last executing test programs: 6m2.880294018s ago: executing program 32 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000200)={0x0, 0xbf, &(0x7f0000000400)="33caeb4cd21394c6dfcd1816f33e4d274c11207a7e697fd83bf31e3d0ec721c7a894b23caa8b8f82bf3db7cf3a7e3c51acb54085ff9f3d70f1e53cae5aedd3df44bf1129c8c735fc137bdf631f69cc9200eeb4b19214f8abc2a93c9aac55cbca4f13296785483272d27912079b001d5cae37cfa50ebd67225cb0b0e9bb7438e9ed6c1a908b5792c3cf892ae9ddc1f2c050d033ff740e5a9671e365e119e64f161d275f4eed2ac0f8fdba17da8ee483a5d9bf7340bc1559417d5ce4da7930e2"}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000600000000140012800b0001f26d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f0005000000050011000100000008001f0008000000080023"], 0x70}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) close(r6) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 5m36.493510509s ago: executing program 33 (id=193): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x21d, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x5, 0x2, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) close(r0) 5m33.113143233s ago: executing program 34 (id=210): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x107, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x147842, 0x49) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r5, 0x0, 0xbf5, 0x2000402) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x2, 0x1, 0x0, 0xfff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000100)={[{@resuid}, {@init_itable}, {@nombcache}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") 5m29.152773472s ago: executing program 35 (id=228): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x2881000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="36c9b514693335dd24d25f547a3d48f638a5397661d3cd1d7da11ee6191777ed2815fcb85b2b79e9b545429e81f29c79623adc7377c042c6cf097a0855f2fa89a1f35d5cb1fd7eb71a67964ea84a7fdc68f0db651716ac2a9412b7597779e465d25b4d3048f6df48a9dec9376fb4007240b1e82841adaeed00bbbf1f70e7234f1e5d47496daffcfc697acf5ca669b824b669bdd03e5ba0c0313ff1887480", @ANYRES16=r1, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x13, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r3, @ANYRESOCT, @ANYBLOB="0000000000000000000000000000000000000000bc7e4993fbc4f96d64a8772acb758743b8292db4c898bbf70531385bc6d068f5419d0f809ae94fb5a621123e20a58737326f2e5dff7ed9f4d84acd12ce82608c19af3a71d3ed830281d8e1c88df4dc3dcb363346398b6a01df7a6bf635b96d0ff7ad21a34d54c9667a09e930f5f9fd7844853ffe83bcc2ee0000ac000000000000000000", @ANYRES8=0x0, @ANYRESOCT, @ANYRESDEC=r3], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x5800, 0x0}, 0x10) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x40030060, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x5, &(0x7f0000000640)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x60, &(0x7f0000000300)=""/96, 0x41000, 0x56, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x6, 0xb, 0xfffffffe}, 0x10, 0x0, r8, 0x4, &(0x7f00000004c0)=[0xffffffffffffffff, r9, r7, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x2, 0x7, 0x4}, {0x0, 0x4, 0x4, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x4, 0x7, 0x4000f, 0x1}], 0x10, 0x6e2}, 0x94) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_PIE_ON(r10, 0x7005) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x20002003}) socket$tipc(0x1e, 0x5, 0x0) 3m34.309681527s ago: executing program 36 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev2(r2, &(0x7f0000000680)=[{&(0x7f0000000280)="2fd1f6064b30cfac6430afc425eda12d83f715b05bdbc7fef3fcdd04cfd3a85ae35dfe2a8adf24c1633116940e8734e5cd8d7cda1a33dcb0d55e47d38c405e27a821d23a9d45a4a85040632fabf912bb5361722cd5469100d92554fe2aa1999033878c01735fbfcde38a5f10391fa1c26089bb9cf97840f23205944b2f5a20fc2953e715eddec36f3f36ceb9840006bf1feb9c6f6f23355e196200bc2e2a1b0077eb095a29984bfe6183", 0xaa}, {&(0x7f0000000200)="da00d5dd7ecdfd5c0fa5569e97eb72c495", 0x11}, {&(0x7f00000003c0)="e38c02f8bf6bfdb006c7933526", 0xd}, {&(0x7f0000001400)="3fb39e6bf9cfb6ee88833554ce5fe1dab2c4ddba58c760f751186b82987e9c5c971c795cf0f00779fcba42a154e6d923a9aad76dc6b6e522233aa2bbf2aa6834cb4deeb021605ba7657006e8ee933e490d2155ba5ca8a59edb70212c7faaee971cb27ec81eb7c87178a11e6b1126a322b9c5154f6e213fd41c18fa08937d0ccf6729d979840cefeed23bab365c1e4401dd8fd235486c55b33717c9e8735e0dde012487f0a455966048bfeb06229981c799b02d6ebd9b9fbf88e649b4e06e4fb36a813f8aaea5ae30cabce5082611579568b6e56764614ae6097c9a63955117bab66c78c87c7378ae941bb966814f59e8fc9cf3d3b87e1e141cbc265b90e7fc367f921239880224a89c0dc57dee517997bdbe40ffbeff75cc579a8636c249216722653b49fc55dda8d0d089a5202a15deaa677d0d23db152b9827e763b3062e49369b788bc1eab1db8758116097e8ebdca6d091051c1f275a5946f28b376b46e5873ae44ff93bd1f073c0152b8982fb1a109500ced916a5a45fa284c695523a0192646e478d62490bc130f367cc3eacddc56e740a493070209d966198d789a23c168eebaefc475f52913be69c91ce426bdd2caf671566b8c776ddce733a08670e4374cb604b6e70fe075c73891307177185a41f852e57f5ef94fa67df1ae165b908948b2bf9653a6f3a07a73cfd26859e46b7e0d8884a57030ea554d80744b0e2a399956c14abb023a867eb807c8c11501d947ff0fcf7425a775592c684ae7165342c2d64351c18d8cc14c8b152c2c00d717c8fd494fbb7600cf9e164a6f50793aca8c38cb37a7aac170beb7c8e441412d5389337f7bf9bb8a31a8e382bc4012a90443c8ad5d20eafdd8f9ac0ea1945f8a965f53c175a332308df43ada926de93368af1f0bfe190a25fa243d9ac6f76e4ab69d135fd72856c4563ece6123572782ab41e966ba5d8d690a47e4f2b16d3b05d6c484756a2e63ac2b36765467f655f1e5bf4ce1eddd730699448e099de2b21d459c339828a428c160164070620d67e9a5f1ea3911e45c72a3f31c4fe5fe24249dbcad4974f19728703ef1b9a0b0586c3cea8842d1faaa0c3faac7772880c4a93d1075307b36b390af11ccbefcc407bd15d1e2e96ab280d175d5eb9d7db44d91b1a9492c57f03215467785e02697c777aea450c480daa4b7cc66063b4ffdd042fa07c7c0ad18f96683d677c638b7a93a4e8711b3a1b6737c568987c89a45cbee9d044fa894b9f654964c55d090c80685ee5aef191f50203f3928463d7be0489fab39715ccd40c29c94605f6e0dbb8ad7f24f59320af4d0cc557c484cefd111848bbba3bb692ff321c8330b6ba72fb5bea42bc4283279259fbd8def1e8429975f41e2acde5c48236d3ee5ade33d4dfbe8543a0519ccb9503bd0a693145b3fd9cec0f6967d4023ee35e8cd8084ea09bf9d13589c71cf7a1aaad6da080e9dd76e2b37336bdeae5e7207d916ee680d9974fbf5f3253c278b272967e7a30d3063dc520f1e24c858c9abc077e3d799b3c954d6ea7468df700ef3e28fca375848708c32f5ac3ce569f10b9f1d19e68a765e2819dc50c9027bbf537fd54bde30875db982724d86e137d76df8c582e1c2bfb0990eb16357a16a1236b791215171fca1af2e4edba43ed49560ffdd4f62a59df52b132bd404a9046802334b5c2943bf4ed8ee5135cec52bb67f127538fef49d028a25d8446900dc442ddc1b7441bcf006ba5c0e07ed39db64a9b393f858817c7d5cfffe60feaae7566e1d816c7074daab98b2757799ec32138db67a9f17b67b82c27500ba5d40dacd8cf87dcdb041f2151f9661a7ce0690232645e15d3e7004e3c953ea741549bc11650b5c67207c4abfb6ca98298b5dd0404c974fa858150aa85d8253e95746aca54c5fc38433bd87d7fdf29397bdedd1072764218173e80890ecb92d7def0ee0140d3b39d4811f1b4af7653a419134493f5ff291920acaf48f0acf546526f193b8a8d3deb1106f86fd424aa7fa9fafa19c378d3f17017819c4194dd2afa02509895d2d55e38aa2a36e38151ae3a4a1c20dde9609b31261fb5879276572f9607baf22c59bfd01994a58e1172a27fcfdbac2a8c4187144e275068c98a6fd110c89fba3e2dbda25d471c51d08397fcdcbfbb9f2f28de0da7e3065739b01dea994d112dfe332c2ebf7879d174e30a465b670cdff552b79296761a7c3c3b225c0007fc5c2e3c3c06bc2999c430b3697526181df7e93e10a4a5dca46981af4ad434817308c2d4dd2ccb354d4671e78fa66976a9adb251d54191dc74775114b30097d57ebb20e4e299001bf76bc13fc894c8d6d521bd652184c9eb89036ed585f8db8bf7068b7da449f3b3ec0e109ed792d8fbb4f8910c7a64ac438dbd43ccf00da0fbe958ec747667f59f896071eea0f850a2605186a374c6e0100cb880475d3f62061157db3d1e7e3a9bfb4eafb64fc642137e997f8588dbfc149d367a28a71c9671ff18a39e569f341841424cb745b2bf591fafb71324e8fb3c99cd838ec3e18d2340dfd3e5eb73489cd1943d4c0c093c54b4035451c21b7790a01b2ff9299a5420a9e9a1ad96d26296e1c03d1cb9f6f9b65297956dc1c51e83ff69c316c353249c7effd0000617f24f963091d828e89856b94f706bc55993836175977d8d63b3164f78358f2cd961b22d6dde6b91936a9a07e21935b8c9994f588ca969801d2f8aed26d784d7294974e6f5adf16e3ad5df90c07b8603259a9d38c4344e334cfda25079f5ca4fb53d2ac36ce67c47cfeab06d609a058bb5e77eae55f248cc91e652e2340524ec86b894bf820b25607183f5fb1180f55dca2e828ca843f509bfe07e9d0bd66a968fd36be9c2e1f9d1a216b03477eb950f6e21d15ad62077b2480258eef185154bcf13321f1a1e31c80efdad00293f6f161193fe23630b947ca211f646e15c1422dbb01d1fb28ed178f876014a352a28c2e5fab2feab4baceecabf997090c5530f1f0c3ad4cfec5b139f12df3bae27af0eaefbf8a6cfe0aec3c136aa84b7829c9a85d10c55d558a2c4e8cbbff545cbed22c24f7b2f69a900c8919b66f6361e563c74f23313884012dea6354d82d765e7287c06eede67a4f7c6a3bb49e8529458b2ce5ae7e4aaacc3f59dc3a65002caca0ce091b2a21481997cdfa4686c8e457c9e8cd1deea7094bbdd9568bc73a09926a8b57141972e57911d3bfc7afb878f243f517d1b919c461b88e1bb94772f1750cf42d261292c8ed207719d000821ec62fc050daa31cbc4c16f02ea63a97595f9dc2bdf20ea9f617c702a140f04db675eee50ad8e4cd31a5a5abeb68f90c666e5ef1ef04d5399da36ee0e6a7519edd481c8f6fe3cf54b63905fad24de4828a3e93c0b5ba508575db03ca0c252be0f931322564acc8ce31bedb8ff16ebadd80944b81215722884cf823d180874a897f262bf8459313c6c8563f6c248edfe8ba3e01b5bf8f29cd79f03660243b44d52d86bff1acc9c1e7040cde05ef9759858be59b14652bc5d7c273926a8b3121f8691f7a36d93bf1f8080122ce679ac4b86c4fd4538db296a94d915d80c1f56e24b247050f12a58364520c5ccf21b8d3a760d924ad9efb6dfc5eb796886840b0d6cfa66060c6d95ce0fa9d6a1f1220b61a2267718e483bcff241491525655cd97ae99818094bf9fa2f6c5c1edf420102085d1c4281cd3393690c9241a3b3d549a6630fc74c38ad90f3492abd804bf9eed0583e4efe9c8581215c215d8620612cfcd3eefb94f3d7bbf278926be3a4dc27cfe7eaa24b6556e2f97789790c9f65dcc0aec2c20682f3424b655487ab31952aad3bfb447ba3657dc8719742db65bb97ec3deb3ff2795ccc18932b2a279e17e637502e619fa12736bff1f038f16087d2c1bf458df8353a792b51eeb21f167a957ea73b4baf3e9c228c98048a3c74d70e269dc0072386ceeb2aaa7b7bc0e5aa12d47324ded56df08bfdb3ce669873c03dfcfcfc061a5c1d3608c88e0162b2dd50dd736074798be0faa4fa826b5455a8f99a61ec504e9c26e2c94dff127bb12c96d30d54236f1d557cefa87e2fdea6e1b97afaa1015a63765d67cac5105d5cfb484b2b7003f4625b3069e06991d7605c7bfd96880e9fd93f924d7d63218c3c5af8865c71a1a986f281a21a3f950d349529ee35c6cfbd244a24149f2d3564659862333efdc4b10b582cdfeec4357e52933407e5488ab45f72ba33f1778215194a4e122ad1abf5acc9e241f396f5265cca08ef788253c63c69f5687ecd703a502b5563660ac6af4f57b2c61375c042a661040494c33381324252fae2c770aecb54bfb8649f85b6a2a08c652ae0dbaffc2a7f405b33168b9f2fe7900a91c4562fdd45b9d298106b4611e5087c5af88ca3d4c5b9fcfda75db57de8f2a62d50d2ff2a5155ea464fddf132d0206a9b7fe4611f41492a1253461490c9ceec053d51877a992a542f4e9045c172ac2f614d88ae0dc207f19be0caddcf4c3af74a78b40826669e65180646db9931d396929886d905d5e21e647afd937121fdfe390ed70e369d76fa88589cf0c7a330a6d0c0e939bf4ed543064a0d6eac5b660aac54816841739c3634371739e09416554efdb286464711f12666afdd68cc5ad46f7a9a028489f0ca2addb92d1f537cf1f7da1f903cebf436280149929193181a9b2101e7d10e300fe93ed6f6b00ac4822592d66a5340fda3a491ff137ec91f80550879c7e261df7ebcc2b7b2c5dfe980338334ddf2aef4ff60805595cf3d46e73e7a1f0749536ce5489cd5f9d80a71072069d5a9fd50ff25e179c69cec6d8a9be65c559e83f3c46df8e7b136a09e8d9d529db111b56796265a39aaad8bda3b3a20d3f055feeb457866157cbbc87446cd629ede5cf1c0d87ab556a26dbe628fc2b90e59a36fe8d33631d398531050da7c2e07b5c8c7b19827fbd2cc034e2f7df5c73e2dd471fa7a5546fabc58af163bdfac83b4edd43f0a1444c40056dc3e118976db2a0d7ecc9393a2cfed925f0ae69a696caf3f2c62cfb799d7f1f34133f29a275c3fb7f2602af1fad91ca1cf7181ec500983952bd8f3888a9d9e49b0e40c4c144abc20a8657bcf4f9a4ec905b0ccb6758b6533c0c1ea51c2830f11a83e4eb7006de350335604ffc61fcfad588540ccb78120701b4df83018d9cf184cc2fd4887df253a69a5b59eaba81c772941886b778658801dd44ef7748476d12e30992f61b8cd9e577f4a2e46c57fbc8284469622bd77d51bb8e8332fc3caea94cb1a641e359df8be57ab2eba8347d54ddedd2b429d7f68f4a902f58977e8292cdf4cdfa97f9f2061f215b7769c289d85fa5edf434fec2ba689fc063611d87b94da0d7658508bdb4462a4122a8b9fa998bfc4a4120da43fd350eb081e90636eb44d091fa9407ae5cca36d481036d8b9a671dad36b1095fef6d7b3213bf837c8fd358c3e30e161c508b81f27bfa1d77eedd7395b49c6c0f267ca669235ef67a78550852c211f8de9cdc19c052f8ba02e7515204681200e104c378c3d011fb2614070afebedb968f18e5b5dd16effc07f23115522db6e39787b67596a20aacb8b3048c1ed73e15e3ae1ed430bba3c374cb117c0dca29686b03d5c7ebaae9c6b4ef9c97b850041c4b128889e20cff5bd92f515d24acdf3ef8b59ad7d9c9881202442c86ab387982bf35cb9070bdd4abe98c7aa6caf7d6a814497f8187ff11139b467b1247fa33395eb16ec02621ba2cd90efdb97601536bd8dac2ced5978ccf94e1c28827da26bb10418b6971cdba6e373cf8eb9372", 0x1000}, {&(0x7f00000004c0)="2a764cb692adc4a26e91477921188f517f9612cfa2be850d6df390528b1e5cf360412dc53fbc008a3ad0f50b02673c44fcf0b5e09522381c6b27bfafe98d04eaa5c8d8925ed218ef15277bf57a2c0d7f080673987062db171d2d25d0ff5715e94da81d3e87efd4981633f5d697d978ee1edf736a8f46f63c13bfcff4768d9151efcdc3f159ec95ddf7b0fced13a95f6ca16325c3", 0x94}, {&(0x7f0000000580)="9b3c44a86230620c1d00f10b8b6fa9f1e0a65f25e5a19f32e59311f3c1934b4f85975cb23e249d02839d7abb08b80541becc960c9de583af8e8b3e2165f3560ddcc48be57573d2b18a193ff1f2225e69d526c0a4fb5a5a33f6bd5474ba7ecc0a2371ce943c51b21d4b5bd2bac1094c3d000531c6e62a6c67f7b34cd1c42054369c01137f3bae1fdb49ba1e577630bf463e5b0ecbf6d893dc113a8a834f6ef8b79a15371a362cdcaa3a7a0aa037ca9c5824613cb8b943f03c61b5db9c5996cb5eb25733d4b2a7838bfded83388658f4de6aea75f008de15736574cf9a9938a467c2758a", 0xe3}], 0x6, 0x3, 0x5, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r6, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x8}) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66ba, 0x0, 0x10000000000, 0x0, 0x4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2d, 0x0, 0x0, 0x9db, 0x248a, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff, 0x405, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000700)=""/238) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801fffffffffffc0000000000040000850000003600000085000000640000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001300)=""/230, 0xe6}], 0x1) (async) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 3m28.696954679s ago: executing program 37 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x4, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x0, 0xe08a, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x5) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) 3m12.20735929s ago: executing program 38 (id=786): r0 = socket$inet(0x2, 0xa, 0xfffffffe) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r1, &(0x7f0000003940)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/199, 0xc7}], 0x3, &(0x7f00000002c0)=""/116, 0x74}, 0x2}, {{&(0x7f0000000340)=@tipc=@name, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/57, 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/148, 0x94}, {&(0x7f0000001540)=""/179, 0xb3}, {&(0x7f0000001600)=""/121, 0x79}, {&(0x7f0000001680)=""/248, 0xf8}], 0x5, &(0x7f0000001800)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, &(0x7f00000038c0)=""/68, 0x44}, 0x6}], 0x4, 0x1, &(0x7f0000003a40)={0x0, 0x3938700}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000003a80)='./file0\x00', 0x440, 0x140) fspick(r3, &(0x7f0000003ac0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, &(0x7f0000005b40)) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000005c40)={&(0x7f0000005b80)=""/180, 0xb4}) mount$binder(0x0, &(0x7f0000005c80)='./file0\x00', &(0x7f0000005cc0), 0x2000080, &(0x7f0000005d00)={[{@max={'max', 0x3d, 0x2}}, {@stats}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@max={'max', 0x3d, 0x3}}], [{@subj_type={'subj_type', 0x3d, '1$-$&*{$!*#[}'}}]}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000005dc0)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000005d80), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'netdevsim0\x00', {0x6}}}}, {{@ipv6={@loopback, @local, [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0xff, 0xff000000, 0xff000000], 'nr0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x6c, 0x4, 0x1, 0xd}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x10, {0x4}}}}, {{@ipv6={@mcast1, @mcast1, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xffffffff], 'batadv_slave_0\x00', 'wg0\x00', {}, {}, 0x1d, 0x6, 0x7, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000006740)={&(0x7f0000006200)={0x10, 0x0, 0x0, 0x4347ddf19f8b5bd9}, 0xc, &(0x7f0000006700)={&(0x7f00000062c0)={0x404, r5, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xf2, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @broadcast, @from_mac, {0xb, 0x8}}, 0x1000, 0x57, @random=0x7, @void, @void, [{0xdd, 0xce, "396d33c265f6e8a923fb68b28ba46d74ad4fa9bd78e369e2164f8b8d85047d0cf10bed21d4dc29969a637aa10d0bb0fe17a650d97bc2409b4af16ecc2944d77eab4a6555dc4de7e562e02d94ded646a7dda5d054af878c3c2db1d3b71dfbbbc39883548ddbe0af925a33a497e7b0369b94a4b1ab5bdecb611db1f390de4e84a1306e98ee9b32af0b9574242811a1814b2997a9659363d5f7c84d6251491e4da45b1444dcdea27b441aff2b1f55b60437181f246b906de702f5d4644a0dbdca08d105121fe4fa4d257d7879fd30a9"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2a0, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xc}, @broadcast, @broadcast, @initial, {0x6}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4c6, @default, 0x8010, @void, @void, @val={0x3, 0x1, 0x8c}, @val={0x4, 0x6, {0x1e, 0x2, 0x80, 0x81}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0x10}}, [{0xdd, 0x98, "23139fa33bb0c21d989604eca036e3dce6f6fd54fdb6d52e2f524edbde95d8d5781cc451a3723f6db328866a62fe0ac8a79f3362189b87044689a6073fefd66d2edb08182630dc5726962607d243e42556380a49cfdb4985760b0be13cd0324b891604f1a4ced425e53bd4b94d6d85f1fe757622e2bd03892c55ab227c7d40efa62ea17887105cf7d71a71217e54292e7c716f8116c3ceae"}, {0xdd, 0xd0, "c437f880ce0240709fdd7c392709ddf6879c3ac9e662de6399f837522e4dd62987c149e0a17392a078d557bb9ff08523c213fc39c51389186ef51137265f08092292a1d10e6ed2fa01fb206908b0d3380a63381af7e763d3ba6714e41e8c177eff05074494cf6fd12a2e3d412ff3e98abe94c49eb63670fb85061cde56fb6fddabca4606388b6d833982af8a8c4b2a0e117461ea66b158cb56acd717d654645e22ff06b0b624856b947fc98e18e3940e4738ae87c408618b14ad9a550569c817723169ec49b9ba0e02111d3d9bcf9559"}, {0xdd, 0x41, "150e2a2b92480ba3faf47a9c400cd16d91f1826c5c7918b6214d96ea20b3f4819060d4a17cc7f5ff8a5a288194ae3f90e0defb3d72380ec181a99cc4e8b472e712"}, {0xdd, 0xa7, "086a36ecfe5d65068a187a9e7acdd5cc3a39af88ecccd1e1043039cd9df4345fd5ed6eca6e8d73ce04bdf744d4757dfcd42977ef7613504786e4469ccba9e13e424b8800c2a9f7256b847d4b3dbfbbb68b397ff33c6e1fb14f5f3a6099381618ae1e236d1871047ac31ac5967232e5fb4211547bf042f2aa532fd41b3bf5caaa525417fcd959484a9c3b3e4a757010d4247cc0295523a55552c016b9595d46b26ab767e29332cb"}]}}]}, 0x404}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mknodat(r3, &(0x7f0000006780)='./file0\x00', 0x8, 0x101) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000067c0)=""/132, &(0x7f0000006880)=0x84) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000068c0)=0x0) ptrace$getregset(0x4204, r7, 0x4, &(0x7f0000006980)={&(0x7f0000006900)=""/124, 0x7c}) fgetxattr(r1, &(0x7f00000069c0)=@known='user.incfs.size\x00', &(0x7f0000006a00)=""/4096, 0x1000) sched_setaffinity(r4, 0x8, &(0x7f0000007a00)=0xfffffffffffffffe) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000007bc0)={0x1a, 0x5, &(0x7f0000007a40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x2, 0xa, 0x5, 0x30, 0x1}], &(0x7f0000007a80)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000007ac0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000007b00)={0x0, 0x10, 0x1, 0x5b3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000007b40)=[0x1, 0xffffffffffffffff], &(0x7f0000007b80)=[{0x4, 0x3, 0xf, 0xa}], 0x10, 0xc}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000007d80)={@cgroup, 0x4, 0x1, 0x2, &(0x7f0000007c80)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000007cc0)=[0x0, 0x0, 0x0], &(0x7f0000007d00)=[0x0, 0x0], &(0x7f0000007d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000007e00)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000007dc0)={@fallback=r2, r8, 0x6, 0x14, 0x0, @void, @value=r10, @void, @void, r9}, 0x20) r11 = getpid() socket(0x29, 0x801, 0x69a5) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ptrace$cont(0xc8e3088d96cb2b43, r11, 0x5, 0x7) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000007f80)={&(0x7f0000007e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000007f40)={&(0x7f0000007e80)={0x9c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8bc00000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000007fc0)=0xfffff584) socket$inet(0x2, 0x5, 0xfff) 3m7.800968445s ago: executing program 2 (id=831): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) pipe2$9p(0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61118c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x11, 0x0, &(0x7f0000000300)="ff7effff116c3ed990f77e9ea6cf41c7a1", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000f5000100000000f00000020000000000"], 0x0, 0x47, 0x0, 0x1}, 0x28) (async) unlink(0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010058000000000000000c0000000c0000000200008dfe17a60000000009030000000000"], 0x0, 0x26}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000d60500000000000000e7a7a8218ab4a59cfd6cb5bf777b6146617311fbda79806afdc89eea1039d9522e3442db5001741df14f1d105ae4e3677941088149597c6f734ddef60c74b60efd9b0c34dc663b26e80134a8b0d96f5439d7b8c98c672450f015913067fe34570ca496af8353a2e7e493e75733f9cdb9966de0c5e0a6ac8bf274bac32b74df47e8b4b2b37aa49884468e2e3aa2f155", @ANYRESHEX=r5, @ANYRES8=r1, @ANYBLOB="565be85fdeab4e7eb8ae1cd0de65ba14ca58"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)=r7}, 0x20) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="c9f09daf7f00005f71010000"]) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) (async) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)) 3m7.800822015s ago: executing program 2 (id=832): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/70) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1400000000000000180000000000"], 0x18}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000000000000050000000500"]) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) getsockopt$netlink(r5, 0x10e, 0xeb5bdc9a4f7942f2, &(0x7f0000000080)=""/20, &(0x7f00000000c0)=0x14) 3m7.192879755s ago: executing program 2 (id=836): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102000000000000000002"], 0x1c}}, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000240)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1705e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x4) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000090000000e000000030000059600000001000000010000000c0000000f0000000200000009000100010000000200000008000000030000000000000900000000002e6161302e5f5f00"], &(0x7f00000003c0)=""/118, 0x5d, 0x76, 0x1, 0xf9f1}, 0x28) rmdir(&(0x7f0000000100)='./control\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ext4_collapse_range\x00', r5, 0x0, 0x5}, 0x18) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m7.192036525s ago: executing program 2 (id=837): creat(&(0x7f0000000340)='./file0\x00', 0x101) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x2007) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 3m6.409755918s ago: executing program 2 (id=844): mkdir(&(0x7f0000000080)='./file0\x00', 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1900000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003cbe2f4b2ed7951644f8eb2add9ddc973f85e842c51e563452f13fbf552bdb8e842c960996f31fee40f7d7c814bb262111c8fcfbd7a9d5923584187c5080b0c255670857402a8ac5ac4289afa0f4"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 3m6.00486699s ago: executing program 2 (id=845): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3m6.003480041s ago: executing program 39 (id=845): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m54.654483976s ago: executing program 5 (id=920): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x3, &(0x7f00000000c0), 0x0) execveat(0xffffffffffffffff, &(0x7f0000004340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x400) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 2m54.503326428s ago: executing program 5 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf25040000002c000380080003001600000008000200fbffffff0800020000000000080002000500000008000100fcffffff2c000380080002000800000008000100090000000800030001fcffff08000200010000000800020002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x41000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095", @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5534, &(0x7f000000a000)="$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") bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) 2m53.710772183s ago: executing program 5 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, r1, 0x0, 0x20}, 0x38) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept4(r5, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000040)=0x80, 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xf5) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x10040, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0xb, [@restrict={0xa, 0x0, 0x0, 0xb, 0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0xa, 0x3}, {0xc, 0x3}]}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x1, [{0x10, 0x5, 0x6}, {0x3, 0x3, 0xc}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3, [{0xa, 0x3, 0x3}, {0x4, 0x1, 0x245f}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x0, 0x2e, 0x0, 0x2e, 0x61, 0x0]}}, &(0x7f0000000700)=""/4096, 0xa7, 0x1000, 0x1, 0x2, 0x10000, @value=r6}, 0x28) r7 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r8, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1fd, r7, 0x0, 0x0, 0x4, 0x0, 0x1, r7}]) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x0, 0x5001) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x6) ftruncate(r9, 0x4) 2m52.50355972s ago: executing program 5 (id=936): creat(&(0x7f0000000340)='./file0\x00', 0x101) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x2007) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 2m51.295436138s ago: executing program 5 (id=949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', r1, 0x700, 0x7800, 0x6, 0x4, {{0x2d, 0x4, 0x2, 0x8, 0xb4, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @empty, {[@cipso={0x86, 0x39, 0x3, [{0x1, 0x2}, {0x2, 0x11, "89f5b9e8b7e1179c12097e5143af5d"}, {0x2, 0x11, "70a2811838142dbeb26abb1d7276ad"}, {0x1, 0x7, "4a6962ad99"}, {0x5, 0x8, "a76d587df81c"}]}, @lsrr={0x83, 0x27, 0x69, [@empty, @rand_addr=0x64010100, @remote, @loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @local, @private=0xa010102]}, @lsrr={0x83, 0x27, 0x69, [@rand_addr=0x64010100, @empty, @private=0xa010101, @multicast2, @multicast2, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x13, 0x10, [@dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010101, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@RTM_NEWMDB={0x78, 0x1e, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x1, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x1, {@in6_addr=@rand_addr=' \x01\x00', 0x96dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, 0x78}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m51.151926249s ago: executing program 5 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611028000000000063010d00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbc, &(0x7f00000004c0)=""/188, 0x0, 0x66, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfcceb", 0x90) pipe(&(0x7f00000001c0)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000006000000000000000080000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) dup3(r3, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000018110000", @ANYRES32, @ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2016b89b3504ae98c92107cb4912a43353f0e1968ad93006f8ad6912c8c1c0cc32c2e85967a0478aba85c4"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000180)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "5f858bfcda5709716d8830f5bfe6a66b73179c5d0f0cd86de89be00f9040ab60", 0x3, 0x2, 0x1, 0x1}, 0x3c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) 2m51.119244022s ago: executing program 40 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611028000000000063010d00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbc, &(0x7f00000004c0)=""/188, 0x0, 0x66, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfcceb", 0x90) pipe(&(0x7f00000001c0)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000006000000000000000080000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) dup3(r3, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000018110000", @ANYRES32, @ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2016b89b3504ae98c92107cb4912a43353f0e1968ad93006f8ad6912c8c1c0cc32c2e85967a0478aba85c4"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000180)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "5f858bfcda5709716d8830f5bfe6a66b73179c5d0f0cd86de89be00f9040ab60", 0x3, 0x2, 0x1, 0x1}, 0x3c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) 2m46.744445525s ago: executing program 1 (id=984): pipe2$9p(&(0x7f00000000c0), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}}, 0x200448c0) io_setup(0x9, &(0x7f00000005c0)=0x0) io_getevents(r5, 0x5, 0x5, &(0x7f0000000780)=[{}, {}, {}, {}, {}], &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000340)={[0x9]}, &(0x7f0000000380), 0x8) 2m46.464984187s ago: executing program 1 (id=990): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2m45.918562101s ago: executing program 1 (id=992): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c757466383d302c756e695f786c6174653d312c696f63684b727365743d63703836352c757466383d302c757466383d312c757466383d302c666d61736b3d30303030303030303030303030303030303030303030352c756e695f786c6174653d65a33dae795c76387365743d6d6163696e7569742c757466383d302c636f6465706167653d3835372c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636f6465706167653d3836332c696f636861727365743d69736f383835392d362c6e6f6e756d7461696c3d302c00"], 0x1, 0x36a, &(0x7f0000001840)="$eJzs3U9oY0UYAPAvfWnSXdD2JgpC9CZo2e5NL7ZIFxZ7UQn+OYjB7aokVWix2B62rQfFo+BRT94U9OBBPIqgiDcPXl1BVsWD7m3BxZHkvSSvSdrtLnal+PtBk+nMfDPf+0PyGl6mLyxG+8J0XLx69UrMzFSiuvjYYlyrxFxk0bcb42oT6gCAk+FaSvFnyo22zUwOqdyGtACAY9R7/38pIhoxl9e8+fVh/ZN3fwA48Yq//08d1ueAzwEiXjuWlACAYzb2+f/9+5prvZ9q/9dq6a4AAOCkeurZ5x5fWol4stGYiVh7e7O52YxHhu1LF+OV6MRqnInZuB6RXyh0Hyq9x3PnV5bPNBqNnfhlLpoRMVUENvMrhaWsF1+PhZiNuSK+uNpIKWXnPltZXmj0RMTuTm/+WKtsNqfjdDH/j6djdXjh0R+k9xRxfmX5bKMYoLnWj9+J2BveqNDNfz5m4/sXB8Ok1L+DcWX50kI/6WH8ZrMeFwZ74cBPQAAAAAAAAAAAAAAAAAAAAAAA4JbMNwbmBuvnpO5zvlLO/PyE9t76OHl8sT7QXr4+UKqnSOmPNx5qvpPFvvWBRtfn2bSQIAAAAAAAAAAAAAAAAAAAAAxsbNWi1emsrm9sbbfLhZ31ja2piOjWvPrtJ1+divE+NyhU8ynqEYMpGsW02+1WyvqdUxYxHp51J+/XfPT5IONyn/pgKyamUT+4qdO5476f3x/W3Jv1R/572CeLyRuYldJ4dGTktTvzlG5mRw0KZ8s19fHZL6eUSjVvlcMvPT8+YFQiqjd/4LbbU3Fwn9QtfHPl5bv7e7/1Zco98ODs05ff+/C3dqvTnTl6R7C2vnE9tVuVfucjzF4Ml3qHYHhuVCIvVMpnQvWwAff217SyH35/5p53vzvaTkjlmte75/NInyzfnE9Hw2t5oZvmSNOpYfh0sRGd1ekJJ/+NCrdwTO/64IuPU/rp1yNPMTQ19rJR+XdefQAAAAAAAAAAAAAAAAAAgLLSd8ULxZd9pw+LeviJ488MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6f4f//LxX2dmOk5iiFv3YmRNVX1zciav/1ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/3TwAAAP//D7VfEw==") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = signalfd(r1, &(0x7f0000000240)={[0x4]}, 0x8) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) sendmsg$nl_generic(r2, &(0x7f0000001680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="78120000abe110002cbd7000fb0adbdf2509430000a9110d80060030007d45c718cd708100f3ba2663d8", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x1278}}, 0x20008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x64000600) 2m45.917601511s ago: executing program 1 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x85) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) getdents64(r5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000000000000000000010000000000009100000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m45.777845572s ago: executing program 1 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0xb0, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x80}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4cce4486ec5aae7b87dee7afc2b26ab9"}, @NL80211_ATTR_PMK={0x14, 0xfe, "8a0d768796db1d0facc09b82168ac59f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "358173bc5d97d9dbdbd57348c0244657"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "b10c8ae9bb0978068540245aa9e72110"}, @NL80211_ATTR_PMK={0x14, 0xfe, "08d796527d7a521f25a84893d136c8d1"}, @NL80211_ATTR_PMK={0x14, 0xfe, "84246326f1f61a4323bf2db908199ada"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40480c1}, 0x4040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001000000", @ANYRES32, @ANYBLOB="0d000001e800000086ee738b3d0bc6d2dffd97c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002f7, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x13, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) writev(r9, &(0x7f0000000440)=[{&(0x7f00000003c0)="290d5dfab44c9e1d187b78141e9da88b", 0x10}], 0x31) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd69"], 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10) 2m45.694672729s ago: executing program 1 (id=998): prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 64) get_robust_list(0xffffffffffffffff, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000500)={&(0x7f0000000300)}}, &(0x7f00000005c0)=0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100000000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_wait(r8, &(0x7f0000000280)=[{}], 0x1, 0x4000005) (async) close_range(r5, 0xffffffffffffffff, 0x0) 2m45.664479382s ago: executing program 41 (id=998): prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 64) get_robust_list(0xffffffffffffffff, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000500)={&(0x7f0000000300)}}, &(0x7f00000005c0)=0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100000000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_wait(r8, &(0x7f0000000280)=[{}], 0x1, 0x4000005) (async) close_range(r5, 0xffffffffffffffff, 0x0) 45.445502112s ago: executing program 8 (id=1828): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB='7', @ANYBLOB="0000ffffffffe8fffffffffffffd5f", @ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x996) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 44.158139966s ago: executing program 8 (id=1833): unshare(0x22000400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x24}, {r1, 0x80}], 0x2, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000000)=[{r0, 0x24}, {r1, 0x80}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(0x0, 0x4080) (async) pipe2(0x0, 0x4080) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) (async) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wo\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) 43.234721451s ago: executing program 8 (id=1843): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x8, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@acl}, {@noload}, {@debug}, {@bsdgroups}, {@user_xattr}]}, 0x1, 0x63b, &(0x7f0000000e40)="$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") 43.208411223s ago: executing program 8 (id=1844): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000180)=""/224) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 42.793997887s ago: executing program 8 (id=1846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = creat(0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r4, 0x0, 0x80) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @opaque="65ef83f7775bcf0ddbfa95cc714fe4297b681bd9ed5d1e6f7716fdc67a6967d9817f39d296d8f845"}}}}}}, 0x0) 42.772558708s ago: executing program 8 (id=1847): ptrace(0x10, 0x1) waitid(0x0, 0x0, &(0x7f0000000240), 0x1, &(0x7f00000004c0)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="180000004000000000000000790500008520000004000000182b0000b5549980a1019817ce8ab085d14ab4e857e81fd17c3622a60ecf1c5805f07d98c1bc07fc0e14edd7997bf862", @ANYRES32=0x1, @ANYBLOB="00000000000200009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5c4, 0x2c, &(0x7f0000000180)=""/44, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x3, 0x1, 0xb, 0x3}, {0x0, 0x4, 0x4, 0xc}, {0x5, 0x1, 0xd, 0xc}, {0x3, 0x2, 0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x7fff, 0x28001) r2 = getpid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$selinux_access(r3, 0x0, 0x47) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x4, &(0x7f0000000480)={0x0, 0x17, 0x2, @tid=r2}, &(0x7f0000000580)) bind$bt_hci(r4, &(0x7f0000000f00)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, 0x0, &(0x7f00000012c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0x5, 0x8, 0xf9, 0x50f6}, {0x8, 0x8, 0x9, 0x54d9}, {0x1, 0x81, 0x7, 0x5}, {0xff, 0x5, 0x8, 0x3}, {0xfff, 0x9, 0x7f, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x2b60000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x4, 0x0) io_getevents(0x0, 0xd, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r6 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) remap_file_pages(&(0x7f0000741000/0x2000)=nil, 0x2000, 0x8, 0x1, 0x100) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) 30.10468342s ago: executing program 3 (id=1907): r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) fchdir(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0400008004000005981384180ef6bdf9cdb40ef548dd5c622c4d09f0da7d4e3db1ed9ba2fa24ab3ef5f7b745a32470a094f1ff5d91591b419b827efbcc5206d93300005005adc2aa98621d3f1cf3a35be86a07b8af1d3e39a0eeb345abfabc955d751f933ac02bb16ac5277f70e70345c2db974ca1fe9858b5ced3ae2a6a1bb601689c5a7346fa0faa31332e65395b4a8d1c97f16b11793eb19a7c11e7e12f2c3debbc7313f967ba5cdc57d13815e226ed36e4c29456b16ce8964117fab8998ec446b00d19ee49815412add4caecacc07f2bdeab9ee2fc17c8eaafa5cb83f827c58daec3b8a6a4465d17512fb741626afd3bdaee19bb45ce9e7ff493f25312d9124d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f0000000180)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="186bfb2be47e59c5181100006f79c5e4a7ac5450642fcfe40cd3f8d00cd653a8c44fc463cfea6cb2ffb8deec91cdb0fa2cf7ec9b8d8f8f8233c9fb38f7cc6d6decefe2605312a14a233e42d74b57b64c780405d8fab4f11353781e08fad6d991c47bcc7edfab7c7feab35fdf9c9e35a9fe4b77fa343a95c1f7328ab1ac5ad3abf2c85891942ec8f86d53519b23c3794bf7c6aa6c2c32ff223489ab034177098544a001", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', &(0x7f0000000840), 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socket(0x1, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000080fedbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 30.005060649s ago: executing program 3 (id=1909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') read$FUSE(r6, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) eventfd2(0x7, 0x80801) close(r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x14}, 0x48, 0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r11 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r12 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r12, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r11, r9, r11, 0x1) keyctl$KEYCTL_MOVE(0x4, r9, r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r7, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 29.938670964s ago: executing program 3 (id=1910): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = fsmount(r0, 0x0, 0x7f) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x3) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000080)={0x5, 0x0, [{0x7, 0x7, 0x2, 0x4, 0x7, 0x6249}, {0x0, 0x7, 0x3, 0x1, 0x6, 0x401, 0x80000000}, {0x40000000, 0x10001, 0x4, 0xff, 0x4, 0xfa, 0x3}, {0x7, 0x400, 0x4, 0x7, 0x4, 0xb8e, 0x800}, {0x80000000, 0xd2, 0x6, 0x6, 0xff, 0xca4c, 0x8}]}) fsync(r1) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000180)={0x0, 0x5, 0x0, [0xcfb1, 0x400, 0x197, 0x4, 0x3], [0x9, 0xf1f5, 0x9, 0x6, 0xb95, 0x16, 0x8, 0x14d2, 0x80000001, 0x6, 0x4, 0x8000, 0x0, 0x2, 0x5, 0x5, 0x200, 0x9e63, 0x8, 0x7, 0x100000001, 0x9, 0xff, 0x6, 0x401, 0x5, 0x2, 0x72, 0x5, 0x7, 0x8, 0xd, 0x1, 0x8, 0x7, 0x5, 0x9, 0x8, 0x6, 0x1, 0x6, 0x7, 0x81, 0x7, 0x5, 0x8, 0x2b7, 0x7, 0x8, 0x7, 0x0, 0xfffffffffffffffd, 0x7ff, 0x4, 0x0, 0x4, 0x7, 0x7fffffffffffffff, 0xecf, 0x906, 0xa, 0x0, 0x2, 0x9, 0xa, 0x9, 0xfc3, 0x5, 0x391a7e90, 0x4, 0x8, 0xffffffffffffff7f, 0x5, 0xc42, 0x9190, 0x9c7, 0x2, 0xe8, 0x8, 0x9, 0x3, 0x4, 0xb4f, 0x0, 0x1, 0x0, 0x81, 0x8, 0x6, 0x6, 0x0, 0x5, 0x2, 0x200, 0x0, 0x8, 0x3, 0x7fffffffffffffff, 0x0, 0x3, 0x4, 0x7, 0xfffffffffffff000, 0x1000000000000000, 0xfb7, 0x8001, 0x4, 0x6, 0x6, 0x4, 0x6f74e9f9, 0x1, 0x9, 0xfffffffffffffefa, 0x1, 0x5, 0x8, 0x9, 0x400, 0x8, 0xfffffffffffff19b]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={r2, 0x6, 0x401}) syz_usb_connect(0x2, 0x1c9, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x5b, 0xa, 0xdd, 0xff, 0x403, 0xe009, 0x708a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b7, 0x2, 0x5, 0xff, 0x50, 0x5c, [{{0x9, 0x4, 0x2f, 0xb0, 0x10, 0x13, 0x2a, 0xb9, 0x8, [], [{{0x9, 0x5, 0xc, 0xe, 0x400, 0x9, 0x1, 0x50}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x77, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfa, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x70, 0x3, 0xd}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x80, 0x8, 0x9, [@generic={0x14, 0x1, "4fa1de939c93a0a265288143259bb18f6a7c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x9, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x2, 0x7, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x7f}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x3, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xcd, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x3, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xc7, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x18, 0x20, 0x40, 0x6, 0x3e}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x1, 0xf, 0x400, 0x5a, 0x7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x2}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x3, 0x9, 0x2, [@generic={0x84, 0x21, "73e4a6a017b727005b73e85d8068431d2d551ef402081f317ac2ce32619b8edde34705f69c621ff2a9bc6820fcbb320d5dfee1d4d937b4f5ab2eaf298841106e54efd06b92f225083d35b2b0451a2dfda8b093ba15520731171dcefa7c39a139b2a7fed31b70581f8cc68942204a95e499c9e10bed50387c96d0673c615fa7f28f62"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x3, 0x2, 0x40}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x1, 0x10, 0xff}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0xb4, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x81}]}}]}}, {{0x9, 0x4, 0xc8, 0xa, 0x1, 0x78, 0x7, 0xc2, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xd, 0x4, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x2, 0x0, "58315da0"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0xfa, 0x1c, "f0", "f9"}]}], [{{0x9, 0x5, 0x0, 0xa, 0x8, 0x3e, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0xc, 0x80, 0x5, 0x40, 0x9}, 0x97, &(0x7f0000000c00)={0x5, 0xf, 0x97, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xfb, 0x9, 0x8}, @generic={0x87, 0x10, 0x2, "0d7971728385f2738abffba91432920a888bb19958c6fd2d121060e180a5798e4133942be75a17fa985541f5b788bb649607fda4a5b42f1bcb2fc8faa58459c40511a55ddf8132a58c126990f1db946097857ebb0f2050badedf043a0b78729db974ea6340099e92f34ac1ba73a3acaeedd9650e8f5839e30133f927af2543e2540ba0c9"}]}, 0x8, [{0x19, &(0x7f0000000cc0)=@string={0x19, 0x3, "f5e032668e0c686b9aede4c7f3d6143ab8d41e9f70e9c0"}}, {0x6b, &(0x7f0000000d00)=@string={0x6b, 0x3, "c784497a710e08146d13aa1ea836d10208b02e9a124e175fa6ff31c39ca7625bd63a86522b6141a0261cf425eec29c474ce353a8389a5d7aa16d20c64fd3e135d9ab28cfba0ba7a817522760f66d240617a9c9204965d1fff051b4f4bbcd24684e20a872d4480fde06"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x843}}, {0x6c, &(0x7f0000000dc0)=@string={0x6c, 0x3, "bc3682f9932f360fdc806fb443160909f771745adb67737d2987652ace11751a2a647a4951fbc295e4b502a44a3ab70f43d8421d595cda65633c84030ddcf7a293f8e1f7a4af2438c66740619966956ba5fd352e00bd202d7397931c72f785bbed2354cf39ed9ab8d91d"}}, {0x49, &(0x7f0000000e40)=@string={0x49, 0x3, "39df93a58cd6e6429da6e410f125961444ac538157e4b2595308d697fe8e1bb34deabd5e5fd77d91079f91fe98490a27d27453ec84a0aaebdbcab969be68d98963a07b29d9b7f6"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x439}}, {0xa2, &(0x7f0000000f00)=@string={0xa2, 0x3, "6340247f50a674b4c6e507ca94771f8aa25896f6141da119f707ac69011605c0b0aac0d5fc58247f527701194163f8abe2818f10685877bc4dc1520051138d1da307ef72cbfba47777245d9b664c8bd6d69158225ef0777bbd9200429df7e5183d1f7a020861697aae99e9ee5a2123c662f7e60aefdf3a6eaebcc2ab7645c59ca88f077167d64bd7e7c27777989bf34ca72b73012c3ad5d21e2e3e8fac76f54c"}}, {0xaf, &(0x7f0000000fc0)=@string={0xaf, 0x3, "f1b5595af2ab170b4dc7b1a5ac1034d0f4985c7fd2af896f141f338518fe51dbf8e8fb85664296b1a97dd49d2e15b77b37d80f18f7e7b86dfab787f536d1fd91f17b6ae09b9d2b3c54e98ce8f698328e8351e95a12a2a16a0c838a50a16dbc0b010db85c4804c25a9471520bc9cf31e7bc4061988dd8dddece30f3a841c980b7a1fa201450cf31b27b8813c9c518d47f1b015a51557fb148dc7547c242278f422cf51e1fa8978c87a43eee5f44"}}]}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001100)=0x200, 0x4) connect$netlink(r1, &(0x7f0000001140)=@unspec, 0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000001) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000012c0)={{0xffffffffffffffff, 0x3, 0xfffffff8, 0x2, 0x80000001}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r0, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%ps \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001440)={'sit0\x00', &(0x7f00000013c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x9, 0x0, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, {[@ssrr={0x89, 0x17, 0x8e, [@dev={0xac, 0x14, 0x14, 0x3d}, @empty, @private=0xa010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1d}]}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0xe, 0x9, 0x6, 0x80000001, 0x4000, r4, 0x2, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001500)={'vxcan0\x00', 0x0}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001540)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001580)={{0x0, 0x200, 0x1ff, 0x9, 0x2, 0x6, 0x2, 0x9, 0x1, 0x1000, 0x1, 0x6, 0x6, 0x7, 0x6}, 0x18, [0x0, 0x0, 0x0]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001640)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x0, 0x348, 0x0, 0x0, 0x100, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, &(0x7f0000001680), {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x1, 0x4, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], 0x4e21, 0x4e20, 0x4e24, 0x4e24, 0x7, 0x10, 0x5, 0x4, 0x5}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"9971"}}, @common=@mh={{0x28}, {"1807"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0xb6f}}}}, {{@ipv6={@local, @private1, [0xffffff00, 0x0, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0xff, 0xffffff00], 'bridge_slave_1\x00', 'geneve0\x00', {}, {0xff}, 0x3a, 0x9, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "fdb0"}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xc, 0x4}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001d80)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3, r6}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001dc0)=0x1) sendmsg(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e00)="6d014db770f90481082b618280f045f5789064b1b0ace1fa416898497f607df4edf00a04ef2f21c2de3022c961fba97164e57fb8e244512935c6e6d0a3e8123adcbd23d0f03498bff598cb2a7bbbd2aeeaf41cb7d7e5f615666d5409c7afa766d4112a60def3e1885657ddb2d532f6", 0x6f}, {&(0x7f0000001e80)="d1314e3501775808e47a0298b4dd81c0c75aa98ac2a4c40595da5d7f4154f555bb1c3ee7b58365320705453ba532dc191624e407d2473bfb77502ec7e8e74b91e1daf729d6a6b1f81bc780bc24d975afd4fbe68c4af91aef46df8f6fbdcdf4a0600f1958f3e20642ffa070fd4c783590c0728e6bb5848418a22cc621adefd6926f5a35abfc74a386be63873e56a3137b8cc766479bd2a824765f63da60432efe63bf57712e", 0xa5}, {&(0x7f0000001f40)="6f08e2d392955316217a", 0xa}, {&(0x7f0000001f80)="bc11c1578650c333780ab644f9846c2c905170ec2b7552cb1949e36bbae47a8c8bab72d22f89736e4aa17bd227f36b7eae857d", 0x33}, {&(0x7f0000001fc0)="2754443e160cc7e2eff8a286ecce21d704c7ae2fc3f10d02d2268c6f9d3160c20dcd0659a16c37d38c90a54b2fbfe25c67ec67e0821ecbed4d7ed3f2d9a71f34f2274e79ac21e590b26980add9f9b6fb24f349cd33ba44c24697d0b80d5729749864880e69c73363c59a259941fa3916bb61a4887f33c3a5b3df205fc6f979393e37ba7e2b", 0x85}, {&(0x7f0000002080)="29df3200f25d80e257fc57ae09ebd9fc22f88cd8d09c3188834b1713d7b36aeec98522f8e91334771c7239115d39b3532993f83a2eaec61147e44f9bb4a67639efee05d4d2cf31611ecae531cd3db847a99ae216f3888f563a463dc629dc07aa75178b9b60bcdc5a702c46d7c032e3ea", 0x70}], 0x6, &(0x7f0000002180)=[{0x108, 0x88, 0xa82b, "ed86d9e6ff37f5ca1dccd5a3c8bd74c3e93a0a1f364e8255f8b59e3ac8e13d249505bc9166925b6b7e32ebd85a4f7b24b5c66c32ff63cb6ea2c82403520e00860c746cbd0422db07a011439564f9cb86c8cfed02e3c166a28bc75bf7939837a3cfed2895c02c5c6a1ac12ee09b1669653cf32d7dbcfdd1ca99e2644fdadc4e6858a325f5a056f97a932c103948fcea25ad456407f8a2bc8789d970c42dcfe1cf6933874f20caf8706a97a8f4b1aa94c470371b14b194f19cf6e8e8e65920409e23aee7810e3d36ce15d9effcc4bfce2dd1f548d473402fad970076f240cc23fd2e1ffab81f4fb0032a1ccf358412b2a6e9bb125ac3431ab1"}], 0x108}, 0x8800) sendmsg(r0, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002300)="1dee16a880fbfc62a58611b5ce026ce3334c4e6ab4e675a9bddce52784c71656933ec908b061383e6288d739b94443f62b457a7e3492f123c2894a304bde274f5d47e8c3294ebcbb23bac52e51ba8b4d05966a5e2f3f8a59f682392a7174639a176ea2f90a8822ed5f1865be317965821bc72acd3c4b7dcc15d54820c90dd9321fd8af53a55b1f5ebef3c7afd1570c2b09ef1678a02241de7994635df979007028156f2fea0978164ec74f53407e671ba9fed41fbe8375e0fb487b6e889304aeff34e9ae5fd1e7a55555972c04450961cc3dee1b8906ef96e9a7d3fb1a3df483a073db38c9e2a4258f3b608dea259dfc17dbc3be7dcd0ff50cc5cceeba56c78126e779a355a1a7607a4f01d56d923f20af6497b18a96ee84f1fbc057f3942c48eaddc266f550473285174c126d5c8849397dfe012a7fb7596e6c00ba16063277394c3d67050d78f15bb75468fd2082ef0dd10bd2fe336ef209a510bee3eff4532e43baff63ecd0f1ec51edb85c5c4dbde9939358c076ba22502a870786557db7911b4d3641a80981eff0dce8310ca23d2bea5f7723925d021f259652772c4f9fc34093e666c8b7010bd6ff7e1e27599c86917bac22188734131f91e936a5ce42f8f8672dc3e3791536f4c20f9b98cd4dabe95a96f4c3d9df4811dd2105750a3731ad0c584f10561061e1183e92c332a52e35374c6fe4f655b981d75676d30bf61c5779e76c654f1e324394e1c7aa538c41f4154a989e751aa0aafd98d6e3847fecd262c5d0844e0ed4a1ffeb73c2c9b05a9d84ab2108ab0a76a0c8605230bf10e2630391e272c56bde78d6bbcdf1b6e102ee9c0a3d965667d3663fb4d9e0169fde237a8bcefa9513781b5bdec050d328a07dad6fe6d9958ecdd278728072b3e0fcb29c43baf8b51caa2764414bca4ca8fd0b9a81c832cccb0b392127c7585c008414ae88c6df4e80bde553e70c037954362e9fc325f022ae83450070f282c1710a288b85344405e74d78ddc2639b28e90922c5a37840b08eeb7f148b1c74cbec265b3dfff2132198d30fc1ae7812a013274825ac7a90efd0a4c43f11b793335abb9d642255e7fb441c09d418d4ddefb5f5f176386ae1454a66aeb11d74cc5952c02ba3741c8044cb7038d601dee04551bcdbeeebccc01a38b5a79c192867466a2336d54d8ec52d3a46d62db385ef2cd7eba521805ef267d231aa6691129573ddc97b91f2ace5f7d0b7d53cad461900c50476d50422bc7f860f39724e72ed99be0662e3a3c02d0b1aa519e4e6ce08bbed5dfbb4c7c371522388abe27b487e4186f53b73a08f4124278360a21e47494869d290e6adbc34d25826cda337d70156a898f02d02aff6e20e0071fd5dcd3f3fab059d814bfcee665612d57f6418e053b9055759064c81c29f7ec7674598bfb2f6d785d260924f1641bd6a6139dac7b16354bb2e8c753291faa6a4425d38112fb9eb364a863add1c0e64adf20abea21fe7ad5d1e391ce3f77c3f29be4cb64119043c1bc29838f5608cdc4d59dc77e91776fec9343dfb22d07c1acee52fdc5a0d749f5b834431851be7bb1e2ca38791e6492e658c8ee5ae119a15c58c2e3b6521b5d2dec62a902200977bb46d1290cb98ed98663ca58870ca53280e24e6103c9df35b8a0e04ab6b3881ba6e7936178e189e51608c973988dd309b5f66b06dff5f44749245b037e5a8f88dc3147cfe5ee9268d4c1bb5a852484b7381ab6487aa2af725456014dc4484afe079e47ed081203c5da2e13b43b10b117d7616ca2e648950c4a0d82139184dced9a0ef2e9ef4bf370a860e9840e1d0d32611516e3c531ce891f37e537c97e0153fa71534dffa833ae276bc7eca3fc46987427055a6e68c290a7200967acc71e3fb54b5dac0812e3f60791ab4ac5a8d349b9efbd1ee17fc3fbe2476aecdeaf3754059df9cc310b4c812037ed92c2cc938f0903701817646db3aa59ef7702bf97749c6e200fa95b8e2e07553e3abd4ed70cf51b64cf2d51d55c986520866a3a980fac4274d4e57a6c12a31d79ccad9a57e57e822ff264365044473e1eb89a15b0edb02f17945e0dc28bf0684f2962eb65fcdc9705b95ff24ed9c62503d7227d95785e6cf1d512069305908e92041e75e29c9c45fb3878b6e7e371269a4ad96d594bc60f25e4970eb7e8b384168635d3fd02e7cbe3778e75e91c7f133cacd1339f6a0ca48286f93fcb4d9bff62d495fa5e0873d04e3741fa589d863c2b86d3095d63e06a68836f99f928063794d183c6cf0aa629a4d99727706c532daad03c29b4b9efdd8d699a07b51faecb0ebe15ee5991a82b718aef3c9a0ff5c89b8b6483b2ee6e39af5a3a15ef43859dfbadb68a738a107139842149af4fda20e8bd80c61cabe292d2d35094c1b1efdc34d2b371fc34edff404a85bcb451dad760921e5c0619c848ba9900c8d946ad101c7999a3c70d367302ddf6695ae078630151496c631143bdc01272dedbd54d808d9ae3c7b0166a9cce05aef14c4ba680c948c7969199842fb77419f2abfdfc4a9a32d8ac671f423115f5da8b45f11d1e8784d0b55cd9343f8bd96610decdde2a6dc1c155ead784b2ed0d39a8b21fa39d3d272ce0e86596bbcd464955c032bb99f056a7842134d55d1d5edbf4964335985b265650a46909a91384259aa828dd3cb1b8ed395c25cf06b142ab5880d4578402d82c27424402fb79613322dac17bbda54f87bb1c270563841db30ca686639ef59874c4ba28c56e2d31a7154fa6d1756bae56640fc68b9fb1b4532490b4095ac91381ead601c2e7cb8145c24dd499b87a235eb1eb0f1d4850c20d7e8c83908c872f392128537b6682bc2974876235a6adcea01079683ca88ced74483b643a6e16f7c57bd76c68df71a3700b13ff69205d66d32f8c101ba4221bba7a36e32c0af32448898a173e59c56403ad1746696c37fa7046b2397049f8dbdbb4faa4f2d201803f66de393486980f13ccae529e35a15bad0f8d74bb91e4360d3139416955e4c9c3f0dfe743fb41b46d83ed59c74c1e80fa53539c24fd20a1fa0ea7174c19d982ec7ca358da419dba8266a61cd3ba68a8c28a3fb6244132cb6b9bb060fd97347848e52f0c917df6e3a7bc34bccdf860796f33df60526a37c469177192c48c5597c81b1dffa409094bcc18443f7f1808df01db8c7e3d3472babdefd2339d2543dea711a04938cc929ae7ecb212119c2a3db9acbb38d4a4faa405c8b451832e542e84cccc5bfb0f8bed82360a2b307f40ca69c1b0c56bb929f750246cfed6c9b27bc2d9395458d64d32e483c0e3f348849cd81f96c08a4127cbdd6e8d8fb96abd8156e357f5e7305c6bbaa78a3835706cf557ff7d38d5f28c36f0601854d3678e68f24ea901a463160e28a92f258bf388cd762b00121859f12c3fa384fa685ed0ff46572c97cba0c686b2d8cc7541b9dbaae8c754281bc75ec753347659aa10e18589baefc671e1877c212bde6bfafdeddc0c7a2a0459bedcd2e83e0f6a45192ec6ca13ace91975fe5d5f11405edf763532d12440ecf6555ba4a44cfc9bb381f034f6442f8f79a6a5a5dd98b14de13264cb89b338a5bcccda55979e7325a117249f0263d57096f1e691c9456f85d6feccba92949357fbbcc3df1212ea1375f982d2b54fc383ad373a7fc9ae08f6b740ed112dbde8569cb9984aa1611761608a77bdbdf06302371d0d513054c0c32657396d91d04b849e642dc0b3e60bc4a64c7832713f5bd61847a60c42145f818520ce61887e5eb4b5d68ec0886f8c5b307f17d156f0424e7bedcdf4c946f9ee56a0495135f880ace1b48ca23bbd8dbf57433a1b01c70088aeb3c662940197049f5b6c8e95073fab68661794ad5a7d37b1efc7b1dcdc516dff9b633a56d587c6b6639a291a2dafc1d63a17f86bf6288c68a90921bf747d1b2e841fee0b5a59c0462c2ac2cf25fa53d0ac7211318df9aed515babda0b8cfca23a3b07201cc4b311e119093d2e1d437eadeb65fb94ae824123c8694c5b0843750f4f88ff75642692b7ec884be31bdf0c81fe1e86f9bd1962bfb2f9422cdf711132f448027637328fd9ab8216a693937b731c10319e4b653e17a85be2a6e2c46941a41a006ce014c33e706e1f421f4b78f424f0630af03364b37ac913ac1c2b79af309635449438fa3b51bffe0fdc0dc9f93a99b5346c6b3591421a0349dee67dd3e203749b5e5b33fc448920a8effd68b3afac6c2ac566a6c1dc46ecd3e18e41e7e64403ddc7ff92b4abd3ddcecfe79c7f0c792edebcff0258752d07046c57b72acb0dac1387b6a363453f1e903ac98d28d5b632271a403e127a1b47dbefc7c356828934d0ff9f4acc2f1c727dabd1979007698b00136904a4cd86aa77fcaedadd93c0560f999b7aa476f57b9169d8a9cbc99acdce3e205fb2bb3ced8ddb137a77dc5cf7110d9b2d880c6b9575b73b3ddfd84ec1eaa8924401229ca954fe9c0399dc38a48797a9d42ae351852bdb617f367f953b2f0e17735c6b9bc21c7a5a1fec9b208a439a5ba873858da5f23286f71333dbad46baab40a1b72c9e053fff7e99cf4e9f02409fd0a8281c37070128cdc0b0ee41d558a8bffa7f6b9d16665181e21473cdb223ddb9b3a7f4cdd2bf2ceba9d4efcafca37b078432c043e2f3b6a6785e580e9e7da26906ed888c8f0e3a73fff4efc885ee7c2bd704f65b8e99c5b4ca8efef64b986335f5db636cbbd5a64d25cfcd5fdba47bbd46474cea38938bcb4ec3add6e47d7ecf3e465f2884741a117c5c1a80b8985f260b3692edc3621cc1eacaa94f726a4382225ee72f4c33181e4298f074d6acfbed8934e77621725a7678e7f86a859dba745d0b60cac6977c4aeeffd8cc530ad8cc9c9330ad8e6f5170cfbf7e0ba055a1cf60e5b67fdefc87dc1d0a2219475dfc1b5a6cc7b9846344b9eb5b3651e5784984ec24ced33298bb739aaa00ecea677eb679040bc219cc6b6a72dab15b22e91be730699fadbc62de45a5d2777ebee68791337dbba1eafe38db1c4009345f349eb6584330cf1fefbcb0e012148c7b09b334ab21f0d26b768c0e5603698b27e022787061249e4a8c01786477fb29bcb23f25113bc8374d49168d3469d2ab27da362f6919251bb91f300ad7c8f28c93e47fd6456b4d6395dc2b44dd89092d076f3bc26b4a5522278cf04496a0fcd16ab3a856fc3da5c21e14f66fa1ccccc17475f6c71da5a76421f20aea7ee273f97deea25e42e3b5d7c774725adeae55e866ee857d42920fc11666181c3a698c4c4ac0b4538a9cd2445af176feb879023327e38a8527c6013d71c0a123913a1c20f977bc4ba689cd22d2cf9b554fd34f8884933ba99aca89369d7b4ca1e90716e069395c7852cc2bbb281781cbe1c65dbb19198efb16c022aed370f64b0ff8ed50ee0a75406e85e2360f1f6e567f2eb116cd1ad95c5cc759f8d394434cbf44443ee3cf9f1df8dbfe3b049b0de38dd745ae4c996bf3cd06089bf67935c0622334cf4ea2e2ba62295c070e70c6a96930d6900a364d86c4cef8dd72cf4f2b39cc528e1b849b13c761a5e4bcec41bad39597486acee99d3260a96197c4611b3e6e2ba865ef333d0e6990dff8acbe58ae2cb95877fcbee1a4a10c3a4be186eeb7f82e0e80c51490b4d580d223322702e6e4b8ffb78d43d6b172cb1e777310b996a8eed8e022d114ba0e3c22b0cc361a0b8aa5a2beb3ec1a57065393b94f198a54289fa2925c5fd73cca7817a5eeec1b616813b7350a09bd5d094b09b7aff39ed503dfa5181635e967de7aa711172ae1a64549d3c8388e", 0x1000}, {&(0x7f0000003300)="5914cfcb9208007f1b9c7d4bd15360678973c53ffeb62770a06627ffb7cf869789bb9de3e1b3b605560394d42b9f7089a8f3992f5552016c579304ed", 0x3c}, {&(0x7f0000003340)="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", 0xfe}, {&(0x7f0000003440)="377c648f7b644aeebc469e792dc7c0e0c9099c64219fd66d948a6c7319c7c101ae74f9974b9cea73e13a490e5bf5e77227048c7ea1f27d767d0bed659cc002e1958e70e06eb5b9b8e069f4655681c6b43a93b9c5d220c5f730c3838a7e97d145cf777166a2602fca5041ba1acf4fe281edb494a1ce4a533a2b20f19cfe16a0beb8ccaf9489211fb00bcf528214f85849406a0b", 0x93}, {&(0x7f0000003500)="e0b6d6fb1f4f42b6cf0a4629fc8e1a60ef68b890cba5a98e78ea1eafc1a6c0f10b3ded6ceabbc10f06254ec5190be7445407b017295ab7566aec8bcbb89ecd4645c16523f637a0db3c3fc5187afdf5740a7bf29afc8f90323696024415db2c4251d0f486", 0x64}, {&(0x7f0000003580)="d413e7bb0b62c5bd84c559b9d986520b361fda3b49938e7122a994c2857f2ddc910419f598d42e6d221ff10911d63ec67a2e4b7473b3f74d730d8bda083900dee1", 0x41}, {&(0x7f0000003600)="c5e86d3258f7d47a12df18050d4aaad52fbec5327021114ce4564ea05414c030315dda6c8e9e824aca80ee8326", 0x2d}], 0x7}, 0x20000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003700)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003800)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000003900)=0xe8) mount$incfs(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)='./file0\x00', &(0x7f00000037c0), 0x2000a, &(0x7f0000003940)={[{@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x10001}}], [{@uid_gt={'uid>', r7}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, 'CHECKSUM\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@subj_type={'subj_type', 0x3d, 'IDLETIMER\x00'}}]}) 27.618639051s ago: executing program 42 (id=1847): ptrace(0x10, 0x1) waitid(0x0, 0x0, &(0x7f0000000240), 0x1, &(0x7f00000004c0)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="180000004000000000000000790500008520000004000000182b0000b5549980a1019817ce8ab085d14ab4e857e81fd17c3622a60ecf1c5805f07d98c1bc07fc0e14edd7997bf862", @ANYRES32=0x1, @ANYBLOB="00000000000200009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5c4, 0x2c, &(0x7f0000000180)=""/44, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x3, 0x1, 0xb, 0x3}, {0x0, 0x4, 0x4, 0xc}, {0x5, 0x1, 0xd, 0xc}, {0x3, 0x2, 0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x7fff, 0x28001) r2 = getpid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$selinux_access(r3, 0x0, 0x47) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x4, &(0x7f0000000480)={0x0, 0x17, 0x2, @tid=r2}, &(0x7f0000000580)) bind$bt_hci(r4, &(0x7f0000000f00)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, 0x0, &(0x7f00000012c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0x5, 0x8, 0xf9, 0x50f6}, {0x8, 0x8, 0x9, 0x54d9}, {0x1, 0x81, 0x7, 0x5}, {0xff, 0x5, 0x8, 0x3}, {0xfff, 0x9, 0x7f, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x2b60000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x4, 0x0) io_getevents(0x0, 0xd, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r6 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) remap_file_pages(&(0x7f0000741000/0x2000)=nil, 0x2000, 0x8, 0x1, 0x100) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) 26.656895409s ago: executing program 3 (id=1928): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) r2 = syz_clone(0x201a8411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="182a0000", @ANYRES32, @ANYBLOB="000000000300000000000000007b8af8ff00bd0000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 25.475060684s ago: executing program 3 (id=1935): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80800, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x21060, &(0x7f0000000400)=ANY=[@ANYBLOB="efc341213cddf8b399a4f71171b4844d6c5a692f4cf5e599b8799fb52d4ec124261ceb8436912dbabe5145578da83e78f46eb22b5973061938ec96293c78bffb8df90a8409ce2af7b16f54073a6e7734dd465b820fb9cbdd5dad61338cbb1d5f560e5b5ef4a2442bb7e10ac828c817216ae4484c413db79ec0c59a96cbedc37dfe3c90436a33593b043da32002c819227a5f38ef3cc0321d89e387c736f1", @ANYBLOB="71a94045b1020fc487fca1ab18b04b76f854f0102406b7f6be863261316b1daf16807ac2823383c61873eb91393512a2a5a394a3ce6aa5", @ANYRES64=0x0, @ANYRES16=r1]) 25.387434151s ago: executing program 3 (id=1937): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="189cc8a44a692b04e9000000000000910018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='svcrdma_sq_post_err\x00', r4, 0x0, 0x81}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = getpid() setitimer(0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x13, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18a19e8d25ff000200000000e1ffffff851000000600000018000000f7061d6baa3de45380353dac89859ff5731f966075c9f994a6d39ae5dd533d7b55d00696482573c808fb5b3329336f69ab0bc39b7756cf05e67d184a81cfd39cf78aa4413e1f9b656b88dab8e4772aeaea612b07000000db0b18dedd6aa5f638d7467465bd5f06430fae79", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa102000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd5, &(0x7f0000000340)=""/213, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 25.322213207s ago: executing program 43 (id=1937): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="189cc8a44a692b04e9000000000000910018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='svcrdma_sq_post_err\x00', r4, 0x0, 0x81}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = getpid() setitimer(0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x13, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18a19e8d25ff000200000000e1ffffff851000000600000018000000f7061d6baa3de45380353dac89859ff5731f966075c9f994a6d39ae5dd533d7b55d00696482573c808fb5b3329336f69ab0bc39b7756cf05e67d184a81cfd39cf78aa4413e1f9b656b88dab8e4772aeaea612b07000000db0b18dedd6aa5f638d7467465bd5f06430fae79", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa102000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd5, &(0x7f0000000340)=""/213, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 1.4839193s ago: executing program 4 (id=2299): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x50, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES64], 0x1, 0x1263, &(0x7f0000003680)="$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") r0 = creat(&(0x7f0000000200)='./bus\x00', 0xf7) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0xeb, &(0x7f0000000440)=0x0) ftruncate(r0, 0x81fd) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1.137654978s ago: executing program 0 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.080710943s ago: executing program 0 (id=2313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 1.080482402s ago: executing program 0 (id=2314): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) dup(r1) fsmount(r2, 0x1, 0x86) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000000)=ANY=[@ANYBLOB="7fb2261d51fd000000000000000000"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.069978914s ago: executing program 4 (id=2315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000000), 0x0, 0x0, 0x2) 840.984042ms ago: executing program 4 (id=2320): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 808.277884ms ago: executing program 0 (id=2322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 728.939371ms ago: executing program 0 (id=2323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 709.627823ms ago: executing program 0 (id=2326): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 644.676218ms ago: executing program 9 (id=2329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "2e1120d40b14d1c5", "ba9a260eebb734c7f5d14a67c6fa9c04b16262ef974ccf49671b39b40c1f72d0", "873b9758", "5b2d494fc6a008d1"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x122044000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 497.00533ms ago: executing program 7 (id=2333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 464.354182ms ago: executing program 7 (id=2335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 420.636566ms ago: executing program 9 (id=2336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{r0}, &(0x7f0000000400), &(0x7f0000003700)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x0) 344.671212ms ago: executing program 7 (id=2338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 244.94119ms ago: executing program 9 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 244.70889ms ago: executing program 6 (id=2343): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000011c0)={0x3c, 0x27, 0xe, 0xb, 0x9, 0xd244, 0x2, 0xeb, 0xffffffffffffffff}) 244.49919ms ago: executing program 6 (id=2344): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x69, &(0x7f0000000040)=0x1, 0x4) 244.18667ms ago: executing program 4 (id=2345): openat(0xffffffffffffff9c, 0x0, 0x670400, 0x45) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100001040200"/20, @ANYRES32=r6, @ANYBLOB="100000000000000008000300", @ANYRES32=r4], 0x28}}, 0x0) 233.070071ms ago: executing program 7 (id=2346): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 217.121112ms ago: executing program 6 (id=2347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80000, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x5, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x200000, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8400, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x20000000, 0x8, 0x6, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0xace5, 0x0, 0x19, 0x40000000}, 0x0, 0x7f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 168.901716ms ago: executing program 9 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket(0x40000000015, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 168.570826ms ago: executing program 6 (id=2349): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 138.712679ms ago: executing program 7 (id=2350): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000240)={0xf97cff8c, 0x8}, 0x10) 108.753351ms ago: executing program 6 (id=2351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRESOCT=r0], 0xb0}}, 0x0) 65.052815ms ago: executing program 9 (id=2352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a00ffffffff000000000000000029d082d83752b38c00000000000000000000000002"], 0x40}}, 0x20040810) 64.765215ms ago: executing program 7 (id=2353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 58.436965ms ago: executing program 9 (id=2354): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300000, &(0x7f0000000940)={[{@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10001}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fffffffffffffff}}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x57c, &(0x7f0000001380)="$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") utime(&(0x7f0000000100)='./file1\x00', 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfffffd16) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) unshare(0x22020600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2002, 0x3, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='\x00', 0x1, 0x1, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0xa) syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) 51.601116ms ago: executing program 4 (id=2355): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000540)=[{}], 0x1, 0x7, 0x0, 0x0) 191.37µs ago: executing program 6 (id=2356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 0s ago: executing program 4 (id=2357): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00000000000000f6ff060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) kernel console output (not intermixed with test programs): b 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.613455][ T25] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 301.693767][ T2897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.723063][ T6153] F2FS-fs (loop6): invalid crc value [ 301.730530][ T6153] F2FS-fs (loop6): Found nat_bits in checkpoint [ 301.797604][ T6229] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1507'. [ 301.861551][ T6153] F2FS-fs (loop6): Start checkpoint disabled! [ 301.951288][ T6153] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 301.994018][ T25] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 302.031492][ T25] usb 10-1: config 1 has no interface number 0 [ 302.051126][ T25] usb 10-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 302.073573][ T2897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.082701][ T2897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 302.090804][ T2897] usb 4-1: SerialNumber: syz [ 302.145605][ T51] usb 7-1: USB disconnect, device number 18 [ 302.236373][ T25] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 302.247385][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.256827][ T25] usb 10-1: Product: syz [ 302.261805][ T25] usb 10-1: Manufacturer: syz [ 302.267493][ T25] usb 10-1: SerialNumber: syz [ 302.294133][ T6214] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 302.334539][ T25] usb 4-1: USB disconnect, device number 22 [ 302.991753][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1511'. [ 303.263478][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 303.269900][ T1091] Bluetooth: hci0: Frame reassembly failed (-84) [ 303.333530][ T6258] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 303.344823][ T6258] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.449740][ T6279] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.465038][ T6279] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 303.875945][ T6287] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 303.885511][ T6287] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.394702][ T24] kauditd_printk_skb: 556 callbacks suppressed [ 304.394726][ T24] audit: type=1400 audit(1756715833.997:23194): avc: denied { map_create } for pid=6301 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 304.415694][ T2897] usb 10-1: USB disconnect, device number 26 [ 304.472067][ T24] audit: type=1400 audit(1756715834.027:23195): avc: denied { map_read map_write } for pid=6301 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 304.500821][ T24] audit: type=1400 audit(1756715834.027:23196): avc: denied { create } for pid=6301 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 304.520985][ T24] audit: type=1400 audit(1756715834.027:23197): avc: denied { create } for pid=6301 comm="syz.8.1526" dev="anon_inodefs" ino=35832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.543362][ T24] audit: type=1400 audit(1756715834.027:23198): avc: denied { execmem } for pid=6301 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 304.563101][ T24] audit: type=1400 audit(1756715834.067:23199): avc: denied { read write } for pid=4093 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.590900][ T24] audit: type=1400 audit(1756715834.067:23200): avc: denied { read write open } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.863162][ T24] audit: type=1400 audit(1756715834.067:23201): avc: denied { ioctl } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.889570][ T24] audit: type=1400 audit(1756715834.107:23202): avc: denied { map_create } for pid=6303 comm="syz.7.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 304.909900][ T24] audit: type=1400 audit(1756715834.107:23203): avc: denied { read write } for pid=6303 comm="syz.7.1527" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.950277][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1528'. [ 304.959733][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1528'. [ 305.051219][ T6315] bridge: RTM_NEWNEIGH with invalid ether address [ 305.183068][ T6317] tipc: Enabling of bearer rejected, already enabled [ 305.323502][ T51] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 305.333474][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 305.339592][ T40] Bluetooth: hci0: sending frame failed (-49) [ 305.501487][ T6324] overlayfs: failed to clone upperpath [ 305.723582][ T51] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.735097][ T51] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.823557][ T51] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 305.832790][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.840875][ T51] usb 7-1: SerialNumber: syz [ 305.884140][ T51] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 305.891023][ T51] usb-storage 7-1:1.0: USB Mass Storage device detected [ 305.899553][ T51] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 305.908059][ T51] scsi host1: usb-storage 7-1:1.0 [ 306.085937][ T51] usb 7-1: USB disconnect, device number 19 [ 306.207060][ T6329] syz.8.1534[6329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.207108][ T6329] syz.8.1534[6329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.221572][ T6329] syz.8.1534[6329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.233130][ T6329] syz.8.1534[6329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.245973][ T6329] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1534'. [ 306.477882][ T6333] bridge0: port 1(gretap0) entered blocking state [ 306.484406][ T6333] bridge0: port 1(gretap0) entered disabled state [ 306.493879][ T6333] device gretap0 entered promiscuous mode [ 306.501359][ T6333] bridge0: port 1(gretap0) entered blocking state [ 306.507912][ T6333] bridge0: port 1(gretap0) entered forwarding state [ 306.734638][ T6340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4207 sclass=netlink_route_socket pid=6340 comm=syz.6.1537 [ 307.413493][ T2897] Bluetooth: hci0: command 0x1009 tx timeout [ 307.674016][ T6371] FAT-fs (loop7): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 307.714979][ T6376] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 308.694666][ T6415] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #3: block 2: comm syz.7.1554: lblock 2 mapped to illegal pblock 2 (length 1) [ 308.709229][ T6415] EXT4-fs (loop7): Remounting filesystem read-only [ 308.716012][ T6415] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #3: block 48: comm syz.7.1554: lblock 0 mapped to illegal pblock 48 (length 1) [ 308.730847][ T6415] EXT4-fs error (device loop7): ext4_acquire_dquot:6226: comm syz.7.1554: Failed to acquire dquot type 0 [ 308.743014][ T6415] EXT4-fs (loop7): 1 orphan inode deleted [ 308.748853][ T6415] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,noblock_validity,data_err=ignore,max_batch_time=0x0000000010000001,nodelalloc,errors=remount-ro, [ 309.416971][ T24] kauditd_printk_skb: 400 callbacks suppressed [ 309.416988][ T24] audit: type=1400 audit(1756715838.997:23602): avc: denied { ioctl } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.492018][ T4093] EXT4-fs error (device loop7): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 309.495867][ T24] audit: type=1400 audit(1756715839.077:23603): avc: denied { create } for pid=6425 comm="syz.6.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.539836][ T4093] EXT4-fs (loop7): Remounting filesystem read-only [ 309.539970][ T1091] Bluetooth: hci1: Frame reassembly failed (-84) [ 309.558958][ T4093] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 309.568672][ T24] audit: type=1400 audit(1756715839.077:23604): avc: denied { prog_load } for pid=6425 comm="syz.6.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.588404][ T24] audit: type=1400 audit(1756715839.077:23605): avc: denied { prog_load } for pid=6425 comm="syz.6.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.607757][ T24] audit: type=1400 audit(1756715839.077:23606): avc: denied { bpf } for pid=6425 comm="syz.6.1558" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.628426][ T4093] EXT4-fs error (device loop7): ext4_quota_off:6545: inode #3: comm syz-executor: mark_inode_dirty error [ 309.642302][ T6435] netlink: 'syz.3.1557': attribute type 27 has an invalid length. [ 309.657726][ T24] audit: type=1400 audit(1756715839.077:23607): avc: denied { perfmon } for pid=6425 comm="syz.6.1558" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.685871][ T24] audit: type=1400 audit(1756715839.077:23608): avc: denied { unmount } for pid=4093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 309.740782][ T24] audit: type=1400 audit(1756715839.117:23609): avc: denied { read write } for pid=4279 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.772599][ T24] audit: type=1400 audit(1756715839.117:23610): avc: denied { read write open } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.799033][ T6447] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.820298][ T6447] overlayfs: failed to clone upperpath [ 310.009951][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1561'. [ 311.503669][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1576'. [ 311.786034][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 311.792633][ T5627] Bluetooth: hci1: sending frame failed (-49) [ 311.925174][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1578'. [ 312.853732][ T25] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 312.924344][ T6551] overlayfs: unrecognized mount option "verity=on" or missing value [ 313.093555][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 313.153474][ T2881] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 313.295467][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.306511][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.316316][ T25] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 313.325379][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.336257][ T25] usb 7-1: config 0 descriptor?? [ 313.413546][ T2881] usb 10-1: Using ep0 maxpacket: 16 [ 313.563582][ T2881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 313.574973][ T2881] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.587960][ T2881] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 313.597133][ T2881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.607841][ T2881] usb 10-1: config 0 descriptor?? [ 313.813520][ T486] Bluetooth: hci1: command 0x1001 tx timeout [ 313.820940][ T25] savu 0003:1E7D:2D5A.0019: unbalanced collection at end of report description [ 313.830030][ T440] Bluetooth: hci1: sending frame failed (-49) [ 313.830228][ T25] savu 0003:1E7D:2D5A.0019: parse failed [ 313.841843][ T25] savu: probe of 0003:1E7D:2D5A.0019 failed with error -22 [ 313.964376][ T6563] netlink: 'syz.8.1594': attribute type 29 has an invalid length. [ 313.999890][ T6570] 9pnet: Insufficient options for proto=fd [ 314.016780][ T486] usb 7-1: USB disconnect, device number 20 [ 314.092403][ T6549] udc-core: couldn't find an available UDC or it's busy [ 314.099659][ T6549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.111811][ T6549] udc-core: couldn't find an available UDC or it's busy [ 314.118843][ T6549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.243492][ T2881] usbhid 10-1:0.0: can't add hid device: -71 [ 314.249591][ T2881] usbhid: probe of 10-1:0.0 failed with error -71 [ 314.258159][ T2881] usb 10-1: USB disconnect, device number 27 [ 314.534109][ T24] kauditd_printk_skb: 1251 callbacks suppressed [ 314.534124][ T24] audit: type=1400 audit(1756715844.147:24860): avc: denied { read write } for pid=4279 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.572658][ T24] audit: type=1400 audit(1756715844.147:24861): avc: denied { read write open } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.601589][ T24] audit: type=1400 audit(1756715844.147:24862): avc: denied { ioctl } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.628634][ T24] audit: type=1400 audit(1756715844.157:24863): avc: denied { read } for pid=6575 comm="syz.6.1599" name="ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.653149][ T24] audit: type=1400 audit(1756715844.157:24864): avc: denied { open } for pid=6575 comm="syz.6.1599" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.682589][ T24] audit: type=1400 audit(1756715844.157:24865): avc: denied { ioctl } for pid=6575 comm="syz.6.1599" path="/dev/ashmem" dev="devtmpfs" ino=263 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.694493][ T6576] syz.6.1599[6576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.707431][ T6576] syz.6.1599[6576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.717540][ T24] audit: type=1400 audit(1756715844.157:24866): avc: denied { map } for pid=6575 comm="syz.6.1599" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.756129][ T24] audit: type=1400 audit(1756715844.157:24867): avc: denied { prog_load } for pid=6575 comm="syz.6.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.782464][ T24] audit: type=1400 audit(1756715844.157:24868): avc: denied { bpf } for pid=6575 comm="syz.6.1599" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 314.818544][ T24] audit: type=1400 audit(1756715844.157:24869): avc: denied { perfmon } for pid=6575 comm="syz.6.1599" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.206025][ T6587] incfs: Backing dir is not set, filesystem can't be mounted. [ 315.228604][ T6587] incfs: mount failed -2 [ 315.277635][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1603'. [ 315.302501][ T6590] netlink: 'syz.8.1603': attribute type 11 has an invalid length. [ 315.319084][ T6590] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.1603'. [ 315.768982][ T6607] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 316.009973][ T2905] Bluetooth: hci1: command 0x1009 tx timeout [ 316.573806][ T486] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 316.993579][ T486] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.003855][ T486] usb 10-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 317.013084][ T486] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.022094][ T6622] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.023948][ T486] usb 10-1: config 0 descriptor?? [ 317.037649][ T6622] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 317.048770][ T6622] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 317.423625][ T6640] exfat: Unknown parameter 'wireguard' [ 317.891196][ T6610] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 317.902592][ T6610] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.922371][ T6610] EXT4-fs error (device loop9): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 317.938905][ T6610] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 317.953354][ T6610] EXT4-fs (loop9): This should not happen!! Data will be lost [ 317.953354][ T6610] [ 317.964017][ T6610] EXT4-fs (loop9): Total free blocks count 0 [ 317.972444][ T6610] EXT4-fs (loop9): Free/Dirty block details [ 317.979648][ T6610] EXT4-fs (loop9): free_blocks=65280 [ 317.984775][ T486] isku 0003:1E7D:3264.001A: item fetching failed at offset 5/7 [ 317.985322][ T6610] EXT4-fs (loop9): dirty_blocks=33 [ 317.998276][ T6610] EXT4-fs (loop9): Block reservation details [ 317.999914][ T6655] overlayfs: failed to clone upperpath [ 318.004891][ T6610] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 318.010048][ T486] isku 0003:1E7D:3264.001A: parse failed [ 318.024039][ T486] isku: probe of 0003:1E7D:3264.001A failed with error -22 [ 318.190317][ T20] usb 10-1: USB disconnect, device number 28 [ 318.472803][ T6661] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 318.686487][ T6669] netlink: 'syz.6.1620': attribute type 1 has an invalid length. [ 318.698893][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1620'. [ 318.789503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 318.806824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.841410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 319.125077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.134090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.144097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.152595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.161474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.179252][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1624'. [ 319.554554][ T24] kauditd_printk_skb: 437 callbacks suppressed [ 319.554568][ T24] audit: type=1400 audit(1756715849.167:25307): avc: denied { read write } for pid=4093 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.593435][ T24] audit: type=1400 audit(1756715849.167:25308): avc: denied { open } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.625746][ T24] audit: type=1400 audit(1756715849.167:25309): avc: denied { ioctl } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.655787][ T24] audit: type=1400 audit(1756715849.177:25310): avc: denied { map_create } for pid=6682 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.681312][ T24] audit: type=1400 audit(1756715849.177:25311): avc: denied { perfmon } for pid=6682 comm="syz.7.1625" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.704344][ T24] audit: type=1400 audit(1756715849.177:25312): avc: denied { map_read map_write } for pid=6682 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.724793][ T24] audit: type=1400 audit(1756715849.177:25313): avc: denied { prog_load } for pid=6682 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.744191][ T24] audit: type=1400 audit(1756715849.177:25314): avc: denied { bpf } for pid=6682 comm="syz.7.1625" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.765981][ T24] audit: type=1400 audit(1756715849.197:25315): avc: denied { bpf } for pid=6682 comm="syz.7.1625" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.787689][ T24] audit: type=1400 audit(1756715849.197:25316): avc: denied { prog_run } for pid=6682 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.898219][ T6695] device wireguard0 entered promiscuous mode [ 319.898988][ T6693] futex_wake_op: syz.7.1628 tries to shift op by -1; fix this program [ 320.122429][ T6698] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 320.197959][ T6698] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #2: comm syz.3.1630: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 4097, max 4(4), depth 0(0) [ 320.216332][ T6698] EXT4-fs (loop3): get root inode failed [ 320.222132][ T6698] EXT4-fs (loop3): mount failed [ 320.324915][ T6713] xt_hashlimit: size too large, truncated to 1048576 [ 320.358126][ T6706] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 320.369763][ T6706] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.593184][ T6721] erofs: (device loop9): mounted with root inode @ nid 36. [ 321.422563][ T6743] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 321.514829][ T6743] EXT4-fs (loop6): 1 truncate cleaned up [ 321.529519][ T6743] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,abort,noload,jqfmt=vfsold,minixdf,quota,,errors=continue [ 321.602701][ T6749] EXT4-fs (loop3): Ignoring removed orlov option [ 321.669721][ T6749] EXT4-fs error (device loop3): ext4_find_extent:928: inode #4: comm syz.3.1642: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 321.687385][ T6749] EXT4-fs warning (device loop3): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 321.732853][ T6749] EXT4-fs (loop3): mount failed [ 321.817620][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 321.947166][ T25] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 322.383427][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 322.557547][ T6772] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 322.569638][ T6772] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.663834][ T25] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 322.680380][ T25] usb 10-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 322.693043][ T25] usb 10-1: Product: syz [ 322.697821][ T25] usb 10-1: Manufacturer: syz [ 322.702601][ T25] usb 10-1: SerialNumber: syz [ 322.724070][ T25] usb 10-1: config 0 descriptor?? [ 322.764132][ T25] usb 10-1: selecting invalid altsetting 1 [ 322.780937][ T25] snd-usb-audio: probe of 10-1:0.0 failed with error -22 [ 322.788263][ T6778] FAT-fs (loop6): Unrecognized mount option "0xffffffffffffffff" or missing value [ 323.110714][ T6798] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.289301][ T2881] usb 10-1: USB disconnect, device number 29 [ 324.422916][ T6819] FAT-fs (loop7): Directory bread(block 64) failed [ 324.436796][ T6819] FAT-fs (loop7): Directory bread(block 65) failed [ 324.444145][ T6819] FAT-fs (loop7): Directory bread(block 66) failed [ 324.450777][ T6819] FAT-fs (loop7): Directory bread(block 67) failed [ 324.458483][ T6819] FAT-fs (loop7): Directory bread(block 68) failed [ 324.465291][ T6819] FAT-fs (loop7): Directory bread(block 69) failed [ 324.472001][ T6819] FAT-fs (loop7): Directory bread(block 70) failed [ 324.479114][ T6819] FAT-fs (loop7): Directory bread(block 71) failed [ 324.499215][ T6819] FAT-fs (loop7): Directory bread(block 72) failed [ 324.505825][ T6819] FAT-fs (loop7): Directory bread(block 73) failed [ 324.680891][ T24] kauditd_printk_skb: 530 callbacks suppressed [ 324.680977][ T24] audit: type=1400 audit(1756715854.167:25846): avc: denied { execmem } for pid=6829 comm="syz.7.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 324.712457][ T24] audit: type=1400 audit(1756715854.257:25847): avc: denied { map_create } for pid=6822 comm="syz.6.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 324.935040][ T24] audit: type=1400 audit(1756715854.257:25848): avc: denied { map_read map_write } for pid=6822 comm="syz.6.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.105820][ T24] audit: type=1400 audit(1756715854.287:25849): avc: denied { prog_load } for pid=6822 comm="syz.6.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.126386][ T24] audit: type=1400 audit(1756715854.287:25850): avc: denied { bpf } for pid=6822 comm="syz.6.1658" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.147842][ T24] audit: type=1400 audit(1756715854.287:25851): avc: denied { perfmon } for pid=6822 comm="syz.6.1658" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.182549][ T24] audit: type=1400 audit(1756715854.287:25852): avc: denied { prog_run } for pid=6822 comm="syz.6.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.232663][ T24] audit: type=1400 audit(1756715854.287:25853): avc: denied { create } for pid=6822 comm="syz.6.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.304543][ T24] audit: type=1400 audit(1756715854.427:25854): avc: denied { prog_load } for pid=6829 comm="syz.7.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.324481][ T24] audit: type=1400 audit(1756715854.427:25855): avc: denied { bpf } for pid=6829 comm="syz.7.1660" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.463981][ T6826] F2FS-fs (loop3): invalid crc value [ 326.232072][ T6826] F2FS-fs (loop3): Found nat_bits in checkpoint [ 326.272990][ T6826] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 326.291062][ T6826] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 326.509739][ T6854] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 326.537702][ T6854] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 326.584451][ T6854] F2FS-fs (loop6): Found nat_bits in checkpoint [ 326.767833][ T6854] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 326.775599][ T6854] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 327.237303][ T4279] attempt to access beyond end of device [ 327.237303][ T4279] loop6: rw=2051, want=53248, limit=40427 [ 327.248772][ T4279] attempt to access beyond end of device [ 327.248772][ T4279] loop6: rw=2051, want=73728, limit=40427 [ 327.261730][ T4279] F2FS-fs (loop6): Issue discard(6144, 6144, 512) failed, ret: -5 [ 327.261754][ T4279] F2FS-fs (loop6): Issue discard(7168, 7168, 2048) failed, ret: -5 [ 327.547422][ T6891] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1673'. [ 328.223997][ T6900] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 328.780354][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1684'. [ 328.796462][ T6930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6930 comm=syz.3.1684 [ 329.551123][ T6950] bridge0: port 3(dummy0) entered disabled state [ 329.557594][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.564851][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.729070][ T24] kauditd_printk_skb: 447 callbacks suppressed [ 329.729156][ T24] audit: type=1400 audit(1756715859.297:26303): avc: denied { prog_load } for pid=6958 comm="syz.9.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.206390][ T24] audit: type=1400 audit(1756715859.297:26304): avc: denied { map_create } for pid=6958 comm="syz.9.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.544759][ T24] audit: type=1400 audit(1756715859.297:26305): avc: denied { bpf } for pid=6958 comm="syz.9.1693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.739599][ T24] audit: type=1400 audit(1756715859.297:26306): avc: denied { map_read map_write } for pid=6958 comm="syz.9.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 331.005637][ T24] audit: type=1400 audit(1756715859.307:26307): avc: denied { perfmon } for pid=6958 comm="syz.9.1693" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.026776][ T24] audit: type=1400 audit(1756715859.307:26308): avc: denied { prog_run } for pid=6958 comm="syz.9.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 331.046210][ T24] audit: type=1400 audit(1756715859.317:26309): avc: denied { prog_load } for pid=6958 comm="syz.9.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 331.065452][ T24] audit: type=1400 audit(1756715859.327:26310): avc: denied { prog_load } for pid=6958 comm="syz.9.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 331.085436][ T24] audit: type=1400 audit(1756715859.337:26311): avc: denied { bpf } for pid=6958 comm="syz.9.1693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.106180][ T24] audit: type=1400 audit(1756715859.337:26312): avc: denied { perfmon } for pid=6958 comm="syz.9.1693" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.175012][ T6980] netlink: 'syz.6.1698': attribute type 1 has an invalid length. [ 331.182940][ T6980] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 331.226705][ T6983] syzkaller0: tun_chr_ioctl cmd 2150667307 [ 331.653503][ T20] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 331.673592][ T7003] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1704'. [ 331.717023][ T7012] netlink: 'syz.8.1706': attribute type 6 has an invalid length. [ 331.731968][ T7010] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 331.759079][ T7014] EXT4-fs (loop7): Ignoring removed oldalloc option [ 331.768001][ T7014] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 331.811589][ T7014] EXT4-fs (loop7): 1 truncate cleaned up [ 331.834028][ T7014] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,oldalloc,errors=remount-ro,minixdf, [ 332.015475][ T7019] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 332.040448][ T7019] EXT4-fs (loop9): 1 truncate cleaned up [ 332.047864][ T7019] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota, [ 332.066510][ T20] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 332.078176][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.097672][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 332.107521][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.120791][ T20] usb 4-1: config 0 descriptor?? [ 332.665936][ T20] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 332.794202][ T20] usb 4-1: USB disconnect, device number 23 [ 333.070616][ T7039] kvm: emulating exchange as write [ 333.093443][ T2880] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 333.417396][ T7045] 9pnet: Insufficient options for proto=fd [ 333.606270][ T2880] usb 10-1: Using ep0 maxpacket: 16 [ 333.869819][ T7045] loop7: p1 p3 p4 [ 333.873870][ T7045] loop7: p1 start 51379968 is beyond EOD, truncated [ 333.881134][ T7045] loop7: p3 size 100663552 extends beyond EOD, truncated [ 333.889922][ T7045] loop7: p4 size 327680 extends beyond EOD, truncated [ 333.911488][ T7056] udc-core: couldn't find an available UDC or it's busy [ 333.918536][ T7056] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 334.003705][ T2880] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 334.027999][ T2880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.078944][ T2880] usb 10-1: Product: syz [ 334.090777][ T2880] usb 10-1: Manufacturer: syz [ 334.096924][ T2880] usb 10-1: SerialNumber: syz [ 334.102900][ T2880] usb 10-1: config 0 descriptor?? [ 334.358192][ T1943] udevd[1943]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 334.377579][ T1890] udevd[1890]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 334.388146][ T7075] device bridge0 entered promiscuous mode [ 334.395637][ T7075] bridge0: port 3(macsec1) entered blocking state [ 334.428839][ T7075] bridge0: port 3(macsec1) entered disabled state [ 334.439883][ T1892] udevd[1892]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 334.439964][ T1943] udevd[1943]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 334.461949][ T7075] device bridge0 left promiscuous mode [ 334.517226][ T7077] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 334.528106][ T7077] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.558621][ T7077] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz.6.1726: Directory hole found for htree leaf block 0 [ 334.571894][ T2880] r8152 10-1:0.0: Unknown version 0x3c30 [ 334.576189][ T7077] netlink: 'syz.6.1726': attribute type 27 has an invalid length. [ 334.745647][ T24] kauditd_printk_skb: 629 callbacks suppressed [ 334.745661][ T24] audit: type=1400 audit(1756715864.357:26942): avc: denied { map_create } for pid=7083 comm="syz.7.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 334.771706][ T24] audit: type=1400 audit(1756715864.357:26943): avc: denied { bpf } for pid=7083 comm="syz.7.1727" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 334.794409][ T24] audit: type=1400 audit(1756715864.357:26944): avc: denied { map_read map_write } for pid=7083 comm="syz.7.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 334.814785][ T24] audit: type=1400 audit(1756715864.357:26945): avc: denied { read } for pid=7083 comm="syz.7.1727" dev="nsfs" ino=4026532539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 334.836625][ T24] audit: type=1400 audit(1756715864.357:26946): avc: denied { read open } for pid=7083 comm="syz.7.1727" path="net:[4026532539]" dev="nsfs" ino=4026532539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 334.860939][ T24] audit: type=1400 audit(1756715864.357:26947): avc: denied { create } for pid=7083 comm="syz.7.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.883846][ T2880] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 334.884838][ T7084] syz.7.1727[7084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.891484][ T7084] syz.7.1727[7084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.903093][ T24] audit: type=1400 audit(1756715864.357:26948): avc: denied { setopt } for pid=7083 comm="syz.7.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.935148][ T24] audit: type=1400 audit(1756715864.387:26949): avc: denied { prog_load } for pid=7028 comm="syz.9.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 334.954785][ T24] audit: type=1400 audit(1756715864.387:26950): avc: denied { bpf } for pid=7028 comm="syz.9.1712" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 334.976388][ T24] audit: type=1400 audit(1756715864.387:26951): avc: denied { perfmon } for pid=7028 comm="syz.9.1712" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 335.010800][ T2877] usb 10-1: USB disconnect, device number 30 [ 335.153468][ T2880] usb 7-1: Using ep0 maxpacket: 8 [ 335.273517][ T2880] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 335.282038][ T2880] usb 7-1: config 179 has no interface number 0 [ 335.288549][ T2880] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.299998][ T2880] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.311525][ T2880] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.323507][ T2880] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 335.335412][ T2880] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.349685][ T2880] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.358916][ T2880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.393977][ T7077] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 335.725612][ T7120] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 335.736063][ T7120] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 335.746645][ T7120] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 335.769329][ T7120] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 335.781709][ T7120] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0000] [ 335.790095][ T7120] EXT4-fs (loop9): orphan cleanup on readonly fs [ 335.798252][ T7120] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1736: bg 0: block 34: padding at end of block bitmap is not set [ 335.813077][ T7120] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.1736: Failed to acquire dquot type 1 [ 335.827086][ T7120] EXT4-fs (loop9): 1 truncate cleaned up [ 335.833130][ T7120] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,commit=0x0000000000000000,abort,,errors=continue [ 335.853216][ T7120] EXT4-fs error (device loop9): ext4_lookup:1834: inode #2: comm syz.9.1736: deleted inode referenced: 12 [ 335.865638][ T7120] EXT4-fs error (device loop9): ext4_lookup:1834: inode #2: comm syz.9.1736: deleted inode referenced: 12 [ 335.878895][ T7120] EXT4-fs error (device loop9): ext4_lookup:1834: inode #2: comm syz.9.1736: deleted inode referenced: 12 [ 335.891633][ T7120] EXT4-fs error (device loop9): ext4_lookup:1834: inode #2: comm syz.9.1736: deleted inode referenced: 12 [ 336.004335][ T7124] EXT4-fs (loop9): Project quota feature not enabled. Cannot enable project quota enforcement. [ 336.385657][ T20] usb 7-1: USB disconnect, device number 21 [ 336.403443][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 336.590875][ T7146] tipc: Enabling of bearer rejected, already enabled [ 336.654342][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 336.863488][ T20] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 337.103415][ T20] usb 7-1: Using ep0 maxpacket: 16 [ 337.263457][ T20] usb 7-1: unable to get BOS descriptor or descriptor too short [ 337.343525][ T20] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 337.351725][ T20] usb 7-1: config 13 has no interface number 0 [ 337.357976][ T20] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 337.369932][ T20] usb 7-1: config 13 interface 50 has no altsetting 0 [ 337.664168][ T20] usb 7-1: string descriptor 0 read error: -22 [ 337.671768][ T20] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 337.697413][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.753929][ T7140] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 337.794343][ T20] usb 7-1: MIDIStreaming interface descriptor not found [ 338.250623][ T51] usb 7-1: USB disconnect, device number 22 [ 338.492032][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1756'. [ 338.505925][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1756'. [ 338.558164][ T7197] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 338.588433][ T7196] incfs: Options parsing error. -22 [ 338.594004][ T7196] incfs: mount failed -22 [ 338.849915][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1762'. [ 338.945546][ T7211] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 338.971238][ T7211] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 339.615866][ T7252] EXT4-fs (loop9): Ignoring removed oldalloc option [ 339.665049][ T7252] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue [ 339.755136][ T24] kauditd_printk_skb: 735 callbacks suppressed [ 339.755151][ T24] audit: type=1400 audit(1756715869.367:27685): avc: denied { bpf } for pid=7250 comm="syz.9.1773" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 339.782804][ T2880] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 339.805281][ T24] audit: type=1400 audit(1756715869.397:27686): avc: denied { prog_run } for pid=7250 comm="syz.9.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 339.827356][ T24] audit: type=1400 audit(1756715869.417:27687): avc: denied { unmount } for pid=2755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 339.848628][ T24] audit: type=1400 audit(1756715869.437:27688): avc: denied { ioctl } for pid=7245 comm="syz.6.1771" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.874885][ T24] audit: type=1400 audit(1756715869.457:27689): avc: denied { ioctl } for pid=7245 comm="syz.6.1771" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.926453][ T24] audit: type=1400 audit(1756715869.537:27690): avc: denied { read write } for pid=2755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.958456][ T24] audit: type=1400 audit(1756715869.567:27691): avc: denied { read write open } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.993886][ T24] audit: type=1400 audit(1756715869.567:27692): avc: denied { ioctl } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.020377][ T24] audit: type=1400 audit(1756715869.597:27693): avc: denied { write } for pid=7257 comm="syz.9.1774" name="ip_tables_targets" dev="proc" ino=4026533043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 340.045240][ T2880] usb 7-1: Using ep0 maxpacket: 16 [ 340.050650][ T24] audit: type=1400 audit(1756715869.597:27694): avc: denied { create } for pid=7257 comm="syz.9.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 340.457672][ T2880] usb 7-1: unable to get BOS descriptor or descriptor too short [ 340.853350][ T2880] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 340.862070][ T2880] usb 7-1: config 13 has no interface number 0 [ 340.869125][ T2880] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 340.879364][ T2880] usb 7-1: config 13 interface 50 has no altsetting 0 [ 340.888286][ T7276] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 340.895667][ T7276] EXT4-fs (loop7): Test dummy encryption mode enabled [ 340.912400][ T7276] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 341.011258][ T7285] rtc_cmos 00:00: Alarms can be up to one day in the future [ 341.034042][ T7288] EXT4-fs (loop3): Ignoring removed nobh option [ 341.042520][ T7288] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,abort,,errors=continue [ 341.053733][ T2880] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 341.061019][ T7288] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.063909][ T2880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.084810][ T2880] usb 7-1: Product: syz [ 341.089099][ T2880] usb 7-1: Manufacturer: syz [ 341.096025][ T2880] usb 7-1: SerialNumber: syz [ 341.124323][ T7246] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 341.347181][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1787'. [ 341.437657][ T2877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 341.445563][ T2877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 341.453170][ T2877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 341.461745][ T2877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 341.469469][ T2877] rtc rtc0: __rtc_set_alarm: err=-22 [ 341.489466][ T2881] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 341.526468][ T2880] usb 7-1: MIDIStreaming interface descriptor not found [ 341.830287][ T2880] usb 7-1: USB disconnect, device number 23 [ 341.894984][ T7326] EXT4-fs (loop9): Test dummy encryption mode enabled [ 341.912966][ T7326] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 341.925942][ T7326] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.133857][ T2083] udevd[2083]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 342.183955][ T2881] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 342.200288][ T2881] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 342.439094][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1796'. [ 342.612468][ T2881] usb 4-1: config 8 has no interface number 0 [ 342.618699][ T2881] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 342.650940][ T7347] device bridge4 entered promiscuous mode [ 342.767855][ T7357] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 342.778411][ T7357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 342.854354][ T7357] System zones: 1-12 [ 342.930001][ T7357] EXT4-fs (loop7): orphan cleanup on readonly fs [ 343.012071][ T7357] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1800: bg 0: block 361: padding at end of block bitmap is not set [ 343.028545][ T7357] EXT4-fs (loop7): Remounting filesystem read-only [ 343.039105][ T7357] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 343.052648][ T7357] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #11: comm syz.7.1800: invalid indirect mapped block 12 (level 1) [ 343.067955][ T7357] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #11: comm syz.7.1800: invalid indirect mapped block 2 (level 2) [ 343.091635][ T7357] EXT4-fs (loop7): 1 truncate cleaned up [ 343.097976][ T25] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 343.107278][ T7357] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000005,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008 [ 343.272511][ T2881] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 343.281674][ T2881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.289759][ T2881] usb 4-1: Product: syz [ 343.294011][ T2881] usb 4-1: Manufacturer: syz [ 343.298893][ T2881] usb 4-1: SerialNumber: syz [ 343.389704][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 343.813443][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.834440][ T7357] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 5: comm syz.7.1800: lblock 0 mapped to illegal pblock 5 (length 1) [ 343.849306][ T2881] usb 4-1: USB disconnect, device number 24 [ 343.864748][ T7357] EXT4-fs warning (device loop7): dx_probe:796: inode #2: lblock 0: comm syz.7.1800: error -117 reading directory block [ 343.912141][ T7369] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 5: comm syz.7.1800: lblock 0 mapped to illegal pblock 5 (length 1) [ 343.913505][ T25] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 343.929718][ T7369] EXT4-fs warning (device loop7): dx_probe:796: inode #2: lblock 0: comm syz.7.1800: error -117 reading directory block [ 343.936021][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=12 [ 343.949067][ T7356] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #2: block 5: comm syz.7.1800: lblock 0 mapped to illegal pblock 5 (length 1) [ 343.956761][ T25] usb 10-1: SerialNumber: syz [ 343.976526][ T7356] EXT4-fs warning (device loop7): dx_probe:796: inode #2: lblock 0: comm syz.7.1800: error -117 reading directory block [ 343.999291][ T25] usb 10-1: config 0 descriptor?? [ 344.166567][ T7368] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 344.179908][ T7368] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 344.244674][ T7368] F2FS-fs (loop6): Found nat_bits in checkpoint [ 344.286667][ T7368] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 344.293983][ T7368] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 344.674378][ T7368] attempt to access beyond end of device [ 344.674378][ T7368] loop6: rw=2051, want=53248, limit=40427 [ 344.686234][ T7368] attempt to access beyond end of device [ 344.686234][ T7368] loop6: rw=2051, want=73728, limit=40427 [ 344.698157][ T7368] F2FS-fs (loop6): Issue discard(6144, 6144, 512) failed, ret: -5 [ 344.698187][ T7368] F2FS-fs (loop6): Issue discard(7168, 7168, 2048) failed, ret: -5 [ 344.767305][ T24] kauditd_printk_skb: 491 callbacks suppressed [ 344.767318][ T24] audit: type=1400 audit(1756715874.377:28186): avc: denied { read write } for pid=7380 comm="syz.3.1806" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.804906][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 344.815274][ T25] usbhid: probe of 10-1:0.0 failed with error -71 [ 344.831810][ T25] usb 10-1: USB disconnect, device number 31 [ 344.841382][ T24] audit: type=1400 audit(1756715874.377:28187): avc: denied { open } for pid=7380 comm="syz.3.1806" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.884534][ T24] audit: type=1400 audit(1756715874.377:28188): avc: denied { ioctl } for pid=7380 comm="syz.3.1806" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.917258][ T24] audit: type=1400 audit(1756715874.387:28189): avc: denied { prog_load } for pid=7380 comm="syz.3.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 344.938108][ T24] audit: type=1400 audit(1756715874.497:28190): avc: denied { read write } for pid=3729 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.963079][ T24] audit: type=1400 audit(1756715874.497:28191): avc: denied { read write open } for pid=3729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.008207][ T24] audit: type=1400 audit(1756715874.497:28192): avc: denied { ioctl } for pid=3729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.057873][ T24] audit: type=1400 audit(1756715874.547:28193): avc: denied { read write } for pid=4279 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.111014][ T24] audit: type=1400 audit(1756715874.547:28194): avc: denied { open } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.135466][ T24] audit: type=1400 audit(1756715874.547:28195): avc: denied { ioctl } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.632050][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1813'. [ 346.143596][ T7427] erofs: (device loop6): erofs_init_devices: extra devices don't match (ondisk 1536, given 0) [ 346.548192][ T7441] F2FS-fs (loop6): fault_injection options not supported [ 346.572846][ T7441] F2FS-fs (loop6): invalid crc value [ 346.834846][ T7441] F2FS-fs (loop6): Found nat_bits in checkpoint [ 346.957940][ T7441] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 347.015970][ T7463] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.1826: casefold flag without casefold feature [ 347.043836][ T7463] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1826: couldn't read orphan inode 15 (err -117) [ 347.116632][ T7463] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 347.334207][ T4279] attempt to access beyond end of device [ 347.334207][ T4279] loop6: rw=2049, want=45104, limit=40427 [ 347.497619][ T7477] exfat: Unknown parameter '' [ 347.591142][ T7477] 9pnet: Insufficient options for proto=fd [ 348.179027][ T7485] device gretap0 left promiscuous mode [ 348.192414][ T7485] bridge0: port 1(gretap0) entered disabled state [ 348.346206][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1834'. [ 348.376655][ T7488] 9pnet: Insufficient options for proto=fd [ 348.388051][ T7497] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 348.425865][ T7497] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.481045][ T7497] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1832: corrupted in-inode xattr [ 348.493422][ T7497] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1832: couldn't read orphan inode 15 (err -117) [ 348.517140][ T7497] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue [ 348.596977][ T7515] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1839'. [ 349.017739][ T7515] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 349.086835][ T7515] EXT4-fs (loop7): 1 truncate cleaned up [ 349.092724][ T7515] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota, [ 350.315525][ T24] kauditd_printk_skb: 760 callbacks suppressed [ 350.315538][ T24] audit: type=1400 audit(1756715879.455:28956): avc: denied { prog_load } for pid=7542 comm="syz.6.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 350.351983][ T24] audit: type=1400 audit(1756715879.455:28957): avc: denied { bpf } for pid=7542 comm="syz.6.1845" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.387568][ T24] audit: type=1400 audit(1756715879.455:28958): avc: denied { perfmon } for pid=7542 comm="syz.6.1845" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.409209][ T24] audit: type=1400 audit(1756715879.485:28959): avc: denied { map_create } for pid=7542 comm="syz.6.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 350.448390][ T7560] overlayfs: failed to resolve './file1': -2 [ 350.554033][ T24] audit: type=1400 audit(1756715879.535:28960): avc: denied { execmem } for pid=7542 comm="syz.6.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 350.576163][ T7563] 9pnet: Insufficient options for proto=fd [ 350.597598][ T24] audit: type=1400 audit(1756715879.905:28961): avc: denied { read write } for pid=4093 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.638741][ T24] audit: type=1400 audit(1756715879.905:28962): avc: denied { open } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.663204][ T24] audit: type=1400 audit(1756715879.905:28963): avc: denied { ioctl } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.692178][ T24] audit: type=1400 audit(1756715879.955:28964): avc: denied { read write } for pid=3729 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.721404][ T24] audit: type=1400 audit(1756715879.955:28965): avc: denied { open } for pid=3729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.843443][ T486] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 351.203481][ T486] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 351.216032][ T486] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.226459][ T486] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 351.239533][ T486] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 351.248655][ T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.258129][ T486] usb 4-1: config 0 descriptor?? [ 351.294031][ T486] usb-storage 4-1:0.0: USB Mass Storage device detected [ 351.302236][ T486] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 351.498272][ T486] usb 4-1: USB disconnect, device number 25 [ 352.063551][ T486] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 352.343419][ T486] usb 10-1: Using ep0 maxpacket: 32 [ 352.463529][ T51] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 352.471199][ T486] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.482245][ T486] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.492200][ T486] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 352.501400][ T486] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.510845][ T486] usb 10-1: config 0 descriptor?? [ 352.593459][ T353] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 352.713466][ T51] usb 7-1: Using ep0 maxpacket: 8 [ 352.833534][ T51] usb 7-1: config 32 has an invalid descriptor of length 55, skipping remainder of the config [ 352.843921][ T51] usb 7-1: too many endpoints for config 32 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 352.855027][ T51] usb 7-1: config 32 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 352.868535][ T51] usb 7-1: config 32 interface 0 has no altsetting 0 [ 352.875288][ T51] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 352.884685][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.963537][ T353] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.974968][ T353] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.987855][ T353] usb 4-1: config 0 interface 0 has no altsetting 0 [ 352.994830][ T486] hid (null): invalid report_size -60084347 [ 353.001903][ T486] uclogic 0003:28BD:0042.001B: invalid report_size -60084347 [ 353.009380][ T353] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 353.018477][ T486] uclogic 0003:28BD:0042.001B: item 0 4 1 7 parsing failed [ 353.025753][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.033938][ T486] uclogic 0003:28BD:0042.001B: parse failed [ 353.039951][ T486] uclogic: probe of 0003:28BD:0042.001B failed with error -22 [ 353.053661][ T353] usb 4-1: config 0 descriptor?? [ 353.173534][ T51] usb 7-1: string descriptor 0 read error: -71 [ 353.179942][ T51] hub 7-1:32.0: bad descriptor, ignoring hub [ 353.186296][ T51] hub: probe of 7-1:32.0 failed with error -5 [ 353.233822][ T51] usb 7-1: USB disconnect, device number 24 [ 353.544817][ T353] itetech 0003:06CB:73F6.001C: item fetching failed at offset 1/3 [ 353.552893][ T353] itetech: probe of 0003:06CB:73F6.001C failed with error -22 [ 354.552399][ T51] usb 10-1: USB disconnect, device number 32 [ 354.903475][ T2905] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 355.223548][ T2905] usb 7-1: not running at top speed; connect to a high speed hub [ 355.303290][ T51] usb 4-1: USB disconnect, device number 26 [ 355.312981][ T2905] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 355.330570][ T2905] usb 7-1: config 95 has no interface number 0 [ 355.338079][ T24] kauditd_printk_skb: 255 callbacks suppressed [ 355.338092][ T24] audit: type=1400 audit(1756715884.955:29221): avc: denied { read write } for pid=7618 comm="syz.3.1867" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.368203][ T2905] usb 7-1: config 95 interface 1 has no altsetting 0 [ 355.368215][ T24] audit: type=1400 audit(1756715884.955:29222): avc: denied { open } for pid=7618 comm="syz.3.1867" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.368238][ T24] audit: type=1400 audit(1756715884.955:29223): avc: denied { ioctl } for pid=7618 comm="syz.3.1867" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.423862][ T24] audit: type=1400 audit(1756715885.005:29224): avc: denied { ioctl } for pid=7611 comm="syz.6.1864" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.488046][ T24] audit: type=1400 audit(1756715885.095:29225): avc: denied { read write } for pid=2755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.514469][ T24] audit: type=1400 audit(1756715885.095:29226): avc: denied { read write open } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.540125][ T24] audit: type=1400 audit(1756715885.095:29227): avc: denied { ioctl } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.565995][ T24] audit: type=1400 audit(1756715885.115:29228): avc: denied { prog_load } for pid=7621 comm="syz.9.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 355.585831][ T24] audit: type=1400 audit(1756715885.125:29229): avc: denied { bpf } for pid=7621 comm="syz.9.1868" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 355.598874][ T7622] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4a7613fa, utbl_chksum : 0xe619d30d) [ 355.607581][ T24] audit: type=1400 audit(1756715885.125:29230): avc: denied { perfmon } for pid=7621 comm="syz.9.1868" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 355.626782][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1868'. [ 355.655389][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1868'. [ 355.673703][ T2905] usb 7-1: string descriptor 0 read error: -22 [ 355.680036][ T2905] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 355.689636][ T2905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.793466][ T51] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 355.962579][ T2905] usb 7-1: USB disconnect, device number 25 [ 356.063452][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 356.174553][ T1943] udevd[1943]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 356.190565][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.201479][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.211309][ T51] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 356.220569][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.229971][ T51] usb 4-1: config 0 descriptor?? [ 356.529552][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 356.539257][ T7635] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1872'. [ 356.548364][ T7635] netlink: 'syz.3.1872': attribute type 3 has an invalid length. [ 356.556128][ T7635] netlink: 'syz.3.1872': attribute type 2 has an invalid length. [ 356.564050][ T7635] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1872'. [ 356.742650][ T51] usbhid 4-1:0.0: can't add hid device: -71 [ 356.749533][ T51] usbhid: probe of 4-1:0.0 failed with error -71 [ 356.756862][ T51] usb 4-1: USB disconnect, device number 27 [ 356.829317][ T7638] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 356.836145][ T7638] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 356.877595][ T7638] F2FS-fs (loop6): Found nat_bits in checkpoint [ 356.906368][ T7638] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 356.913462][ T7638] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 357.237454][ T2880] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 357.330234][ T4279] attempt to access beyond end of device [ 357.330234][ T4279] loop6: rw=2049, want=45104, limit=40427 [ 357.533449][ T2880] usb 10-1: device descriptor read/64, error -71 [ 357.888994][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 357.912907][ T7676] 9pnet: Insufficient options for proto=fd [ 357.937238][ T2880] usb 10-1: device descriptor read/64, error -71 [ 358.213438][ T2880] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 358.483423][ T2880] usb 10-1: device descriptor read/64, error -71 [ 358.883451][ T2880] usb 10-1: device descriptor read/64, error -71 [ 359.003507][ T2880] usb usb10-port1: attempt power cycle [ 359.413465][ T2880] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 359.593581][ T2880] usb 10-1: device descriptor read/8, error -71 [ 359.703311][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 359.969126][ T7707] futex_wake_op: syz.9.1891 tries to shift op by 32; fix this program [ 359.980029][ T7707] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 360.007036][ T2880] usb 10-1: device descriptor read/8, error -71 [ 360.076062][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1890'. [ 360.399427][ T24] kauditd_printk_skb: 380 callbacks suppressed [ 360.399442][ T24] audit: type=1400 audit(1756715890.005:29611): avc: denied { read } for pid=7706 comm="syz.9.1891" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.429249][ T24] audit: type=1400 audit(1756715890.005:29612): avc: denied { read write } for pid=3729 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.455037][ T24] audit: type=1400 audit(1756715890.005:29613): avc: denied { open } for pid=3729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.480031][ T24] audit: type=1400 audit(1756715890.005:29614): avc: denied { ioctl } for pid=3729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.507317][ T24] audit: type=1400 audit(1756715890.015:29615): avc: denied { map_create } for pid=7710 comm="syz.3.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 360.527124][ T24] audit: type=1400 audit(1756715890.015:29616): avc: denied { bpf } for pid=7710 comm="syz.3.1892" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 360.548317][ T24] audit: type=1400 audit(1756715890.015:29617): avc: denied { map_read map_write } for pid=7710 comm="syz.3.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 360.568342][ T24] audit: type=1400 audit(1756715890.035:29618): avc: denied { execmem } for pid=7710 comm="syz.3.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 360.588058][ T24] audit: type=1400 audit(1756715890.115:29619): avc: denied { read } for pid=7706 comm="syz.9.1891" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.610117][ T24] audit: type=1400 audit(1756715890.115:29620): avc: denied { read } for pid=7706 comm="syz.9.1891" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.889777][ T7721] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1896'. [ 361.191527][ T7725] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 361.216650][ T7725] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.645106][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1900'. [ 361.660578][ T7738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7738 comm=syz.9.1900 [ 361.735487][ T7742] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 361.781949][ T7746] input: syz1 as /devices/virtual/input/input24 [ 361.911874][ T7751] netlink: 'syz.6.1905': attribute type 12 has an invalid length. [ 362.041963][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1904'. [ 362.683443][ T51] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 363.003457][ T51] usb 4-1: device descriptor read/64, error -71 [ 363.393434][ T51] usb 4-1: device descriptor read/64, error -71 [ 363.673433][ T51] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 363.704617][ T7788] xt_bpf: check failed: parse error [ 364.049742][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1918'. [ 364.069350][ T51] usb 4-1: device descriptor read/64, error -71 [ 364.733660][ T51] usb 4-1: device descriptor read/64, error -71 [ 364.853829][ T51] usb usb4-port1: attempt power cycle [ 364.946425][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.954024][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.961648][ T7817] device bridge_slave_0 entered promiscuous mode [ 364.969649][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.977159][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.984725][ T7817] device bridge_slave_1 entered promiscuous mode [ 365.059912][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.067032][ T7817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.074376][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.081416][ T7817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.110100][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.118306][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.126596][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.217371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.225943][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.233185][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.241325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.250297][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.257499][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.265369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.273871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.286419][ T51] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 365.306987][ T7817] device veth0_vlan entered promiscuous mode [ 365.320734][ T7817] device veth1_macvtap entered promiscuous mode [ 365.329830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.338292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.346535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.354254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.361884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.374328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.395255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.407893][ T24] kauditd_printk_skb: 688 callbacks suppressed [ 365.407917][ T24] audit: type=1400 audit(1756715895.015:30309): avc: denied { module_request } for pid=7817 comm="syz-executor" kmod="netdev-geneve0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 365.567218][ T1091] Bluetooth: hci0: Frame reassembly failed (-84) [ 365.661107][ T24] audit: type=1400 audit(1756715895.055:30310): avc: denied { map_create } for pid=7825 comm="syz.6.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.692546][ T24] audit: type=1400 audit(1756715895.055:30311): avc: denied { bpf } for pid=7825 comm="syz.6.1926" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 365.718665][ T51] usb 4-1: device descriptor read/8, error -71 [ 365.809415][ T24] audit: type=1400 audit(1756715895.055:30312): avc: denied { map_read map_write } for pid=7825 comm="syz.6.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.834917][ T24] audit: type=1400 audit(1756715895.085:30313): avc: denied { prog_load } for pid=7825 comm="syz.6.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 365.886913][ T2755] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.901868][ T2755] audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 [ 365.902416][ T7836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.910573][ T24] audit: type=1400 audit(1756715895.085:30314): avc: denied { perfmon } for pid=7825 comm="syz.6.1926" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 365.940343][ T7836] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 365.983413][ T51] usb 4-1: device descriptor read/8, error -71 [ 366.104874][ T7846] EXT4-fs (loop9): Mount option "noacl" will be removed by 3.5 [ 366.104874][ T7846] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 366.104874][ T7846] [ 366.115245][ T7832] EXT4-fs (loop3): Ignoring removed nobh option [ 366.123050][ T7846] EXT4-fs (loop9): Unrecognized mount option "audit" or missing value [ 366.194183][ T7851] xt_hashlimit: max too large, truncated to 1048576 [ 366.206287][ T7832] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 366.223104][ T7832] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #3: comm syz.3.1928: mark_inode_dirty error [ 366.258253][ T7832] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 366.286159][ T7832] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.1928: mark_inode_dirty error [ 366.312100][ T7832] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1928: Failed to acquire dquot type 0 [ 366.339107][ T7832] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 366.367093][ T7832] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #16: comm syz.3.1928: mark_inode_dirty error [ 366.385344][ T7832] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 366.400944][ T7832] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.1928: mark_inode_dirty error [ 366.430766][ T7832] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 366.448803][ T7832] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 366.465234][ T7832] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 366.484689][ T7832] EXT4-fs error (device loop3): ext4_truncate:4390: inode #16: comm syz.3.1928: mark_inode_dirty error [ 366.509054][ T7832] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: error 27 [ 366.527071][ T7832] EXT4-fs (loop3): 1 truncate cleaned up [ 366.539185][ T7832] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue [ 366.564562][ T7832] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.783873][ T7856] loop9: p1 < > p3 [ 366.793550][ T7856] loop9: p3 size 134217728 extends beyond EOD, truncated [ 366.937423][ T2083] udevd[2083]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 366.984336][ T1943] udevd[1943]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 367.033091][ T9] tipc: Disabling bearer [ 367.039564][ T9] tipc: Disabling bearer [ 367.106978][ T9] tipc: Left network mode [ 367.340170][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.347451][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.360070][ T7874] device bridge_slave_0 entered promiscuous mode [ 367.374208][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.381292][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.388902][ T7874] device bridge_slave_1 entered promiscuous mode [ 367.451715][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.458804][ T7874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.466206][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.473245][ T7874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.500748][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.509642][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.518006][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.529524][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.537773][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.544948][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.555826][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.564099][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.571268][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.579124][ T51] Bluetooth: hci0: command 0x1003 tx timeout [ 367.585550][ T440] Bluetooth: hci0: sending frame failed (-49) [ 367.593386][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.604158][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.620387][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.633320][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.641659][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.649680][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.659223][ T7874] device veth0_vlan entered promiscuous mode [ 367.673017][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.683638][ T7874] device veth1_macvtap entered promiscuous mode [ 367.704608][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.713736][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.817568][ T7884] syz.4.1939[7884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.817649][ T7884] syz.4.1939[7884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.975098][ T7887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 367.995304][ T7887] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 368.003951][ T7887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 368.183621][ T2905] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 368.350315][ T7906] tipc: Started in network mode [ 368.355944][ T7906] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 368.365488][ T7906] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 368.374049][ T7906] tipc: Enabled bearer , priority 10 [ 368.403451][ T2877] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 368.423550][ T2905] usb 5-1: Using ep0 maxpacket: 8 [ 368.429737][ T7908] loop7: p2 < > p3 p4 [ 368.435365][ T7908] loop7: p3 start 65535 is beyond EOD, truncated [ 368.441726][ T7908] loop7: p4 size 8192 extends beyond EOD, truncated [ 368.457229][ T7908] sch_fq: defrate 0 ignored. [ 368.525748][ T2083] udevd[2083]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 368.537364][ T1943] udevd[1943]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 368.548362][ T2905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 368.559613][ T2905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.572615][ T2905] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 368.581705][ T2905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.593735][ T2905] usb 5-1: config 0 descriptor?? [ 368.648810][ T7919] EXT4-fs (loop7): Ignoring removed bh option [ 368.666982][ T7919] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 368.678066][ T7919] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.696287][ T7919] EXT4-fs error (device loop7): ext4_lookup:1830: inode #12: comm syz.7.1950: iget: bad i_size value: 2533274857506816 [ 368.710108][ T7919] EXT4-fs error (device loop7): ext4_lookup:1830: inode #12: comm syz.7.1950: iget: bad i_size value: 2533274857506816 [ 368.723799][ T7919] EXT4-fs error (device loop7): ext4_lookup:1830: inode #12: comm syz.7.1950: iget: bad i_size value: 2533274857506816 [ 368.763524][ T2877] usb 1-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 368.774056][ T2877] usb 1-1: too many endpoints for config 0 interface 0 altsetting 131: 99, using maximum allowed: 30 [ 368.785177][ T2877] usb 1-1: config 0 interface 0 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 368.806083][ T2877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 368.812743][ T2877] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 368.821880][ T2877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.850882][ T2877] usb 1-1: config 0 descriptor?? [ 369.079334][ T2905] monterey 0003:0566:3004.001D: report_id 1108778202 is invalid [ 369.087168][ T2905] monterey 0003:0566:3004.001D: item 0 4 1 8 parsing failed [ 369.095583][ T2905] monterey: probe of 0003:0566:3004.001D failed with error -22 [ 369.487240][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 369.497343][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.506435][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 369.513822][ T25] tipc: 32-bit node address hash set to 1000000 [ 369.515143][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.530025][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.538635][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.547129][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.555664][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.653595][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 369.659750][ T440] Bluetooth: hci0: sending frame failed (-49) [ 370.146504][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1957'. [ 370.586699][ T24] kauditd_printk_skb: 636 callbacks suppressed [ 370.586713][ T24] audit: type=1400 audit(1756715900.195:30932): avc: denied { read write } for pid=2755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.618143][ T24] audit: type=1400 audit(1756715900.195:30933): avc: denied { open } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.643405][ T24] audit: type=1400 audit(1756715900.195:30934): avc: denied { ioctl } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.692627][ T24] audit: type=1400 audit(1756715900.285:30935): avc: denied { execmem } for pid=7950 comm="syz.9.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 370.769745][ T24] audit: type=1400 audit(1756715900.375:30936): avc: denied { read write } for pid=4093 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.794615][ T24] audit: type=1400 audit(1756715900.375:30937): avc: denied { open } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.820792][ T24] audit: type=1400 audit(1756715900.375:30938): avc: denied { ioctl } for pid=4093 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.846609][ T24] audit: type=1400 audit(1756715900.405:30939): avc: denied { read write } for pid=7953 comm="syz.7.1959" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.892705][ T24] audit: type=1400 audit(1756715900.405:30940): avc: denied { open } for pid=7953 comm="syz.7.1959" path="/dev/loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.916897][ T24] audit: type=1400 audit(1756715900.405:30941): avc: denied { ioctl } for pid=7953 comm="syz.7.1959" path="/dev/loop7" dev="devtmpfs" ino=122 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.011431][ T7954] EXT4-fs (loop7): Ignoring removed bh option [ 371.041368][ T7954] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 371.052682][ T7954] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue [ 371.099330][ T2881] usb 5-1: USB disconnect, device number 17 [ 371.193459][ T2877] usb 1-1: string descriptor 0 read error: -71 [ 371.219970][ T2877] usb 1-1: USB disconnect, device number 28 [ 371.363857][ T7968] device batadv_slave_0 entered promiscuous mode [ 371.415150][ T7967] device batadv_slave_0 left promiscuous mode [ 371.848580][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 373.557338][ T7987] EXT4-fs (loop7): Mount option "nojournal_checksum" incompatible with ext3 [ 373.769725][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1969'. [ 374.078112][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1972'. [ 374.128484][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1968'. [ 374.180208][ T8002] blk_update_request: I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.191469][ T8002] FAT-fs (loop19): unable to read boot sector [ 374.353418][ T2882] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 374.589970][ T8006] F2FS-fs (loop4): invalid crc value [ 374.598004][ T8006] F2FS-fs (loop4): Found nat_bits in checkpoint [ 374.633835][ T8006] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 374.655762][ T8006] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 374.671758][ T7817] attempt to access beyond end of device [ 374.671758][ T7817] loop4: rw=2049, want=45104, limit=40427 [ 374.723604][ T2882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.733862][ T2882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 374.763397][ T2882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 374.773241][ T2882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.786162][ T2882] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 374.795422][ T2882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.804755][ T2882] usb 1-1: config 0 descriptor?? [ 374.834302][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 374.845570][ T2882] usb 1-1: MIDIStreaming interface descriptor not found [ 374.898558][ T8018] EXT4-fs (loop4): Ignoring removed orlov option [ 374.918729][ T8018] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 375.048894][ T51] usb 1-1: USB disconnect, device number 29 [ 375.101235][ T7879] tipc: Subscription rejected, illegal request [ 375.275433][ T8030] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 375.284870][ T8030] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 375.293125][ T8030] F2FS-fs (loop4): Unrecognized mount option "0177777777777777777777718446744073709551615:K韟r~b(_d"22+#(=9mH@k{^ĵ01777777777777777777777" or missing value [ 375.454579][ T8034] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 375.461901][ T8034] EXT4-fs (loop4): Ignoring removed bh option [ 375.468942][ T8034] EXT4-fs (loop4): Test dummy encryption mode enabled [ 375.476317][ T8034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 375.489167][ T8034] EXT4-fs (loop4): 1 truncate cleaned up [ 375.494948][ T8034] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 375.594971][ T24] kauditd_printk_skb: 466 callbacks suppressed [ 375.594983][ T24] audit: type=1400 audit(1756715905.205:31408): avc: denied { setopt } for pid=8038 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.636881][ T24] audit: type=1400 audit(1756715905.205:31409): avc: denied { setopt } for pid=8038 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.659279][ T24] audit: type=1400 audit(1756715905.205:31410): avc: denied { unmount } for pid=7817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 375.687221][ T24] audit: type=1400 audit(1756715905.225:31411): avc: denied { setopt } for pid=8038 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.712198][ T24] audit: type=1400 audit(1756715905.235:31412): avc: denied { setopt } for pid=8038 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.753214][ T24] audit: type=1400 audit(1756715905.245:31414): avc: denied { unmount } for pid=2755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 375.776465][ T24] audit: type=1400 audit(1756715905.235:31413): avc: denied { setopt } for pid=8038 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.798571][ T24] audit: type=1400 audit(1756715905.245:31415): avc: denied { setopt } for pid=8038 comm="syz.0.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.819027][ T24] audit: type=1400 audit(1756715905.265:31416): avc: denied { read write } for pid=7817 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.849586][ T24] audit: type=1400 audit(1756715905.265:31417): avc: denied { open } for pid=7817 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.972223][ T8050] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1985'. [ 376.075198][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1986'. [ 376.084422][ T8067] IPv6: Can't replace route, no match found [ 377.133819][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'. [ 377.543894][ T8089] F2FS-fs (loop6): Unrecognized mount option "baciground_gc=sync" or missing value [ 378.133400][ T2880] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 378.523717][ T2880] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 378.543177][ T2880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.562218][ T2880] usb 1-1: config 0 descriptor?? [ 378.579221][ T8130] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2007'. [ 378.900110][ T8146] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 378.919446][ T8146] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 378.929754][ T8146] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 378.942430][ T8146] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 378.952133][ T8146] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 378.960848][ T8146] EXT4-fs (loop9): orphan cleanup on readonly fs [ 378.968225][ T8146] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2013: bg 0: block 34: padding at end of block bitmap is not set [ 378.984586][ T8146] EXT4-fs error (device loop9): ext4_acquire_dquot:6226: comm syz.9.2013: Failed to acquire dquot type 1 [ 378.997750][ T8146] EXT4-fs (loop9): 1 truncate cleaned up [ 379.004188][ T8146] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue [ 379.166207][ T8167] exfat: Deprecated parameter 'utf8' [ 379.172212][ T8167] exfat: Deprecated parameter 'namecase' [ 379.182022][ T8167] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 379.350520][ T8164] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 379.363681][ T8164] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 379.374770][ T8164] F2FS-fs (loop4): fault_injection options not supported [ 379.381908][ T8164] F2FS-fs (loop4): fault_type options not supported [ 379.402795][ T8164] F2FS-fs (loop4): invalid crc value [ 379.509593][ T8164] F2FS-fs (loop4): Found nat_bits in checkpoint [ 379.685220][ T2881] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 379.694457][ T8164] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 379.701503][ T8164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 379.739032][ T7817] attempt to access beyond end of device [ 379.739032][ T7817] loop4: rw=2049, want=40992, limit=40427 [ 379.929290][ T2881] usb 10-1: Using ep0 maxpacket: 8 [ 380.053592][ T2881] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 380.062172][ T2881] usb 10-1: config 179 has no interface number 0 [ 380.068661][ T2881] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 380.079890][ T2881] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 380.091377][ T2881] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.104000][ T2881] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 380.115620][ T2881] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 380.129032][ T2881] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 380.138268][ T2881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.173693][ T8165] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 380.295294][ T8189] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.2024: corrupted in-inode xattr [ 380.308367][ T8189] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.2024: couldn't read orphan inode 15 (err -117) [ 380.321690][ T8189] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue [ 380.530593][ T8194] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 380.539025][ T8194] System zones: 0-5 [ 380.544062][ T8194] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,data_err=ignore,journal_ioprio=0x0000000000000000,barrier,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000004,,errors=continue [ 380.604198][ T24] kauditd_printk_skb: 671 callbacks suppressed [ 380.604213][ T24] audit: type=1400 audit(1756715910.215:32087): avc: denied { ioctl } for pid=8108 comm="syz.0.2001" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.637418][ T24] audit: type=1400 audit(1756715910.215:32088): avc: denied { ioctl } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.664506][ T24] audit: type=1400 audit(1756715910.245:32089): avc: denied { ioctl } for pid=8162 comm="syz.9.2018" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.690328][ T24] audit: type=1400 audit(1756715910.245:32090): avc: denied { map_create } for pid=8202 comm="syz.6.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.710548][ T24] audit: type=1400 audit(1756715910.245:32091): avc: denied { map_read map_write } for pid=8202 comm="syz.6.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.738578][ T24] audit: type=1400 audit(1756715910.245:32092): avc: denied { create } for pid=8202 comm="syz.6.2027" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 380.760039][ T24] audit: type=1400 audit(1756715910.245:32093): avc: denied { prog_load } for pid=8202 comm="syz.6.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.779986][ T24] audit: type=1400 audit(1756715910.275:32094): avc: denied { unlink } for pid=4279 comm="syz-executor" name="file0" dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 380.805366][ T24] audit: type=1400 audit(1756715910.275:32095): avc: denied { read write } for pid=4279 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.830383][ T24] audit: type=1400 audit(1756715910.275:32096): avc: denied { open } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.919048][ T8239] overlayfs: failed to resolve './file1': -2 [ 380.985805][ T8236] EXT4-fs (loop4): Ignoring removed orlov option [ 381.184476][ T2880] usb 1-1: Cannot set autoneg [ 381.189347][ T2880] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 381.198442][ T2880] usb 1-1: USB disconnect, device number 30 [ 381.212659][ T8236] EXT4-fs error (device loop4): ext4_find_extent:928: inode #4: comm syz.4.2030: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 381.237360][ T8236] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 381.252859][ T8236] EXT4-fs (loop4): mount failed [ 381.417782][ T8244] EXT4-fs (loop6): Ignoring removed orlov option [ 381.457574][ T8244] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 381.516411][ T8236] erofs: Unknown parameter 'זk;땍ݥRc{hf8jӬ/l4v7 k<' [ 381.819352][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2030'. [ 382.109458][ T8280] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2041'. [ 382.166355][ T8284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 382.212732][ T8220] usb 10-1: USB disconnect, device number 37 [ 382.213459][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 382.227236][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 382.250751][ T8284] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm BM6: invalid indirect mapped block 4294967295 (level 0) [ 382.271542][ T8284] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm BM6: invalid indirect mapped block 4294967295 (level 1) [ 382.293927][ T8294] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.314283][ T8284] EXT4-fs (loop4): 1 orphan inode deleted [ 382.321080][ T8284] EXT4-fs (loop4): 1 truncate cleaned up [ 382.326872][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 382.365401][ T8294] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,i_version,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue [ 382.623491][ T8316] EXT4-fs (loop4): Ignoring removed orlov option [ 382.629915][ T8316] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 382.672618][ T8316] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,bsddf,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 382.921597][ T8338] EXT4-fs (loop6): failed to initialize system zone (-117) [ 382.929472][ T8338] EXT4-fs (loop6): mount failed [ 383.145078][ T8363] usb usb1: usbfs: process 8363 (syz.4.2075) did not claim interface 4 before use [ 383.263930][ T8373] SELinux: failed to load policy [ 383.314394][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2082'. [ 383.428034][ T8388] SELinux: policydb version 133 does not match my version range 15-33 [ 383.436880][ T8388] SELinux: failed to load policy [ 383.655577][ T8406] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 383.909979][ T8421] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro, [ 383.964281][ T8421] EXT4-fs error (device loop7): ext4_find_extent:928: inode #2: comm syz.7.2103: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 384.005780][ T8421] EXT4-fs (loop7): Remounting filesystem read-only [ 384.083280][ T8437] attempt to access beyond end of device [ 384.083280][ T8437] loop4: rw=2049, want=1041, limit=128 [ 384.125719][ T8437] attempt to access beyond end of device [ 384.125719][ T8437] loop4: rw=524288, want=369, limit=128 [ 384.138182][ T8437] attempt to access beyond end of device [ 384.138182][ T8437] loop4: rw=524288, want=625, limit=128 [ 384.149837][ T8437] attempt to access beyond end of device [ 384.149837][ T8437] loop4: rw=0, want=153, limit=128 [ 384.161600][ T8437] attempt to access beyond end of device [ 384.161600][ T8437] loop4: rw=0, want=153, limit=128 [ 384.174185][ T8437] attempt to access beyond end of device [ 384.174185][ T8437] loop4: rw=0, want=153, limit=128 [ 384.190092][ T8437] attempt to access beyond end of device [ 384.190092][ T8437] loop4: rw=0, want=153, limit=128 [ 384.211181][ T8437] attempt to access beyond end of device [ 384.211181][ T8437] loop4: rw=0, want=153, limit=128 [ 384.241737][ T8437] attempt to access beyond end of device [ 384.241737][ T8437] loop4: rw=0, want=153, limit=128 [ 384.352013][ T8471] syz.0.2123[8471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.352079][ T8471] syz.0.2123[8471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.393728][ T8471] syz.0.2123[8471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.420786][ T8471] syz.0.2123[8471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.678265][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 384.758781][ T8437] handle_bad_sector: 6424 callbacks suppressed [ 384.758797][ T8437] attempt to access beyond end of device [ 384.758797][ T8437] loop4: rw=0, want=153, limit=128 [ 384.786404][ T8496] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 384.786634][ T8504] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 384.818576][ T8496] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.947282][ T8522] netlink: 'syz.6.2146': attribute type 2 has an invalid length. [ 385.631620][ T24] kauditd_printk_skb: 1281 callbacks suppressed [ 385.631636][ T24] audit: type=1400 audit(1756715915.235:33377): avc: denied { ioctl } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.702565][ T24] audit: type=1400 audit(1756715915.245:33378): avc: denied { ioctl } for pid=7817 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.702585][ T24] audit: type=1400 audit(1756715915.265:33379): avc: denied { mount } for pid=8545 comm="syz.9.2157" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 385.702605][ T24] audit: type=1400 audit(1756715915.265:33380): avc: denied { read write } for pid=8545 comm="syz.9.2157" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.702624][ T24] audit: type=1400 audit(1756715915.265:33381): avc: denied { open } for pid=8545 comm="syz.9.2157" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.702643][ T24] audit: type=1400 audit(1756715915.265:33382): avc: denied { ioctl } for pid=8545 comm="syz.9.2157" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.702660][ T24] audit: type=1400 audit(1756715915.275:33383): avc: denied { map_create } for pid=8545 comm="syz.9.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.702676][ T24] audit: type=1400 audit(1756715915.275:33384): avc: denied { prog_load } for pid=8545 comm="syz.9.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.702693][ T24] audit: type=1400 audit(1756715915.275:33385): avc: denied { bpf } for pid=8545 comm="syz.9.2157" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.702711][ T24] audit: type=1400 audit(1756715915.275:33386): avc: denied { perfmon } for pid=8545 comm="syz.9.2157" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.958996][ T8574] sch_fq: defrate 4294967295 ignored. [ 386.030119][ T8581] syz.0.2171[8581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.030184][ T8581] syz.0.2171[8581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.059554][ T8576] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 386.414821][ T8603] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 386.587188][ T8603] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3342: comm syz.4.2178: Allocating blocks 449-513 which overlap fs metadata [ 386.610162][ T8602] EXT4-fs (loop4): pa ffff88811a839498: logic 48, phys. 177, len 21 [ 386.618267][ T8602] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 4 [ 387.009931][ T8623] raw_sendmsg: syz.7.2187 forgot to set AF_INET. Fix it! [ 387.164015][ T8621] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 387.211612][ T8621] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue [ 387.405864][ T8638] attempt to access beyond end of device [ 387.405864][ T8638] loop9: rw=2049, want=250, limit=128 [ 387.427709][ T8638] attempt to access beyond end of device [ 387.427709][ T8638] loop9: rw=2049, want=146, limit=128 [ 387.435159][ T8644] netlink: 75 bytes leftover after parsing attributes in process `syz.4.2194'. [ 387.438997][ T8638] Buffer I/O error on dev loop9, logical block 72, lost async page write [ 387.700818][ T8659] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2201' sets config #0 [ 387.713065][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2200'. [ 387.734102][ T8660] netem: change failed [ 387.827193][ T8667] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2204'. [ 387.852951][ T8670] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 388.077292][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.088234][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 388.101703][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.109251][ T8689] syz.9.2213[8689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.112829][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 388.118478][ T8689] syz.9.2213[8689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.132179][ T8683] loop9: unable to read partition table [ 388.156942][ T8683] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 388.156942][ T8683] ) failed (rc=-5) [ 388.186944][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.198107][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 388.206823][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.217740][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 388.226573][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.237501][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 388.254316][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.265266][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 388.274952][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.285866][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 388.312551][ T8686] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue [ 388.375929][ T8686] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.531925][ T8715] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 388.716304][ T8738] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2237'. [ 389.056839][ T8758] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.125186][ T8758] EXT4-fs warning (device loop7): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 389.161952][ T8758] EXT4-fs (loop7): mount failed [ 389.435934][ T8775] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 389.455952][ T8775] EXT4-fs (loop7): 1 truncate cleaned up [ 389.461687][ T8775] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 389.494275][ T8775] EXT4-fs error (device loop7): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.7.2252: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 389.684549][ T8780] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 389.853843][ T8803] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 389.877194][ T8803] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 390.207353][ T8837] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 390.240932][ T8837] FAT-fs (loop4): Filesystem has been set read-only [ 390.540573][ T8865] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 390.559945][ T8865] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.575070][ T8865] EXT4-fs (loop6): shut down requested (2) [ 390.629867][ T8874] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 390.639439][ T24] kauditd_printk_skb: 1428 callbacks suppressed [ 390.639452][ T24] audit: type=1400 audit(1756715920.255:34815): avc: denied { read write } for pid=4279 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.670910][ T24] audit: type=1400 audit(1756715920.255:34816): avc: denied { read write open } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.711937][ T24] audit: type=1400 audit(1756715920.255:34817): avc: denied { ioctl } for pid=4279 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.738260][ T24] audit: type=1400 audit(1756715920.305:34818): avc: denied { mount } for pid=8873 comm="syz.4.2293" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 390.776220][ T24] audit: type=1400 audit(1756715920.305:34819): avc: denied { read write } for pid=8873 comm="syz.4.2293" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.805562][ T24] audit: type=1400 audit(1756715920.305:34820): avc: denied { open } for pid=8873 comm="syz.4.2293" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.846473][ T24] audit: type=1400 audit(1756715920.315:34821): avc: denied { ioctl } for pid=8873 comm="syz.4.2293" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.872391][ T24] audit: type=1400 audit(1756715920.325:34822): avc: denied { read write } for pid=2755 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.898137][ T24] audit: type=1400 audit(1756715920.325:34823): avc: denied { open } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.954028][ T24] audit: type=1400 audit(1756715920.325:34824): avc: denied { ioctl } for pid=2755 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.118066][ T8898] EXT4-fs (loop9): Ignoring removed orlov option [ 391.126638][ T8895] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.153622][ T8898] EXT4-fs (loop9): mounted filesystem without journal. Opts: sysvgroups,orlov,usrjquota=,acl,grpjquota=,block_validity,nogrpid,init_itable,bsdgroups,inlinecrypt,,errors=continue [ 391.185070][ T8898] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.180591][ T8997] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 392.231186][ T9000] 9pnet: Insufficient options for proto=fd [ 392.259916][ T9005] SELinux: failed to load policy [ 392.354307][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2353'. [ 392.371377][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2353'. [ 392.382455][ T9012] ================================================================== [ 392.390576][ T9012] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 392.398741][ T9012] Read of size 8 at addr ffff88812d1ca5c0 by task syz.7.2353/9012 [ 392.406750][ T9012] [ 392.409120][ T9012] CPU: 0 PID: 9012 Comm: syz.7.2353 Not tainted 5.10.240-syzkaller #0 [ 392.417277][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 392.427347][ T9012] Call Trace: [ 392.430650][ T9012] __dump_stack+0x21/0x24 [ 392.434974][ T9012] dump_stack_lvl+0x169/0x1d8 [ 392.439643][ T9012] ? show_regs_print_info+0x18/0x18 [ 392.444852][ T9012] ? thaw_kernel_threads+0x220/0x220 [ 392.450135][ T9012] print_address_description+0x7f/0x2c0 [ 392.455699][ T9012] ? tc_setup_flow_action+0x842/0x3280 [ 392.461151][ T9012] kasan_report+0xe2/0x130 [ 392.465567][ T9012] ? flow_action_cookie_create+0x28/0x90 [ 392.471191][ T9012] ? tc_setup_flow_action+0x842/0x3280 [ 392.476665][ T9012] __asan_report_load8_noabort+0x14/0x20 [ 392.482317][ T9012] tc_setup_flow_action+0x842/0x3280 [ 392.487618][ T9012] ? __kmalloc+0x1a7/0x330 [ 392.492037][ T9012] ? flow_rule_alloc+0x32/0x2c0 [ 392.496885][ T9012] mall_replace_hw_filter+0x293/0x810 [ 392.502266][ T9012] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 392.508330][ T9012] ? mall_set_parms+0x410/0x410 [ 392.513186][ T9012] ? tcf_exts_destroy+0xb0/0xb0 [ 392.518032][ T9012] ? pcpu_alloc+0xf8a/0x16b0 [ 392.522613][ T9012] ? mall_set_parms+0x19d/0x410 [ 392.527459][ T9012] mall_change+0x528/0x750 [ 392.531873][ T9012] ? __kasan_check_write+0x14/0x20 [ 392.536984][ T9012] ? mall_get+0xa0/0xa0 [ 392.541158][ T9012] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 392.547057][ T9012] ? nla_strcmp+0xf4/0x140 [ 392.551499][ T9012] tc_new_tfilter+0x13f6/0x1a10 [ 392.556350][ T9012] ? mall_get+0xa0/0xa0 [ 392.560505][ T9012] ? tcf_gate_entry_destructor+0x20/0x20 [ 392.566131][ T9012] ? preempt_schedule_irq+0xbb/0x110 [ 392.571445][ T9012] ? security_capable+0x87/0xb0 [ 392.576292][ T9012] ? ns_capable+0x8c/0xf0 [ 392.580628][ T9012] ? netlink_net_capable+0x125/0x160 [ 392.585906][ T9012] ? tcf_gate_entry_destructor+0x20/0x20 [ 392.591529][ T9012] rtnetlink_rcv_msg+0x800/0xb90 [ 392.596472][ T9012] ? rtnetlink_bind+0x80/0x80 [ 392.601150][ T9012] ? arch_stack_walk+0xee/0x140 [ 392.605998][ T9012] ? stack_trace_save+0x98/0xe0 [ 392.610843][ T9012] ? stack_trace_snprint+0xf0/0xf0 [ 392.615982][ T9012] ? memcpy+0x56/0x70 [ 392.619995][ T9012] ? avc_has_perm+0x234/0x360 [ 392.624769][ T9012] ? __kasan_slab_alloc+0xbd/0xf0 [ 392.629791][ T9012] ? slab_post_alloc_hook+0x5d/0x2f0 [ 392.635071][ T9012] ? ___sys_sendmsg+0x1f0/0x260 [ 392.639934][ T9012] ? avc_has_perm_noaudit+0x240/0x240 [ 392.645303][ T9012] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 392.650930][ T9012] netlink_rcv_skb+0x1e0/0x430 [ 392.655687][ T9012] ? rtnetlink_bind+0x80/0x80 [ 392.660357][ T9012] ? netlink_ack+0xb80/0xb80 [ 392.664942][ T9012] ? __netlink_lookup+0x387/0x3b0 [ 392.669962][ T9012] rtnetlink_rcv+0x1c/0x20 [ 392.674459][ T9012] netlink_unicast+0x876/0xa40 [ 392.679226][ T9012] netlink_sendmsg+0x88d/0xb30 [ 392.683984][ T9012] ? netlink_getsockopt+0x530/0x530 [ 392.689187][ T9012] ? security_socket_sendmsg+0x82/0xa0 [ 392.694766][ T9012] ? netlink_getsockopt+0x530/0x530 [ 392.699963][ T9012] ____sys_sendmsg+0x5a2/0x8c0 [ 392.704722][ T9012] ? __sys_sendmsg_sock+0x40/0x40 [ 392.709740][ T9012] ? import_iovec+0x7c/0xb0 [ 392.714254][ T9012] ___sys_sendmsg+0x1f0/0x260 [ 392.719034][ T9012] ? __sys_sendmsg+0x250/0x250 [ 392.723798][ T9012] ? __fdget+0x1a1/0x230 [ 392.728035][ T9012] __x64_sys_sendmsg+0x1e2/0x2a0 [ 392.732968][ T9012] ? ___sys_sendmsg+0x260/0x260 [ 392.737816][ T9012] ? switch_fpu_return+0x197/0x340 [ 392.742941][ T9012] do_syscall_64+0x31/0x40 [ 392.747383][ T9012] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 392.753280][ T9012] RIP: 0033:0x7f8609910be9 [ 392.757693][ T9012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.777296][ T9012] RSP: 002b:00007f8608379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.785714][ T9012] RAX: ffffffffffffffda RBX: 00007f8609b47fa0 RCX: 00007f8609910be9 [ 392.793681][ T9012] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 392.801650][ T9012] RBP: 00007f8609993e19 R08: 0000000000000000 R09: 0000000000000000 [ 392.809623][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.817690][ T9012] R13: 00007f8609b48038 R14: 00007f8609b47fa0 R15: 00007ffdd2be9b58 [ 392.825656][ T9012] [ 392.828013][ T9012] Allocated by task 9012: [ 392.832339][ T9012] __kasan_kmalloc+0xda/0x110 [ 392.837037][ T9012] __kmalloc+0x1a7/0x330 [ 392.841280][ T9012] tcf_idr_create+0x5f/0x790 [ 392.845872][ T9012] tcf_idr_create_from_flags+0x61/0x70 [ 392.851325][ T9012] tcf_gact_init+0x2b4/0x520 [ 392.855911][ T9012] tcf_action_init_1+0x3e1/0x670 [ 392.860841][ T9012] tcf_action_init+0x1e6/0x700 [ 392.865603][ T9012] tcf_exts_validate+0x215/0x510 [ 392.870541][ T9012] mall_set_parms+0x4b/0x410 [ 392.875125][ T9012] mall_change+0x45c/0x750 [ 392.879623][ T9012] tc_new_tfilter+0x13f6/0x1a10 [ 392.884498][ T9012] rtnetlink_rcv_msg+0x800/0xb90 [ 392.889441][ T9012] netlink_rcv_skb+0x1e0/0x430 [ 392.894205][ T9012] rtnetlink_rcv+0x1c/0x20 [ 392.898631][ T9012] netlink_unicast+0x876/0xa40 [ 392.903393][ T9012] netlink_sendmsg+0x88d/0xb30 [ 392.908158][ T9012] ____sys_sendmsg+0x5a2/0x8c0 [ 392.912917][ T9012] ___sys_sendmsg+0x1f0/0x260 [ 392.917591][ T9012] __x64_sys_sendmsg+0x1e2/0x2a0 [ 392.923056][ T9012] do_syscall_64+0x31/0x40 [ 392.927470][ T9012] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 392.933351][ T9012] [ 392.935675][ T9012] Last potentially related work creation: [ 392.941386][ T9012] kasan_save_stack+0x3a/0x60 [ 392.946055][ T9012] __kasan_record_aux_stack+0xd2/0x100 [ 392.951506][ T9012] kasan_record_aux_stack_noalloc+0xb/0x10 [ 392.957309][ T9012] kvfree_call_rcu+0x10c/0x620 [ 392.962072][ T9012] fib_rules_unregister+0x35c/0x380 [ 392.967267][ T9012] fib4_rules_exit+0x3b/0x40 [ 392.971850][ T9012] ip_fib_net_exit+0x307/0x350 [ 392.976605][ T9012] fib_net_exit+0x6c/0x80 [ 392.980930][ T9012] cleanup_net+0x586/0xb70 [ 392.985345][ T9012] process_one_work+0x6e1/0xba0 [ 392.990182][ T9012] worker_thread+0xa6a/0x13b0 [ 392.994856][ T9012] kthread+0x346/0x3d0 [ 392.998917][ T9012] ret_from_fork+0x1f/0x30 [ 393.003322][ T9012] [ 393.005652][ T9012] The buggy address belongs to the object at ffff88812d1ca500 [ 393.005652][ T9012] which belongs to the cache kmalloc-192 of size 192 [ 393.019696][ T9012] The buggy address is located 0 bytes to the right of [ 393.019696][ T9012] 192-byte region [ffff88812d1ca500, ffff88812d1ca5c0) [ 393.033300][ T9012] The buggy address belongs to the page: [ 393.038944][ T9012] page:ffffea0004b47280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d1ca [ 393.049173][ T9012] flags: 0x4000000000000200(slab) [ 393.054205][ T9012] raw: 4000000000000200 ffffea000496e240 0000000300000003 ffff888100043380 [ 393.062782][ T9012] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 393.071353][ T9012] page dumped because: kasan: bad access detected [ 393.077754][ T9012] page_owner tracks the page as allocated [ 393.083477][ T9012] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 15, ts 72239406352, free_ts 71792062835 [ 393.100739][ T9012] prep_new_page+0x179/0x180 [ 393.105329][ T9012] get_page_from_freelist+0x2235/0x23d0 [ 393.110871][ T9012] __alloc_pages_nodemask+0x268/0x5f0 [ 393.116240][ T9012] new_slab+0x84/0x3f0 [ 393.120341][ T9012] ___slab_alloc+0x2a6/0x450 [ 393.124961][ T9012] __slab_alloc+0x63/0xa0 [ 393.129286][ T9012] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 393.134654][ T9012] __ipv6_dev_mc_inc+0x39e/0x9b0 [ 393.139590][ T9012] ipv6_dev_mc_inc+0x1f/0x30 [ 393.144175][ T9012] addrconf_dad_work+0x3a2/0x1410 [ 393.149199][ T9012] process_one_work+0x6e1/0xba0 [ 393.154040][ T9012] worker_thread+0xa6a/0x13b0 [ 393.158711][ T9012] kthread+0x346/0x3d0 [ 393.162772][ T9012] ret_from_fork+0x1f/0x30 [ 393.167180][ T9012] page last free stack trace: [ 393.171855][ T9012] free_unref_page_prepare+0x2b7/0x2d0 [ 393.177307][ T9012] __free_pages+0x14b/0x380 [ 393.181802][ T9012] __free_slab+0xcf/0x190 [ 393.186128][ T9012] discard_slab+0x29/0x40 [ 393.190451][ T9012] __slab_free+0x313/0x3a0 [ 393.194862][ T9012] ___cache_free+0x111/0x130 [ 393.199442][ T9012] qlink_free+0x50/0x90 [ 393.203595][ T9012] qlist_free_all+0x5f/0xb0 [ 393.208090][ T9012] kasan_quarantine_reduce+0x14a/0x160 [ 393.213539][ T9012] __kasan_slab_alloc+0x2f/0xf0 [ 393.218384][ T9012] slab_post_alloc_hook+0x5d/0x2f0 [ 393.223488][ T9012] kmem_cache_alloc+0x165/0x2e0 [ 393.228335][ T9012] getname_flags+0xb9/0x500 [ 393.232956][ T9012] getname+0x19/0x20 [ 393.236861][ T9012] do_sys_openat2+0xd9/0x6d0 [ 393.241497][ T9012] __x64_sys_openat+0x136/0x160 [ 393.246348][ T9012] [ 393.248681][ T9012] Memory state around the buggy address: [ 393.254464][ T9012] ffff88812d1ca480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 393.262529][ T9012] ffff88812d1ca500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.270590][ T9012] >ffff88812d1ca580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 393.278657][ T9012] ^ [ 393.284905][ T9012] ffff88812d1ca600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.292967][ T9012] ffff88812d1ca680: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 393.301042][ T9012] ================================================================== [ 393.309190][ T9012] Disabling lock debugging due to kernel taint