T24] audit: type=1400 audit(2000000365.488:47557): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.990155][ T24] audit: type=1400 audit(2000000365.488:47558): avc: denied { ioctl } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 656.023178][ T24] audit: type=1400 audit(2000000365.528:47559): avc: denied { map_create } for pid=12407 comm="syz.9.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 656.470180][T12431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.286377][T12443] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3051'. [ 657.300137][ T3034] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 657.310029][ T3034] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 657.322599][ T3034] usb 9-1: config 220 has no interface number 2 [ 657.328922][ T3034] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 657.342963][ T3034] usb 9-1: config 220 interface 0 has no altsetting 0 [ 657.350539][ T3034] usb 9-1: config 220 interface 76 has no altsetting 0 [ 657.357572][ T3034] usb 9-1: config 220 interface 1 has no altsetting 0 [ 658.388158][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 658.489755][ T3034] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 658.498849][ T3034] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.529683][ T3034] usb 9-1: can't set config #220, error -71 [ 658.539224][ T3034] usb 9-1: USB disconnect, device number 29 [ 659.598829][T12485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 660.045625][T12489] tipc: Enabling of bearer rejected, failed to enable media [ 660.117577][T12497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3065'. [ 660.200581][T12501] syz.2.3063[12501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 660.200962][T12501] syz.2.3063[12501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 660.429616][T12501] tipc: Started in network mode [ 660.446539][T12501] tipc: Own node identity ac14140f, cluster identity 4711 [ 660.455199][T12501] tipc: New replicast peer: 255.255.255.255 [ 660.462590][T12501] tipc: Enabled bearer , priority 10 [ 660.649043][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 660.733223][ T24] kauditd_printk_skb: 292 callbacks suppressed [ 660.733248][ T24] audit: type=1400 audit(2000000370.478:47852): avc: denied { read write } for pid=12492 comm="syz.9.3064" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.791143][ T24] audit: type=1400 audit(2000000370.518:47853): avc: denied { open } for pid=12492 comm="syz.9.3064" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.833957][ T24] audit: type=1400 audit(2000000370.518:47854): avc: denied { ioctl } for pid=12492 comm="syz.9.3064" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.861841][ T24] audit: type=1400 audit(2000000370.578:47855): avc: denied { mounton } for pid=12504 comm="syz.3.3067" path="/142/file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 660.887140][ T24] audit: type=1400 audit(2000000370.578:47856): avc: denied { mount } for pid=12504 comm="syz.3.3067" name="/" dev="incremental-fs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 660.916186][ T24] audit: type=1400 audit(2000000370.598:47857): avc: denied { prog_load } for pid=12504 comm="syz.3.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 660.936611][ T24] audit: type=1400 audit(2000000370.598:47858): avc: denied { create } for pid=12504 comm="syz.3.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 661.024029][ T24] audit: type=1400 audit(2000000370.608:47859): avc: denied { map_create } for pid=12504 comm="syz.3.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 661.256309][ T24] audit: type=1400 audit(2000000370.608:47860): avc: denied { bpf } for pid=12504 comm="syz.3.3067" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.287177][ T24] audit: type=1400 audit(2000000370.608:47861): avc: denied { perfmon } for pid=12504 comm="syz.3.3067" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.881955][ T7756] tipc: 32-bit node address hash set to f1414ac [ 662.698719][T12536] syz.8.3075[12536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.698798][T12536] syz.8.3075[12536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.805237][T12537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.930069][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 662.951979][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.978855][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 662.987586][T12542] x_tables: duplicate underflow at hook 1 [ 662.991614][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 663.006117][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.017511][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 663.027811][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.038056][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 663.080926][T12546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.127598][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 663.217150][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 663.248453][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 663.256413][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 663.264266][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 663.277148][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 663.285077][ T298] ip6_tunnel: K xmit: Local address not yet configured! [ 664.552082][T12579] xt_nat: multiple ranges no longer supported [ 664.564034][T12579] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3087'. [ 665.002438][T12608] syz.3.3094[12608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.002501][T12608] syz.3.3094[12608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.016214][T12609] syz.3.3094[12609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.028381][T12609] syz.3.3094[12609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.066319][T12613] overlayfs: failed to resolve './bus': -2 [ 665.090124][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3096'. [ 665.293902][T12642] overlayfs: failed to clone upperpath [ 665.444452][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3108'. [ 665.749001][ T3034] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 665.769818][ T24] kauditd_printk_skb: 402 callbacks suppressed [ 665.769831][ T24] audit: type=1400 audit(2000000375.518:48264): avc: denied { ioctl } for pid=12653 comm="syz.9.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 666.002256][ T24] audit: type=1400 audit(2000000375.748:48265): avc: denied { create } for pid=12660 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 666.022836][ T24] audit: type=1400 audit(2000000375.758:48266): avc: denied { ioctl } for pid=12653 comm="syz.9.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 666.049447][ T24] audit: type=1400 audit(2000000375.778:48267): avc: denied { setopt } for pid=12660 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 666.070564][ T24] audit: type=1400 audit(2000000375.798:48268): avc: denied { ioctl } for pid=12653 comm="syz.9.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 666.097371][ T24] audit: type=1400 audit(2000000375.798:48269): avc: denied { prog_load } for pid=12660 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.117275][ T24] audit: type=1400 audit(2000000375.798:48270): avc: denied { bpf } for pid=12660 comm="syz.2.3110" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 666.117964][ T3034] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.143873][ T24] audit: type=1400 audit(2000000375.798:48271): avc: denied { perfmon } for pid=12660 comm="syz.2.3110" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 666.151495][ T3034] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 666.185156][ T24] audit: type=1400 audit(2000000375.818:48272): avc: denied { prog_run } for pid=12660 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.185343][ T3034] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 666.218980][ T3034] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.239416][ T24] audit: type=1400 audit(2000000375.818:48273): avc: denied { ioctl } for pid=12653 comm="syz.9.3109" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 666.269943][ T3034] usb 10-1: config 0 descriptor?? [ 666.498307][T12665] syz.3.3112[12665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.498394][T12665] syz.3.3112[12665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.589007][ T298] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 666.727615][T12693] overlayfs: unrecognized mount option "/" or missing value [ 666.754215][ T3034] kovaplus 0003:1E7D:2D50.0040: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 667.049018][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 667.309119][ T298] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 667.320372][ T298] usb 9-1: config 0 has no interface number 0 [ 667.330700][ T298] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.342817][ T298] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.353749][ T298] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.371374][ T298] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 667.380609][ T298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.389872][ T298] usb 9-1: config 0 descriptor?? [ 667.759146][ T3034] kovaplus 0003:1E7D:2D50.0040: couldn't init struct kovaplus_device [ 667.770615][ T3034] kovaplus 0003:1E7D:2D50.0040: couldn't install mouse [ 667.785968][ T3034] kovaplus: probe of 0003:1E7D:2D50.0040 failed with error -71 [ 667.798788][ T3034] usb 10-1: USB disconnect, device number 36 [ 667.872977][T12674] udc-core: couldn't find an available UDC or it's busy [ 667.881020][T12674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 667.892232][T12674] udc-core: couldn't find an available UDC or it's busy [ 667.900662][T12674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 667.959072][ T298] usbhid 9-1:0.1: can't add hid device: -71 [ 667.965790][ T298] usbhid: probe of 9-1:0.1 failed with error -71 [ 667.982651][ T298] usb 9-1: USB disconnect, device number 30 [ 668.503289][T12744] x_tables: duplicate underflow at hook 2 [ 668.899013][ T298] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 669.732875][ T298] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.743971][ T298] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.753913][ T298] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 669.766978][ T298] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.776442][ T298] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.786113][ T298] usb 10-1: config 0 descriptor?? [ 669.811538][T12768] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3136'. [ 670.419156][ T5230] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 670.780650][ T24] kauditd_printk_skb: 313 callbacks suppressed [ 670.780682][ T24] audit: type=1400 audit(2000000381.526:48587): avc: denied { ioctl } for pid=12771 comm="syz.2.3139" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.860050][ T24] audit: type=1400 audit(2000000381.576:48588): avc: denied { ioctl } for pid=12771 comm="syz.2.3139" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.909361][ T5230] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.930145][ T298] usbhid 10-1:0.0: can't add hid device: -71 [ 670.937333][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 670.951240][ T5230] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 670.975410][ T298] usbhid: probe of 10-1:0.0 failed with error -71 [ 670.983206][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.025251][ T5230] usb 3-1: config 0 descriptor?? [ 671.060543][ T24] audit: type=1400 audit(2000000381.806:48589): avc: denied { ioctl } for pid=12771 comm="syz.2.3139" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 671.174553][ T298] usb 10-1: USB disconnect, device number 37 [ 671.323830][ T24] audit: type=1400 audit(2000000382.066:48590): avc: denied { ioctl } for pid=12771 comm="syz.2.3139" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 671.369051][ T24] audit: type=1400 audit(2000000382.096:48591): avc: denied { read write } for pid=9180 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.419386][ T24] audit: type=1400 audit(2000000382.096:48592): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.483806][ T24] audit: type=1400 audit(2000000382.096:48593): avc: denied { ioctl } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.512867][ T24] audit: type=1400 audit(2000000382.106:48594): avc: denied { prog_load } for pid=12783 comm="syz.9.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 671.533783][ T24] audit: type=1400 audit(2000000382.116:48595): avc: denied { prog_load } for pid=12783 comm="syz.9.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 671.554986][ T24] audit: type=1400 audit(2000000382.116:48596): avc: denied { bpf } for pid=12783 comm="syz.9.3142" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 671.581212][ T5230] itetech 0003:048D:8595.0041: item fetching failed at offset 5/7 [ 671.601763][ T5230] itetech: probe of 0003:048D:8595.0041 failed with error -22 [ 672.207756][T12806] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3148'. [ 672.217646][T12806] device gretap0 entered promiscuous mode [ 672.233530][T12806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.240842][T12806] IPv6: NLM_F_CREATE should be set when creating new route [ 672.255622][T12806] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3148'. [ 672.264986][T12806] 0XD: renamed from gretap0 [ 672.285759][T12806] device 30XD left promiscuous mode [ 672.292575][T12806] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 672.953128][T12720] usb 3-1: USB disconnect, device number 28 [ 673.059430][T12813] overlayfs: failed to resolve './file0': -2 [ 674.009042][T12720] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 674.369087][T12720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.386464][T12720] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.669316][T12720] usb 3-1: string descriptor 0 read error: -22 [ 674.675924][T12720] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 674.692615][T12847] syz.9.3160[12847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 674.692706][T12847] syz.9.3160[12847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 674.708239][T12720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.729003][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 674.839898][T12720] usb 3-1: MIDIStreaming interface descriptor not found [ 675.043829][T12818] udc-core: couldn't find an available UDC or it's busy [ 675.058986][T12818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 675.068726][T12720] usb 3-1: USB disconnect, device number 29 [ 675.493847][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3164'. [ 675.642188][T12872] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 675.840051][ T24] kauditd_printk_skb: 293 callbacks suppressed [ 675.951628][ T24] audit: type=1400 audit(2000000386.576:48890): avc: denied { perfmon } for pid=12876 comm="syz.1.3168" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 676.096917][ T24] audit: type=1400 audit(2000000386.586:48891): avc: denied { execmem } for pid=12876 comm="syz.1.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 676.425952][ T24] audit: type=1400 audit(2000000386.686:48892): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 676.551576][ T3034] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 676.559912][ T24] audit: type=1400 audit(2000000386.686:48893): avc: denied { open } for pid=8845 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 676.584760][ T24] audit: type=1400 audit(2000000386.686:48894): avc: denied { ioctl } for pid=8845 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 676.908077][T12890] device bridge0 entered promiscuous mode [ 676.914033][T12890] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 676.925941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 676.946970][ T24] audit: type=1400 audit(2000000386.746:48895): avc: denied { execmem } for pid=12884 comm="syz.8.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 676.990358][ T24] audit: type=1400 audit(2000000386.926:48896): avc: denied { map_create } for pid=12884 comm="syz.8.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 677.010194][ T24] audit: type=1400 audit(2000000386.926:48897): avc: denied { map_read map_write } for pid=12884 comm="syz.8.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 677.030431][ T24] audit: type=1400 audit(2000000386.936:48898): avc: denied { prog_load } for pid=12884 comm="syz.8.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 677.050129][ T24] audit: type=1400 audit(2000000386.936:48899): avc: denied { bpf } for pid=12884 comm="syz.8.3170" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 677.486656][T12912] netlink: 'syz.1.3177': attribute type 12 has an invalid length. [ 677.595704][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.611162][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.677979][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 678.537846][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 678.557523][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 678.574856][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 678.584693][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 678.598293][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 678.612783][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 678.629162][ T3034] usb 10-1: device descriptor read/all, error -71 [ 678.630174][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.669517][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 678.689622][ T5184] ip6_tunnel: K xmit: Local address not yet configured! [ 679.454836][T12933] bridge0: port 3(dummy0) entered disabled state [ 679.461461][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.468959][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.506834][T12970] udc-core: couldn't find an available UDC or it's busy [ 680.514198][T12970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 680.693755][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3195'. [ 680.852549][ T24] kauditd_printk_skb: 357 callbacks suppressed [ 680.852564][ T24] audit: type=1400 audit(2000000391.596:49257): avc: denied { read write } for pid=9180 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 680.896319][ T24] audit: type=1400 audit(2000000391.616:49258): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 680.924679][ T24] audit: type=1400 audit(2000000391.616:49259): avc: denied { ioctl } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 680.958407][ T24] audit: type=1400 audit(2000000391.656:49260): avc: denied { prog_load } for pid=12984 comm="syz.9.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 680.983194][ T24] audit: type=1400 audit(2000000391.666:49261): avc: denied { bpf } for pid=12984 comm="syz.9.3198" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 681.004445][ T24] audit: type=1400 audit(2000000391.666:49262): avc: denied { perfmon } for pid=12984 comm="syz.9.3198" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 681.040165][ T24] audit: type=1400 audit(2000000391.696:49263): avc: denied { bpf } for pid=12984 comm="syz.9.3198" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 681.087860][ T24] audit: type=1400 audit(2000000391.696:49264): avc: denied { prog_run } for pid=12984 comm="syz.9.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 681.107423][ T24] audit: type=1400 audit(2000000391.716:49265): avc: denied { mounton } for pid=12984 comm="syz.9.3198" path="/173/file0" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 681.139267][ T24] audit: type=1400 audit(2000000391.716:49266): avc: denied { mount } for pid=12984 comm="syz.9.3198" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 681.275883][T12988] xt_hashlimit: overflow, try lower: 0/0 [ 681.355159][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.365329][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.373335][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.390344][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.401106][T12990] Leaked POSIX lock on dev=0x0:0x1f ino=0x3f0 fl_owner=ffff88812597c000 fl_flags=0x81 fl_type=0x0 fl_pid=12989 [ 681.402215][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.464709][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.481514][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.497336][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.509145][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.510426][ T9669] Leaked locks on dev=0x0:0x1f ino=0x3f0: [ 681.516844][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.532106][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.540009][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.547722][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.555315][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.563624][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.648674][ T9669] POSIX: fl_owner=ffff88812597c000 fl_flags=0x81 fl_type=0x0 fl_pid=12989 [ 681.664285][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.693874][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.723995][T12720] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 681.803126][T12720] hid-generic 0003:0004:0000.0042: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 682.697166][T12720] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 683.209065][ T5] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 683.299032][T12720] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 683.318986][T12720] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 683.329514][T12720] usb 3-1: config 1 interface 0 has no altsetting 0 [ 683.478978][ T5] usb 10-1: device descriptor read/64, error -71 [ 683.509042][T12720] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 683.518299][T12720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.526956][T12720] usb 3-1: Product: syz [ 683.531998][T12720] usb 3-1: Manufacturer: syz [ 683.536650][T12720] usb 3-1: SerialNumber: syz [ 683.559272][T13016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 683.566546][T13016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 683.617993][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 683.879013][ T5] usb 10-1: device descriptor read/64, error -71 [ 683.980240][T13060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3221'. [ 684.024449][T13064] netlink: 'syz.3.3223': attribute type 2 has an invalid length. [ 684.148967][ T5] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 684.429148][ T5] usb 10-1: device descriptor read/64, error -71 [ 684.691885][T13076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 684.715119][T13016] udc-core: couldn't find an available UDC or it's busy [ 684.747871][T13016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 684.899058][T12720] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:39:a3:74:81:dc [ 684.918425][T12720] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 684.935117][T12720] usb 3-1: USB disconnect, device number 30 [ 685.069013][ T5] usb 10-1: device descriptor read/64, error -71 [ 685.189104][ T5] usb usb10-port1: attempt power cycle [ 685.434766][T13091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3231'. [ 685.447073][T13091] sch_fq: defrate 0 ignored. [ 685.574062][T13093] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3233'. [ 685.598981][ T5] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 685.633321][T13098] tipc: Enabling of bearer rejected, failed to enable media [ 685.718986][ T5] usb 10-1: device descriptor read/8, error -71 [ 685.875837][ T24] kauditd_printk_skb: 438 callbacks suppressed [ 685.875849][ T24] audit: type=1400 audit(2000000396.616:49705): avc: denied { execmem } for pid=13130 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 686.113230][T13132] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.229763][T13134] overlayfs: failed to clone upperpath [ 686.237757][ T24] audit: type=1400 audit(2000000396.806:49706): avc: denied { prog_load } for pid=13121 comm="syz.8.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 686.270551][ T24] audit: type=1400 audit(2000000396.816:49707): avc: denied { bpf } for pid=13121 comm="syz.8.3241" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 686.375320][ T5184] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 686.420993][ T24] audit: type=1400 audit(2000000396.816:49708): avc: denied { perfmon } for pid=13121 comm="syz.8.3241" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 686.467424][ T24] audit: type=1400 audit(2000000396.816:49709): avc: denied { prog_run } for pid=13121 comm="syz.8.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 686.487058][ T5] usb 10-1: device descriptor read/8, error -71 [ 686.496847][ T24] audit: type=1400 audit(2000000396.966:49710): avc: denied { create } for pid=13130 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 686.516749][ T24] audit: type=1400 audit(2000000396.966:49711): avc: denied { connect } for pid=13130 comm="syz.3.3243" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 686.537626][ T24] audit: type=1400 audit(2000000396.966:49712): avc: denied { write } for pid=13130 comm="syz.3.3243" path="socket:[63761]" dev="sockfs" ino=63761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 686.561548][ T24] audit: type=1400 audit(2000000396.976:49713): avc: denied { mounton } for pid=13130 comm="syz.3.3243" path="/190/file0" dev="tmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 686.599532][ T24] audit: type=1400 audit(2000000397.156:49714): avc: denied { ioctl } for pid=13108 comm="syz.2.3238" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 686.864901][ T5184] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 686.876330][ T5184] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 686.889593][ T5184] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 686.898683][ T5184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.929553][T13109] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 686.942279][T13155] 9pnet: p9_errstr2errno: server reported unknown error @cF 00000000000000000000006 [ 687.751266][ T5] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 688.039196][ T5184] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 688.089958][ T5184] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input68 [ 688.105578][T13176] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3238'. [ 688.249108][ T5184] usb 3-1: USB disconnect, device number 31 [ 688.405768][T13186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 688.563741][ T5] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 688.577773][ T5] usb 10-1: can't read configurations, error -61 [ 688.584433][ T5] usb usb10-port1: unable to enumerate USB device [ 688.738112][T13189] overlayfs: failed to clone upperpath [ 689.207603][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'. [ 689.224624][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3264'. [ 689.236378][T13210] incfs: Error accessing: ./file0. [ 689.241798][T13210] incfs: mount failed -2 [ 689.449392][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 690.275354][T13225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 690.692565][T13242] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3274'. [ 690.844504][T13246] overlayfs: failed to clone lowerpath [ 691.410418][T13246] overlayfs: failed to clone upperpath [ 691.419693][ T24] kauditd_printk_skb: 338 callbacks suppressed [ 691.440336][ T24] audit: type=1400 audit(2000000401.566:50053): avc: denied { mounton } for pid=13233 comm="syz.1.3271" path="/429/file0" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 691.805732][ T24] audit: type=1400 audit(2000000401.576:50054): avc: denied { mount } for pid=13233 comm="syz.1.3271" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 691.833159][ T24] audit: type=1400 audit(2000000401.586:50055): avc: denied { mounton } for pid=13233 comm="syz.1.3271" path="/429/file0" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 691.866078][ T24] audit: type=1400 audit(2000000402.166:50056): avc: denied { read write } for pid=9180 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 691.922815][ T24] audit: type=1400 audit(2000000402.166:50057): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 691.948059][ T24] audit: type=1400 audit(2000000402.166:50058): avc: denied { ioctl } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 691.993787][ T24] audit: type=1400 audit(2000000402.426:50059): avc: denied { prog_load } for pid=13250 comm="syz.9.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.015837][ T24] audit: type=1400 audit(2000000402.426:50060): avc: denied { map_create } for pid=13250 comm="syz.9.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.047441][ T24] audit: type=1400 audit(2000000402.426:50061): avc: denied { bpf } for pid=13250 comm="syz.9.3276" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 692.073412][ T24] audit: type=1400 audit(2000000402.426:50062): avc: denied { map_read map_write } for pid=13250 comm="syz.9.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.192762][ T5184] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 692.211164][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 692.233268][T13265] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3282'. [ 692.469113][ T5184] usb 3-1: Using ep0 maxpacket: 32 [ 692.659069][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 692.733441][ T5184] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.752022][ T5184] usb 3-1: config 0 interface 0 has no altsetting 0 [ 692.758745][ T5184] usb 3-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 692.767893][ T5184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.777732][ T5184] usb 3-1: config 0 descriptor?? [ 693.260353][ T5184] wacom 0003:056A:00D7.0043: unknown main item tag 0x2 [ 693.267355][ T5184] wacom 0003:056A:00D7.0043: unknown main item tag 0xe [ 693.275121][ T5184] wacom 0003:056A:00D7.0043: item fetching failed at offset 5/6 [ 693.283280][ T5184] wacom 0003:056A:00D7.0043: parse failed [ 693.289607][ T5184] wacom: probe of 0003:056A:00D7.0043 failed with error -22 [ 693.505763][ T5184] usb 3-1: USB disconnect, device number 32 [ 693.526687][T13302] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3292'. [ 693.973654][T13323] overlayfs: missing 'lowerdir' [ 694.925798][T13347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.257575][T13358] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 695.571858][ T5224] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 696.165735][ T5224] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 696.330638][ T5224] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 696.340267][ T5224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 696.348355][ T5224] usb 3-1: SerialNumber: syz [ 696.379371][T13360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 696.452149][ T24] kauditd_printk_skb: 577 callbacks suppressed [ 696.452163][ T24] audit: type=1326 audit(2000000407.196:50640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.9.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b9421fc9 code=0x7ffc0000 [ 696.515862][ T24] audit: type=1326 audit(2000000407.196:50641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.9.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b9421fc9 code=0x7ffc0000 [ 696.565205][ T24] audit: type=1326 audit(2000000407.196:50642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.9.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b9421fc9 code=0x7ffc0000 [ 696.608417][ T24] audit: type=1400 audit(2000000407.196:50643): avc: denied { map_create } for pid=13396 comm="syz.9.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 696.628472][ T5224] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 696.635849][ T5224] usb-storage 3-1:1.0: USB Mass Storage device detected [ 696.645758][ T24] audit: type=1400 audit(2000000407.196:50644): avc: denied { bpf } for pid=13396 comm="syz.9.3324" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 696.667624][ T5224] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 696.676440][ T5224] scsi host1: usb-storage 3-1:1.0 [ 696.689028][ T5224] usb 3-1: USB disconnect, device number 33 [ 696.723880][ T24] audit: type=1326 audit(2000000407.196:50645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.9.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b9421fc9 code=0x7ffc0000 [ 696.755394][ T24] audit: type=1326 audit(2000000407.196:50646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.9.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b9421fc9 code=0x7ffc0000 [ 696.779464][ T24] audit: type=1400 audit(2000000407.196:50647): avc: denied { prog_load } for pid=13396 comm="syz.9.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 696.799687][ T24] audit: type=1400 audit(2000000407.196:50648): avc: denied { perfmon } for pid=13396 comm="syz.9.3324" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 696.821234][ T24] audit: type=1326 audit(2000000407.196:50649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.9.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b9421fc9 code=0x7ffc0000 [ 696.876231][T13415] tipc: New replicast peer: 255.255.255.255 [ 696.882464][T13415] tipc: Enabled bearer , priority 10 [ 696.958982][ T7756] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 697.339100][ T7756] usb 9-1: config 160 has an invalid interface number: 200 but max is 0 [ 697.347909][ T7756] usb 9-1: config 160 has no interface number 0 [ 697.354389][ T7756] usb 9-1: config 160 interface 200 has no altsetting 0 [ 697.539079][ T7756] usb 9-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 697.548287][ T7756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.556381][ T7756] usb 9-1: Product: syz [ 697.560673][ T7756] usb 9-1: Manufacturer: syz [ 697.565317][ T7756] usb 9-1: SerialNumber: syz [ 697.871712][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3335'. [ 697.921772][T13436] FAULT_INJECTION: forcing a failure. [ 697.921772][T13436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.936649][T13436] CPU: 0 PID: 13436 Comm: syz.9.3336 Tainted: G W syzkaller #0 [ 697.945544][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 697.955813][T13436] Call Trace: [ 697.959138][T13436] __dump_stack+0x21/0x24 [ 697.963487][T13436] dump_stack_lvl+0x169/0x1d8 [ 697.968181][T13436] ? show_regs_print_info+0x18/0x18 [ 697.973417][T13436] dump_stack+0x15/0x1c [ 697.977739][T13436] should_fail+0x3c1/0x510 [ 697.982220][T13436] should_fail_usercopy+0x1a/0x20 [ 697.987275][T13436] _copy_from_user+0x20/0xd0 [ 697.991977][T13436] ipv6_setsockopt+0x365/0x3860 [ 697.996947][T13436] ? ipv6_update_options+0x390/0x390 [ 698.002262][T13436] ? is_bpf_text_address+0x177/0x190 [ 698.007671][T13436] ? slab_post_alloc_hook+0x7d/0x2f0 [ 698.009096][ T7756] usb 9-1: MIDIStreaming interface descriptor not found [ 698.012987][T13436] ? avc_alloc_node+0x7e/0x320 [ 698.013008][T13436] ? avc_alloc_node+0x7e/0x320 [ 698.029521][T13436] ? kmem_cache_alloc+0x165/0x2e0 [ 698.034572][T13436] ? __kasan_check_write+0x14/0x20 [ 698.039730][T13436] ? avc_alloc_node+0x28f/0x320 [ 698.044600][T13436] ? __kasan_check_write+0x14/0x20 [ 698.049858][T13436] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 698.055364][T13436] ? _raw_spin_lock+0xe0/0xe0 [ 698.060078][T13436] ? avc_xperms_populate+0x4d3/0x590 [ 698.065389][T13436] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 698.071213][T13436] ? avc_compute_av+0x502/0x6b0 [ 698.076088][T13436] ? avc_has_perm+0x234/0x360 [ 698.080804][T13436] ? avc_has_perm_noaudit+0x240/0x240 [ 698.083363][ T7756] usb 9-1: USB disconnect, device number 31 [ 698.086209][T13436] tcp_setsockopt+0x1f8/0x1c30 [ 698.096899][T13436] ? tcp_sock_set_keepcnt+0xa0/0xa0 [ 698.102135][T13436] ? __fget_files+0x2c4/0x320 [ 698.107068][T13436] sock_common_setsockopt+0xa0/0xb0 [ 698.112387][T13436] ? sock_common_recvmsg+0x1b0/0x1b0 [ 698.117721][T13436] __sys_setsockopt+0x2ed/0x460 [ 698.122602][T13436] ? __ia32_sys_recv+0xb0/0xb0 [ 698.127386][T13436] ? ksys_write+0x1eb/0x240 [ 698.131909][T13436] __x64_sys_setsockopt+0xbf/0xd0 [ 698.136962][T13436] do_syscall_64+0x31/0x40 [ 698.141400][T13436] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 698.147307][T13436] RIP: 0033:0x7f40b9421fc9 [ 698.151751][T13436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.171377][T13436] RSP: 002b:00007f40b7e8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 698.179859][T13436] RAX: ffffffffffffffda RBX: 00007f40b9678fa0 RCX: 00007f40b9421fc9 [ 698.187868][T13436] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000006 [ 698.195874][T13436] RBP: 00007f40b7e8a090 R08: 0000000000000088 R09: 0000000000000000 [ 698.203882][T13436] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 698.211901][T13436] R13: 00007f40b9679038 R14: 00007f40b9678fa0 R15: 00007ffe094f2f98 [ 698.221088][ T5] tipc: 32-bit node address hash set to e8b76b7e [ 699.443018][T13470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13470 comm=syz.9.3345 [ 699.906774][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 699.924511][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.934754][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 699.943957][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 699.953603][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.962989][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.973501][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.982852][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.991604][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 700.000771][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 700.009610][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 700.017405][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 700.033991][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 700.049438][ T9427] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 700.059684][ T5184] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 700.067747][ T5184] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 700.178168][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3353'. [ 700.187842][T13487] tipc: Enabling of bearer rejected, already enabled [ 700.219935][ T5] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 701.019075][ T5] usb 9-1: device descriptor read/64, error -71 [ 701.063471][T13502] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3358'. [ 701.239343][T12720] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 701.408986][ T5] usb 9-1: device descriptor read/64, error -71 [ 701.451490][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3367'. [ 701.470413][ T24] kauditd_printk_skb: 486 callbacks suppressed [ 701.470426][ T24] audit: type=1400 audit(2000000412.216:51136): avc: denied { map_create } for pid=13534 comm="syz.3.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 701.497064][T12720] usb 10-1: Using ep0 maxpacket: 8 [ 701.503289][ T24] audit: type=1400 audit(2000000412.246:51137): avc: denied { prog_load } for pid=13534 comm="syz.3.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 701.524019][ T24] audit: type=1400 audit(2000000412.246:51138): avc: denied { bpf } for pid=13534 comm="syz.3.3367" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 701.549626][ T24] audit: type=1400 audit(2000000412.246:51139): avc: denied { perfmon } for pid=13534 comm="syz.3.3367" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 701.571719][ T24] audit: type=1400 audit(2000000412.266:51140): avc: denied { ioctl } for pid=13499 comm="syz.9.3357" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 701.601053][ T24] audit: type=1400 audit(2000000412.316:51141): avc: denied { ioctl } for pid=13499 comm="syz.9.3357" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 701.629584][ T24] audit: type=1326 audit(2000000412.346:51142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0937fc9 code=0x7ffc0000 [ 701.653914][ T24] audit: type=1326 audit(2000000412.346:51143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0937fc9 code=0x7ffc0000 [ 701.678967][ T24] audit: type=1326 audit(2000000412.346:51144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4e0937fc9 code=0x7ffc0000 [ 701.703723][T12720] usb 10-1: unable to get BOS descriptor or descriptor too short [ 701.711659][ T5] usb 9-1: new low-speed USB device number 33 using dummy_hcd [ 701.719511][ T24] audit: type=1400 audit(2000000412.346:51145): avc: denied { map_create } for pid=13537 comm="syz.3.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 701.819202][T12720] usb 10-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 701.831395][T12720] usb 10-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 701.842090][T12720] usb 10-1: config 8 interface 0 has no altsetting 0 [ 701.901870][T13561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13561 comm=syz.1.3373 [ 702.249660][ T5] usb 9-1: device descriptor read/64, error -71 [ 702.289121][T12720] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 702.299496][T12720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.307701][T12720] usb 10-1: Product: syz [ 702.312142][T12720] usb 10-1: Manufacturer: syz [ 702.316911][T12720] usb 10-1: SerialNumber: syz [ 703.331734][T12720] usb 10-1: selecting invalid altsetting 0 [ 703.337772][ T5] usb 9-1: device descriptor read/64, error -71 [ 703.372125][T12720] usb 10-1: USB disconnect, device number 45 [ 703.479133][ T5] usb usb9-port1: attempt power cycle [ 703.769016][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 704.088985][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 704.894081][T13600] xt_TCPMSS: Only works on TCP SYN packets [ 706.110315][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3398'. [ 706.487597][ T24] kauditd_printk_skb: 381 callbacks suppressed [ 706.487630][ T24] audit: type=1400 audit(2000000416.956:51527): avc: denied { bpf } for pid=13645 comm="syz.9.3397" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 707.230160][ T24] audit: type=1400 audit(2000000416.976:51528): avc: denied { map_create } for pid=13645 comm="syz.9.3397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 707.291301][ T24] audit: type=1400 audit(2000000416.976:51529): avc: denied { map_read map_write } for pid=13645 comm="syz.9.3397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 707.333542][ T24] audit: type=1400 audit(2000000416.986:51530): avc: denied { prog_load } for pid=13645 comm="syz.9.3397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 707.353283][ T24] audit: type=1400 audit(2000000417.516:51531): avc: denied { map_create } for pid=13668 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 707.377965][ T24] audit: type=1400 audit(2000000417.516:51532): avc: denied { bpf } for pid=13668 comm="syz.3.3402" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 707.400077][ T24] audit: type=1400 audit(2000000417.526:51533): avc: denied { map_read map_write } for pid=13668 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 707.420558][ T24] audit: type=1400 audit(2000000417.536:51534): avc: denied { prog_load } for pid=13668 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 707.445687][ T24] audit: type=1400 audit(2000000417.546:51535): avc: denied { create } for pid=13668 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 707.471340][ T24] audit: type=1400 audit(2000000417.926:51536): avc: denied { write } for pid=13668 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 707.900213][T12720] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 708.111355][T13678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3400'. [ 708.946629][T13675] overlayfs: failed to clone upperpath [ 708.961186][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3403'. [ 709.043467][T13691] netlink: 'syz.1.3408': attribute type 12 has an invalid length. [ 709.139019][T12720] usb 10-1: Using ep0 maxpacket: 32 [ 709.259144][T12720] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.275683][T12720] usb 10-1: config 0 interface 0 has no altsetting 0 [ 709.291222][T12720] usb 10-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 709.313772][T12720] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.336942][T12720] usb 10-1: config 0 descriptor?? [ 709.917358][T13677] device batadv_slave_1 entered promiscuous mode [ 710.302021][T13676] device batadv_slave_1 left promiscuous mode [ 710.628661][T13729] overlayfs: failed to resolve './file0': -2 [ 710.780318][T12720] usbhid 10-1:0.0: can't add hid device: -71 [ 710.786448][T12720] usbhid: probe of 10-1:0.0 failed with error -71 [ 711.209045][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 711.261209][T12720] usb 10-1: USB disconnect, device number 46 [ 711.275477][T13746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 711.513834][ T24] kauditd_printk_skb: 265 callbacks suppressed [ 711.513906][ T24] audit: type=1400 audit(2000000422.106:51802): avc: denied { create } for pid=13744 comm="syz.1.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 711.640579][ T24] audit: type=1400 audit(2000000422.106:51803): avc: denied { module_request } for pid=13744 comm="syz.1.3424" kmod="net-pf-42" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 711.671413][T13759] syz.2.3427[13759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.671501][T13759] syz.2.3427[13759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.712589][ T24] audit: type=1400 audit(2000000422.176:51804): avc: denied { map_create } for pid=13744 comm="syz.1.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 711.744472][ T24] audit: type=1400 audit(2000000422.176:51805): avc: denied { perfmon } for pid=13744 comm="syz.1.3424" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 711.767281][ T24] audit: type=1400 audit(2000000422.176:51806): avc: denied { map_read map_write } for pid=13744 comm="syz.1.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 711.819297][ T24] audit: type=1400 audit(2000000422.206:51807): avc: denied { prog_load } for pid=13744 comm="syz.1.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 711.847339][T13759] xt_bpf: check failed: parse error [ 711.858995][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 711.876887][ T24] audit: type=1400 audit(2000000422.226:51808): avc: denied { bpf } for pid=13744 comm="syz.1.3424" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 711.919609][T13764] syz.3.3429[13764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.919678][T13764] syz.3.3429[13764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.930903][ T24] audit: type=1400 audit(2000000422.246:51809): avc: denied { prog_run } for pid=13744 comm="syz.1.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.007431][ T24] audit: type=1400 audit(2000000422.386:51810): avc: denied { map_create } for pid=13758 comm="syz.2.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.028329][ T24] audit: type=1400 audit(2000000422.416:51811): avc: denied { prog_load } for pid=13758 comm="syz.2.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.168636][T13749] xt_hashlimit: size too large, truncated to 1048576 [ 712.249079][ T5224] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 712.491441][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3439'. [ 712.506626][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3439'. [ 712.530453][ T5224] usb 9-1: device descriptor read/64, error -71 [ 712.605294][T13803] netlink: 'syz.9.3440': attribute type 5 has an invalid length. [ 712.742143][T13806] syz.3.3441[13806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 712.742210][T13806] syz.3.3441[13806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 712.756827][T13806] incfs: Error accessing: ./file0. [ 712.773813][T13806] incfs: mount failed -2 [ 712.938992][ T5224] usb 9-1: device descriptor read/64, error -71 [ 713.208950][ T5224] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 713.489016][ T5224] usb 9-1: device descriptor read/64, error -71 [ 713.550930][T13791] overlayfs: failed to clone upperpath [ 714.139059][ T5224] usb 9-1: device descriptor read/64, error -71 [ 714.739382][ T5224] usb usb9-port1: attempt power cycle [ 715.298954][ T5] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 715.709165][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.724047][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.734528][ T5] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 715.751339][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.761624][ T5] usb 3-1: config 0 descriptor?? [ 715.884696][T13851] xt_CT: No such helper "pptp" [ 716.299022][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 716.305049][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 716.313490][ T5] usb 3-1: USB disconnect, device number 34 [ 716.560157][ T24] kauditd_printk_skb: 332 callbacks suppressed [ 716.560171][ T24] audit: type=1400 audit(2000000427.306:52144): avc: denied { map_create } for pid=13861 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 716.625553][ T24] audit: type=1400 audit(2000000427.306:52145): avc: denied { prog_load } for pid=13861 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 716.670277][ T24] audit: type=1400 audit(2000000427.306:52146): avc: denied { bpf } for pid=13861 comm="syz.3.3459" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 716.692700][ T24] audit: type=1400 audit(2000000427.306:52147): avc: denied { perfmon } for pid=13861 comm="syz.3.3459" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 716.717419][ T24] audit: type=1400 audit(2000000427.336:52148): avc: denied { map_read map_write } for pid=13861 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 716.740650][ T24] audit: type=1400 audit(2000000427.336:52149): avc: denied { map_create } for pid=13861 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 716.773945][ T24] audit: type=1400 audit(2000000427.346:52150): avc: denied { prog_run } for pid=13861 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 716.795935][ T24] audit: type=1400 audit(2000000427.356:52151): avc: denied { map_read map_write } for pid=13861 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 716.821207][ T24] audit: type=1400 audit(2000000427.416:52152): avc: denied { read write } for pid=9180 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.850876][ T24] audit: type=1400 audit(2000000427.416:52153): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.900411][T13877] syz.3.3463[13877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.900477][T13877] syz.3.3463[13877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.921073][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3463'. [ 717.008343][T13881] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3464'. [ 717.021380][T13881] 9pnet: Insufficient options for proto=fd [ 717.181761][T13901] netlink: 2432 bytes leftover after parsing attributes in process `syz.8.3471'. [ 717.191797][T13901] netlink: 1233 bytes leftover after parsing attributes in process `syz.8.3471'. [ 717.609006][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 717.689060][ T5] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 717.743143][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3485'. [ 717.839084][ T5224] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 717.888011][T13940] tipc: Enabling of bearer rejected, failed to enable media [ 717.900400][T13940] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3490'. [ 717.939131][ T5] usb 9-1: Using ep0 maxpacket: 32 [ 718.059086][ T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.070073][ T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.078961][ T5224] usb 10-1: Using ep0 maxpacket: 32 [ 718.079894][ T5] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 718.094650][ T5] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.104355][ T5] usb 9-1: config 0 descriptor?? [ 718.138127][T13958] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3498'. [ 718.147298][T13958] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3498'. [ 718.157902][T13958] device syz_tun left promiscuous mode [ 718.199006][ T5224] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 718.207638][ T5224] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 718.216642][ T5224] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 718.225848][ T5224] usb 10-1: config 1 has no interface number 0 [ 718.232195][ T5224] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.243232][ T5224] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 718.256352][ T5224] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 718.266036][ T5224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.376550][T13963] tipc: Enabling of bearer rejected, failed to enable media [ 718.469062][ T5] usbhid 9-1:0.0: can't add hid device: -71 [ 718.475175][ T5] usbhid: probe of 9-1:0.0 failed with error -71 [ 718.482886][ T5] usb 9-1: USB disconnect, device number 38 [ 718.514107][ T5224] usb 10-1: USB disconnect, device number 47 [ 718.588352][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3508'. [ 718.678132][T13992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3514'. [ 719.082549][T14016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3526'. [ 719.269109][ T5] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 719.789110][ T5] usb 9-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 719.798392][ T5] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.806447][ T5] usb 9-1: Product: syz [ 719.810949][ T5] usb 9-1: Manufacturer: syz [ 719.815573][ T5] usb 9-1: SerialNumber: syz [ 719.821543][ T5] usb 9-1: config 0 descriptor?? [ 720.061423][ T7756] usb 9-1: USB disconnect, device number 39 [ 720.278965][T12720] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 720.528956][T12720] usb 3-1: Using ep0 maxpacket: 8 [ 720.649135][T12720] usb 3-1: config 0 has no interfaces? [ 720.654706][T12720] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 720.663867][T12720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.673204][T12720] usb 3-1: config 0 descriptor?? [ 721.032485][T12720] usb 3-1: USB disconnect, device number 35 [ 721.091599][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 721.329016][ T7756] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 721.352579][T14141] tipc: Started in network mode [ 721.357867][T14141] tipc: Own node identity 8, cluster identity 16 [ 721.364448][T14141] tipc: 32-bit node address hash set to 8 [ 721.531952][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3592'. [ 721.572524][ T24] kauditd_printk_skb: 521 callbacks suppressed [ 721.572537][ T24] audit: type=1400 audit(2000000432.316:52675): avc: denied { read write } for pid=9180 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.614555][ T24] audit: type=1400 audit(2000000432.316:52676): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.644747][ T24] audit: type=1400 audit(2000000432.316:52677): avc: denied { ioctl } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.674138][T14178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3600'. [ 721.696791][ T24] audit: type=1400 audit(2000000432.326:52678): avc: denied { create } for pid=14168 comm="syz.9.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.720608][ T24] audit: type=1400 audit(2000000432.326:52679): avc: denied { write } for pid=14168 comm="syz.9.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.742155][ T7756] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 721.750464][ T7756] usb 9-1: config 0 has no interface number 0 [ 721.756898][ T24] audit: type=1400 audit(2000000432.326:52680): avc: denied { read } for pid=14168 comm="syz.9.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.778001][ T24] audit: type=1400 audit(2000000432.326:52681): avc: denied { read write } for pid=9180 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.805644][ T24] audit: type=1400 audit(2000000432.326:52682): avc: denied { open } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.842060][ T24] audit: type=1400 audit(2000000432.326:52683): avc: denied { ioctl } for pid=9180 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.875042][ T24] audit: type=1400 audit(2000000432.346:52684): avc: denied { ioctl } for pid=14109 comm="syz.8.3568" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 721.959356][ T7756] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 721.968451][ T7756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.977218][ T7756] usb 9-1: Product: syz [ 721.981486][ T7756] usb 9-1: Manufacturer: syz [ 721.986117][ T7756] usb 9-1: SerialNumber: syz [ 721.999509][ T7756] usb 9-1: config 0 descriptor?? [ 722.662574][T14292] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 722.692748][T14297] ================================================================== [ 722.700909][T14297] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 722.710143][T14297] Read of size 1 at addr ffff8881514af3d8 by task syz.9.3655/14297 [ 722.718075][T14297] [ 722.720512][T14297] CPU: 0 PID: 14297 Comm: syz.9.3655 Tainted: G W syzkaller #0 [ 722.729575][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 722.739669][T14297] Call Trace: [ 722.742979][T14297] __dump_stack+0x21/0x24 [ 722.747435][T14297] dump_stack_lvl+0x169/0x1d8 [ 722.752306][T14297] ? show_regs_print_info+0x18/0x18 [ 722.757522][T14297] ? thaw_kernel_threads+0x220/0x220 [ 722.762926][T14297] ? unwind_get_return_address+0x4d/0x90 [ 722.768658][T14297] print_address_description+0x7f/0x2c0 [ 722.774264][T14297] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 722.780795][T14297] kasan_report+0xe2/0x130 [ 722.785279][T14297] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 722.791820][T14297] __asan_report_load1_noabort+0x14/0x20 [ 722.797659][T14297] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 722.804000][T14297] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 722.810163][T14297] ? xfrm_netlink_rcv+0x72/0x90 [ 722.815034][T14297] ? netlink_unicast+0x876/0xa40 [ 722.819995][T14297] ? netlink_sendmsg+0x88d/0xb30 [ 722.824955][T14297] ? ____sys_sendmsg+0x5a2/0x8c0 [ 722.830056][T14297] ? ___sys_sendmsg+0x1f0/0x260 [ 722.834986][T14297] ? do_syscall_64+0x31/0x40 [ 722.839785][T14297] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 722.845977][T14297] xfrm_policy_inexact_insert+0x70/0x1130 [ 722.851725][T14297] ? __get_hash_thresh+0x10c/0x420 [ 722.856862][T14297] ? policy_hash_bysel+0x110/0x4f0 [ 722.862006][T14297] xfrm_policy_insert+0x126/0x9a0 [ 722.867079][T14297] ? xfrm_policy_construct+0x54f/0x1f00 [ 722.872819][T14297] xfrm_add_policy+0x4d1/0x830 [ 722.877600][T14297] ? xfrm_dump_sa_done+0xc0/0xc0 [ 722.882563][T14297] xfrm_user_rcv_msg+0x450/0x6d0 [ 722.887551][T14297] ? xfrm_netlink_rcv+0x90/0x90 [ 722.892425][T14297] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 722.897811][T14297] netlink_rcv_skb+0x1e0/0x430 [ 722.902591][T14297] ? xfrm_netlink_rcv+0x90/0x90 [ 722.907476][T14297] ? netlink_ack+0xb80/0xb80 [ 722.912086][T14297] ? mutex_trylock+0xa0/0xa0 [ 722.916696][T14297] ? __netlink_lookup+0x387/0x3b0 [ 722.921737][T14297] xfrm_netlink_rcv+0x72/0x90 [ 722.926518][T14297] netlink_unicast+0x876/0xa40 [ 722.931291][T14297] netlink_sendmsg+0x88d/0xb30 [ 722.936072][T14297] ? schedule_preempt_disabled+0x20/0x20 [ 722.941733][T14297] ? netlink_getsockopt+0x530/0x530 [ 722.946988][T14297] ? security_socket_sendmsg+0x82/0xa0 [ 722.952453][T14297] ? netlink_getsockopt+0x530/0x530 [ 722.957694][T14297] ____sys_sendmsg+0x5a2/0x8c0 [ 722.962488][T14297] ? __sys_sendmsg_sock+0x40/0x40 [ 722.967854][T14297] ? import_iovec+0x7c/0xb0 [ 722.972381][T14297] ___sys_sendmsg+0x1f0/0x260 [ 722.977081][T14297] ? __sys_sendmsg+0x250/0x250 [ 722.981873][T14297] ? __fdget+0x1a1/0x230 [ 722.986144][T14297] __x64_sys_sendmsg+0x1e2/0x2a0 [ 722.991104][T14297] ? __kasan_check_write+0x14/0x20 [ 722.996236][T14297] ? ___sys_sendmsg+0x260/0x260 [ 723.001121][T14297] ? __kasan_check_read+0x11/0x20 [ 723.006156][T14297] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 723.011829][T14297] do_syscall_64+0x31/0x40 [ 723.016278][T14297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 723.022185][T14297] RIP: 0033:0x7f40b9421fc9 [ 723.026620][T14297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.046509][T14297] RSP: 002b:00007f40b7e8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.054967][T14297] RAX: ffffffffffffffda RBX: 00007f40b9678fa0 RCX: 00007f40b9421fc9 [ 723.062982][T14297] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 723.070967][T14297] RBP: 00007f40b94a4f91 R08: 0000000000000000 R09: 0000000000000000 [ 723.079088][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.087089][T14297] R13: 00007f40b9679038 R14: 00007f40b9678fa0 R15: 00007ffe094f2f98 [ 723.095075][T14297] [ 723.097532][T14297] Allocated by task 14297: [ 723.101967][T14297] __kasan_kmalloc+0xda/0x110 [ 723.106799][T14297] __kmalloc+0x1a7/0x330 [ 723.111047][T14297] sk_prot_alloc+0xb2/0x340 [ 723.115569][T14297] sk_alloc+0x38/0x4e0 [ 723.119754][T14297] pfkey_create+0x12a/0x660 [ 723.124277][T14297] __sock_create+0x38d/0x770 [ 723.128925][T14297] __sys_socket+0xec/0x190 [ 723.133360][T14297] __x64_sys_socket+0x7a/0x90 [ 723.138041][T14297] do_syscall_64+0x31/0x40 [ 723.142469][T14297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 723.148360][T14297] [ 723.150691][T14297] Last potentially related work creation: [ 723.156424][T14297] kasan_save_stack+0x3a/0x60 [ 723.161108][T14297] __kasan_record_aux_stack+0xd2/0x100 [ 723.166616][T14297] kasan_record_aux_stack_noalloc+0xb/0x10 [ 723.172437][T14297] insert_work+0x52/0x310 [ 723.176791][T14297] __queue_work+0x923/0xca0 [ 723.181413][T14297] queue_work_on+0xd5/0x130 [ 723.185934][T14297] bpf_prog_free+0x139/0x150 [ 723.190536][T14297] __bpf_prog_put_rcu+0x14b/0x170 [ 723.195571][T14297] rcu_do_batch+0x4df/0xa80 [ 723.200083][T14297] rcu_core+0x55f/0xd60 [ 723.204243][T14297] rcu_core_si+0x9/0x10 [ 723.208572][T14297] __do_softirq+0x255/0x563 [ 723.213079][T14297] [ 723.215590][T14297] Second to last potentially related work creation: [ 723.222179][T14297] kasan_save_stack+0x3a/0x60 [ 723.226862][T14297] __kasan_record_aux_stack+0xd2/0x100 [ 723.232325][T14297] kasan_record_aux_stack_noalloc+0xb/0x10 [ 723.238150][T14297] call_rcu+0x10e/0x1050 [ 723.242428][T14297] bpf_prog_put+0x2c8/0x3a0 [ 723.247120][T14297] bpf_prog_release+0x3b/0x40 [ 723.251805][T14297] __fput+0x2fb/0x770 [ 723.255796][T14297] ____fput+0x15/0x20 [ 723.259869][T14297] task_work_run+0x127/0x190 [ 723.264461][T14297] exit_to_user_mode_loop+0xcb/0xe0 [ 723.269663][T14297] exit_to_user_mode_prepare+0x76/0xa0 [ 723.275127][T14297] syscall_exit_to_user_mode+0x1d/0x40 [ 723.280588][T14297] do_syscall_64+0x3d/0x40 [ 723.285012][T14297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 723.290899][T14297] [ 723.293237][T14297] The buggy address belongs to the object at ffff8881514af000 [ 723.293237][T14297] which belongs to the cache kmalloc-1k of size 1024 [ 723.307554][T14297] The buggy address is located 984 bytes inside of [ 723.307554][T14297] 1024-byte region [ffff8881514af000, ffff8881514af400) [ 723.321127][T14297] The buggy address belongs to the page: [ 723.326793][T14297] page:ffffea0005452a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1514a8 [ 723.337061][T14297] head:ffffea0005452a00 order:3 compound_mapcount:0 compound_pincount:0 [ 723.345398][T14297] flags: 0x4000000000010200(slab|head) [ 723.350874][T14297] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 723.359492][T14297] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 723.368082][T14297] page dumped because: kasan: bad access detected [ 723.374507][T14297] page_owner tracks the page as allocated [ 723.380241][T14297] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1f2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_MEMALLOC|__GFP_HARDWALL), pid 11658, ts 626987279234, free_ts 0 [ 723.400733][T14297] prep_new_page+0x179/0x180 [ 723.405340][T14297] get_page_from_freelist+0x2235/0x23d0 [ 723.410890][T14297] __alloc_pages_nodemask+0x268/0x5f0 [ 723.416359][T14297] new_slab+0x84/0x3f0 [ 723.420452][T14297] ___slab_alloc+0x2a6/0x450 [ 723.425135][T14297] __slab_alloc+0x63/0xa0 [ 723.429482][T14297] __kmalloc_track_caller+0x1ef/0x320 [ 723.434863][T14297] __alloc_skb+0xdc/0x520 [ 723.439199][T14297] __napi_alloc_skb+0x158/0x2e0 [ 723.444082][T14297] page_to_skb+0x40/0x8b0 [ 723.448426][T14297] receive_buf+0xba1/0x45a0 [ 723.452938][T14297] virtnet_poll+0x4f2/0xef0 [ 723.457445][T14297] net_rx_action+0x432/0xdd0 [ 723.462039][T14297] __do_softirq+0x255/0x563 [ 723.466538][T14297] page_owner free stack trace missing [ 723.471909][T14297] [ 723.474240][T14297] Memory state around the buggy address: [ 723.480073][T14297] ffff8881514af280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 723.488135][T14297] ffff8881514af300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 723.496203][T14297] >ffff8881514af380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 723.504271][T14297] ^ [ 723.511304][T14297] ffff8881514af400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 723.519370][T14297] ffff8881514af480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 723.527449][T14297] ================================================================== [ 723.535525][T14297] Disabling lock debugging due to kernel taint [ 724.062764][T12720] usb 9-1: USB disconnect, device number 40 [ 726.569088][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 727.859038][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!