last executing test programs: 3m36.402206809s ago: executing program 0 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="00000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400010300000000000040001e00"], 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m35.533009027s ago: executing program 0 (id=752): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESHEX=0x0], 0x3, 0x37a, &(0x7f0000000140)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000600)=""/141, 0x27, 0x8d, 0x0, 0x1, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x40, 0x9, 0x1ff, 0x40000, r1, 0x1, '\x00', 0x0, r3, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) getitimer(0xe, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) (async) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) 3m35.389903396s ago: executing program 0 (id=753): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) read$FUSE(r1, &(0x7f0000003080)={0x2020}, 0x2020) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ppoll(&(0x7f0000000040)=[{r4, 0xe410}, {r4, 0x19}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0xaf14]}, 0x8) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000005c0)={0xd2, 0x0, 0x0, 0x100}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010102}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0x63, "29672396d36b0ed218e89f20da5cd665c00bac2b33b4ce40086a10f348f53fb9637a2a41e8fb07e2e816c471f8bae11f18e4f55c7e878f8f2dca1d27f2c09aa6c8e7f97436c5d30d3ba13509ad0dbea01a97eadef93bca3dadc5c26e72e44a2bb92095"}, &(0x7f00000003c0)=0x87) r7 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000140)=@id, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mount(&(0x7f0000000200)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='f2fs\x00', 0x4000, &(0x7f00000002c0)='\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x4080}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) symlink(0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3m35.323980046s ago: executing program 0 (id=754): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000dd0000008000000000000000000000000000bbbc4f00"/195]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(0x0, &(0x7f0000000f00)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @multicast2, 0x4e22, 0x3, 'lblcr\x00', 0x0, 0x0, 0x40000012}, {@local, 0x4e23, 0x2, 0x5, 0x80012d5c, 0x12d5c}}, 0x44) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df19ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d90a25b258c3a4bd6c90ce0c6d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e7") connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x1, 0x0) shutdown(r3, 0x2) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, r0, 0x2000, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) 3m35.243745626s ago: executing program 0 (id=756): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 3m35.043908426s ago: executing program 0 (id=757): getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2e}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2e}, 0x18) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x10}]}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0x2}, 0x14) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000340)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@discard}]}, 0x1, 0x452, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000340)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@discard}]}, 0x1, 0x452, &(0x7f0000000a40)="$eJzs3M9rHFUcAPDvTJIW02qq1l+11WhrG60mJtWqIIXcPAQ96MGjS5LGYn5oE8GWIAl48CrYP0Dxav8E0YI/LnqSXlX0oEKQJoeCPazM/k66m3Y16Uj284FZ3pt92/dmvv3Ozr48JoCO1Z+9JBF7I+LHiOgrV+veKDfK2q1dWRzPtiSKxVf/SkrtVq8sjlebVj+3J3tJIwbSiPSDJB5s0u/8ufNvFaanJ89W6kMLM28PzZ87/9SZmcLU5NTk7PCJ4ZMnn3v2+ZHhzYZ/YG8bx/rSD2u/fdr98uxnF1Znr54a6c3GW/1843Fslf7oX38uGxzd6s5ydk9DOenOcSC0pSsisnD1lPK/L7qiHry++PbnXAcHbKtiZnfLt5eKwA6WRN4jAPJR/aLPfv9Wtyb3AX8Xt+sGhFytjJZ/AK5W5nbWavHvjrRceOfo11+t+32/lfoj4vWxVw5lW2zTPAwAAABAJ/tyNCKebDb/l8a9De2y8n0RcX9EPBARByJK63oORsShiHgoIh6uridqw8b2G+Z/Wv9lki2xMhrxYsParrWG+Ffs66rUbs8q0ZOcPjM9+XRE3BERA9GzO6tvtkpr5s3C963eq8//Xeot71kcr84FVsbxZ/eG/wUThYXCvz5g1llZjjjQ3Sz+SW0lUBIRj0TEozfzD35TWlE3tf/itdquFz68+3Kr5o3zv9mW9b8+/myn4icRx5rm/3KtTbL5+syh0vVgqHpVuN53F05+3qp/8c9Xlv+9TeNfW7m6L2lcrzvffh+X9v/yU6v3rhWLxc3j3/z6vyt5rTTAXZV97xUWFs4OR+xKxq7fP9L+mHeq6vmonq8s/gOH6/Gvt0zjrkopO6GHI+JIRDxWWbt8rPTdH/F4RDwREcc36XNp6teW93HyP19Z/Cfayv/2C38sf3SkVf83jn+W/8+UBjNQ2eP+78ZuNkB5jxMAAAAAAACArZGWnoGXpIO1cpoODpaf4bc/etPpufmF46fn3p2dKD8rb1/0pNWVXn0N60GHS+V6fWRD/URE3BkRH3fdVqoPjs9NT+R98NDh9rTI/8zvXXmPDth2ntcKnUv+Q+eS/9C55D90LvkPnUv+Q+eS/9C5Kvm/lPc4gFtv4/f/+5fHTl394uDFnIYD3ELu/6Ej/Zfn+ikoKOzUQt5XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/h38CAAD///YS0uE=") r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086d0488c00000000000010902240001000000000904001001030100000921000003012207000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x1c, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000004c0)={[{@test_dummy_encryption}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@block_validity}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffffffffffff}}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs289vFFUcAPDvzHYLBbQrwR8U1CoaG3+0tCBy8KLRxIOe9IDH2hZSWaihNRHSaDVGj4bEu/Fo4l/gSS9Gz171bkiI6UXUg2umO9PuLtvC1m0X3c8nGXhv5m3e++7M230/ugH0rdHsnyTiQET8HBHD9WxzgdH6fzdWl2f+WF2eSaJWe/23ZK1curo8UxQtXre/yAxEpB8ncaRNvYuXr5yfrlbnLuX5iaUL70wsXr7yzPyF6XNz5+YuTp0+ffLE5HOnpp7tSpxZXL+PvL9w9PArb159bebM1bd+/Dop4s+uNcTRJaNbXXy8VouIv2tdrrNn7mpIJwM9bAgdKdW7aZTX+v9wlGLj5g3Hyx/1tHHAjqrVarX7Nr+8UgP+x5Joyu7tWUOAXVZ80Wfz3+LYpaHHHeH6C/UJUBb3jfyoXxmINC9TbpnfdtNoRJxZ+fOL7IidWYcAAGjybTb+eTof/zVs/JQjjcZ1obvzPZRKRNwTEQcj4lREHIqIeyPWyt4fEQ90WH/rJsnN45/0WsdBdSAb/z2f7201j/+K0V9UShF/FcPlSpSTs/PVueP5ezIW5T1ZfnKLOr576afPNrvWOP7Ljqz+YiyYt+PawJ7m18xOL03/m5gbXf8wYmSgXfzJ+k5A9lgcjoiRbdYx/+RXRze7duv4mw02Zrqwz1T7MuKJ+v1fiZb4C8nW+5MTe6M6d3yieCpa7d2y/k7j77bs/u9r+/yvx19JGvdrFzuv45NfPt10TrPd538weaPp3HvTS0uXJiMGk1frjW48n7SUm9oon8U/dqx9/z8YG+/EkYjIHuIHI+KhiHg4b/sjEfFoRBzbIv4fXnzs7eYzSQfx76ws/tmO7v9GYjBaz7RPlM5//01TpZXoIP7s/p9cS43lZ27n8+922rW9pxkAAAD+e9KIOBBJOr6eTtPx8frf8B+KfWl1YXHpqbML716crf9GoBLltFjpqq8H19dDJ/NpfZGfasmfyNeNPy8NreXHZxaqs70OHvrc/k36f+bXUq9bB+w4v9eC/qX/Q//S/6F/6f/Qv9r0/6FetAPYfe2+/z/oQTuA3dfS/237QR8x/4f+pf9D/9L/oS8tDsWtfyQvIXFTItI7ohkSO5To9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAd/wTAAD//4AV56k=") r8 = socket$inet6(0xa, 0x0, 0xfffffff9) timer_create(0x0, 0x0, &(0x7f0000000180)) (async) timer_create(0x0, 0x0, &(0x7f0000000180)) fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x5, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r9, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) 3m35.043539675s ago: executing program 32 (id=757): getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2e}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2e}, 0x18) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x10}]}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0x2}, 0x14) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000340)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@discard}]}, 0x1, 0x452, &(0x7f0000000a40)="$eJzs3M9rHFUcAPDvTJIW02qq1l+11WhrG60mJtWqIIXcPAQ96MGjS5LGYn5oE8GWIAl48CrYP0Dxav8E0YI/LnqSXlX0oEKQJoeCPazM/k66m3Y16Uj284FZ3pt92/dmvv3Ozr48JoCO1Z+9JBF7I+LHiOgrV+veKDfK2q1dWRzPtiSKxVf/SkrtVq8sjlebVj+3J3tJIwbSiPSDJB5s0u/8ufNvFaanJ89W6kMLM28PzZ87/9SZmcLU5NTk7PCJ4ZMnn3v2+ZHhzYZ/YG8bx/rSD2u/fdr98uxnF1Znr54a6c3GW/1843Fslf7oX38uGxzd6s5ydk9DOenOcSC0pSsisnD1lPK/L7qiHry++PbnXAcHbKtiZnfLt5eKwA6WRN4jAPJR/aLPfv9Wtyb3AX8Xt+sGhFytjJZ/AK5W5nbWavHvjrRceOfo11+t+32/lfoj4vWxVw5lW2zTPAwAAABAJ/tyNCKebDb/l8a9De2y8n0RcX9EPBARByJK63oORsShiHgoIh6uridqw8b2G+Z/Wv9lki2xMhrxYsParrWG+Ffs66rUbs8q0ZOcPjM9+XRE3BERA9GzO6tvtkpr5s3C963eq8//Xeot71kcr84FVsbxZ/eG/wUThYXCvz5g1llZjjjQ3Sz+SW0lUBIRj0TEozfzD35TWlE3tf/itdquFz68+3Kr5o3zv9mW9b8+/myn4icRx5rm/3KtTbL5+syh0vVgqHpVuN53F05+3qp/8c9Xlv+9TeNfW7m6L2lcrzvffh+X9v/yU6v3rhWLxc3j3/z6vyt5rTTAXZV97xUWFs4OR+xKxq7fP9L+mHeq6vmonq8s/gOH6/Gvt0zjrkopO6GHI+JIRDxWWbt8rPTdH/F4RDwREcc36XNp6teW93HyP19Z/Cfayv/2C38sf3SkVf83jn+W/8+UBjNQ2eP+78ZuNkB5jxMAAAAAAACArZGWnoGXpIO1cpoODpaf4bc/etPpufmF46fn3p2dKD8rb1/0pNWVXn0N60GHS+V6fWRD/URE3BkRH3fdVqoPjs9NT+R98NDh9rTI/8zvXXmPDth2ntcKnUv+Q+eS/9C55D90LvkPnUv+Q+eS/9C5Kvm/lPc4gFtv4/f/+5fHTl394uDFnIYD3ELu/6Ej/Zfn+ikoKOzUQt5XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/h38CAAD///YS0uE=") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000340)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@discard}]}, 0x1, 0x452, &(0x7f0000000a40)="$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") r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086d0488c00000000000010902240001000000000904001001030100000921000003012207000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x1c, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000004c0)={[{@test_dummy_encryption}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@block_validity}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffffffffffff}}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r8 = socket$inet6(0xa, 0x0, 0xfffffff9) timer_create(0x0, 0x0, &(0x7f0000000180)) (async) timer_create(0x0, 0x0, &(0x7f0000000180)) fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x5, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r9, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) 20.647698865s ago: executing program 2 (id=1939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000500), &(0x7f0000000280)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 20.474231105s ago: executing program 2 (id=1940): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r0 = getpid() setxattr$incfs_size(&(0x7f0000000500)='./file2\x00', &(0x7f0000000580), &(0x7f0000000600)=0x6, 0x8, 0x2) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095000000000000008d76a26fa0b4795031f8f2cadec121a1bcd43aa62494"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) (async) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x2a1, &(0x7f00000009c0)="$eJzs201PE18Ux/EfUP7wB6FVFAVjPNGNbiZQVy4bAomxiQap8SGaDDLVpkNLOg2mxgg7t74O4tKdifENsPEVuNAVG5csjDV9ANpaA03EQfr9bOaSO2dyZ84ZehZzt+69Wc6mAyftFtXbY4pI69qWYupVn2p6JD26vjP+T43WdXUs+fnCnfsPbiaSydl5s7nEwrW4mY1e/NCvt5c+Fofvvht9P6DN2OOtb/Evm+ObE1s/Fp5lAssElssXzbXFfL7oLvqeLWWCrGN22/fcwLNMLvAKTfNpP7+yUjI3tzQytFLwgsDcXMmyXsmKeSsWSuY+dTM5cxzHRoaE/aQ25ufdRNirwOEqFBLujKTJX2ZSG6EsCAAAhOqg/X9Fb6f9//OX9P9HGv1/N6j0/w/r728z+n8AAAAAAAAAAAAAAAAAAAAAAP4F2+VytFwuR3eO/VJ1h0+5/vf/koYkDWtv48+opKikmKSTkk5JGpN0WtIZSeOSzko6J2mi4Vrh3ina6SD/OiFphPwfK+S/u5H/7tawcXdQWn69mlpN1Y61+URaGfnyNKWovldzWVcbz91Izk5ZVUznl9fq8Wurqb7m+GlFKwXTLn66Fm/N8QPVutuNjytaKbB28fG28YO6crkh3lFUn54oL19L1Zrci381bTZzK9kSP1k977hzbFfb/DnO7+Zr8R3UR8vzjWgyEu69QwpKL7Ku73uF/QeVgjjwyUd38FXSQU6u/BIe+noG62kI/7F08WCgk7fgSA7i9TL6k1cO8Z8S/pq9pIe9EgAAAAAAAAAAAAAAAABAJ1q//oscwveJYd8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACtfgYAAP//3JVTsA==") r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) r4 = eventfd(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x48) (async) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x7005, 0x0) (async) readv(r5, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000740)=r4) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) 20.112174534s ago: executing program 2 (id=1941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) dup2(r3, r2) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20.111102914s ago: executing program 2 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000050}, 0x4044014) r5 = dup(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000001780)=ANY=[@ANYBLOB="646f74732c6769643da9f8074a85ec7dec3bc2e9d5393ca0c6b016eec9374fe9f6dc28901292d9dffcfcecc2bda3946536a0", @ANYRESHEX=0xee01, @ANYBLOB=',nodots,nodots,nodots,dots,usefree,nodots,check=relaxed,dots,dots,nodots,nodots,check=relaxed,flush,sys_immutable,dots,showexec,nodots,errors=continue,dots,quiet,\x00'], 0x1, 0x1fe, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000001700)='./file0/file0\x00', &(0x7f0000001740)='./file0\x00', 0x0, 0x83022, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f000000c1c0)={0x2020}, 0x2020) bind$unix(r5, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000540)=""/4096, &(0x7f0000000280)=0x1000) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000016c0)='./bus\x00', 0x2000002, &(0x7f0000001540)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d2023d6ffff756d7461696c3d302c6e6f6e75617461696c696f6368619615f9a9d8fc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466b83d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8e380b24aa44b2a03f9d01000080000000002c4fb4e27388a38ca91b346d2e5535414e8214d26a8c37000000000000000000005ae485d5b9d66fc49a58a2fe52b041099e689389d8ed9356f9a6e1162e47f187ee27a1e439332b6b6eefbc225a60bdbfca4269909d693cc2f8e93414c7f39178b625972f9dd08f1fd261909813758378e64f781665c326c827dc8defd305eab9178c12bd02f9bfa5cd0d883a587a5d7b7221736d"], 0x1, 0x368, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 18.30325758s ago: executing program 2 (id=1950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000500), &(0x7f0000000280)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18.17642727s ago: executing program 2 (id=1955): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES8=r3, @ANYRES8=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x3c, 0x10}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c008000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x18) ioctl$int_in(r7, 0x5452, &(0x7f0000000740)=0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000001000000040000000080000000200200", @ANYRES32=r6, @ANYBLOB="0901000000000000000000000000000000000000f10c13451c58c3ce6c76674b8fec1f7e7e7d2d094583ed331b3882f3c3da0ef90f4778afac31931a5a791cdaf7ecaa42ca3cbefbb2be7b5eca79969fc46ab1c1e5f53ff714e3d9505aafec1e0eaf898db6f1e2fc03536cce387f8f97510000000000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000001000000050000000400"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='tlb_flush\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.890216449s ago: executing program 33 (id=1955): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES8=r3, @ANYRES8=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x3c, 0x10}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c008000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x18) ioctl$int_in(r7, 0x5452, &(0x7f0000000740)=0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000001000000040000000080000000200200", @ANYRES32=r6, @ANYBLOB="0901000000000000000000000000000000000000f10c13451c58c3ce6c76674b8fec1f7e7e7d2d094583ed331b3882f3c3da0ef90f4778afac31931a5a791cdaf7ecaa42ca3cbefbb2be7b5eca79969fc46ab1c1e5f53ff714e3d9505aafec1e0eaf898db6f1e2fc03536cce387f8f97510000000000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000001000000050000000400"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='tlb_flush\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.435548493s ago: executing program 6 (id=1989): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20002) sched_setscheduler(r0, 0x3, &(0x7f0000000440)=0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000400)=0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000002100)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYBLOB="ca5250e28ce44803a43ef2c39505ae46de32d995ecc78021e683a0c6a910ea32c1dbe4222c0ade4cc107f513e97fbd8a354fcecd4369819ae90089cec67d58ecca1f64a9624ae289e2063735acf487c2662e9243d5cb817b76ecd05bff4d59bcf2d1d604f0ff21d1f004ba7fff21d1d147b7402216ca5f385d7de48c13eecfa98703611607ad1ea493b6d007ac0d7e3f2a5067bc359f8fb725e8e8bf5a6b3727c0ae3f9e9a972f4e54d66ce953d0654ad589e68b310d5df28d914aae8679786f98aed1993b9f33cfd8c36d2e06b5062be55996fb4407e46f7070a7edfc", @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") socket$pppl2tp(0x18, 0x1, 0x1) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x1000408, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001000000000000ff4a0cb973210000850000000e00000085000000274e6510003817e1d8f6cbe515f40000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x9) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)='7', 0x1, 0x814, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200000, 0xa3) 10.229882552s ago: executing program 6 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) close(r1) sendto$packet(r2, &(0x7f0000000180)="bc877235fae5bb331443db4c11ea6d3c2399044438f4e0b883890c0383542a903af8d99099a0519af3705df0a8a2935d3e21710becc056b7235d530476d26e593ccd20b2629c1f7dd63fbb3bf6bc4c59bd51730cb2862c8f68f7a6a5fd7f833055ce57306045c01f35887f91852adeac723868db1b8809b24cdbfccac484fc216fa94f1d5117cdcd46e270ab2d774e2024987884c7d90976b6dc085c3ac6e1ffa3d2cd2ed3e7fe8ab78b01d095bff2876700a156a7e587442e4e9e", 0xbb, 0x8000, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) close(r1) (async) sendto$packet(r2, &(0x7f0000000180)="bc877235fae5bb331443db4c11ea6d3c2399044438f4e0b883890c0383542a903af8d99099a0519af3705df0a8a2935d3e21710becc056b7235d530476d26e593ccd20b2629c1f7dd63fbb3bf6bc4c59bd51730cb2862c8f68f7a6a5fd7f833055ce57306045c01f35887f91852adeac723868db1b8809b24cdbfccac484fc216fa94f1d5117cdcd46e270ab2d774e2024987884c7d90976b6dc085c3ac6e1ffa3d2cd2ed3e7fe8ab78b01d095bff2876700a156a7e587442e4e9e", 0xbb, 0x8000, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) (async) 10.130686962s ago: executing program 6 (id=1993): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.098003462s ago: executing program 4 (id=1994): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000440)='net/icmp\x00') setitimer(0x1, &(0x7f0000000640)={{0x0, 0xea60}, {0x0, 0xea60}}, &(0x7f0000000680)) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x5, 0x8, 0x3, 0x9, 0x5}) 7.811893737s ago: executing program 3 (id=2004): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @private0}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, @dev, @mcast1}}) lseek(r0, 0xf28e, 0x3) 7.809361647s ago: executing program 3 (id=2005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) dup2(r3, r2) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x220}}}}}}}, 0x0) 7.808667627s ago: executing program 3 (id=2006): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_alloc\x00', r2, 0x0, 0xfffffffffffffffa}, 0x18) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000001010100000000000000000a00000004000180dce3"], 0x18}, 0x1, 0x0, 0x0, 0x8000850}, 0x20000040) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x38c3, 0xe, 0x43f3, 0x7f, "7a0350", 0x3}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000280)=ANY=[@ANYBLOB='nonumtail=0,shortname=winnt,nonumtail=0,iocharset=cp860,nocase,nonumtail=0,iocharset=maccyrillic,shortname=win95,nfs,codepage=950,uni_xlate=1,utf8=0,shortname=sin95,\x00'], 0x1, 0x360, &(0x7f0000000900)="$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") (async) fchown(0xffffffffffffffff, 0x0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)=@delchain={0x1dcc, 0x65, 0x0, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0xffff, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x80, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0x1d78, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x8, 0x69b8}}, @TCA_U32_POLICE={0xc84, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffffffc, 0x4, 0x3, 0x9, 0x4, 0x0, 0x2, 0x2, 0x9, 0x5, 0xe, 0x9909, 0x4, 0xf, 0xfffffff3, 0x9, 0x2, 0xd, 0xabf, 0x6, 0x2, 0x25ec2992, 0x5, 0x80, 0x3, 0x3, 0x3, 0xe34, 0x0, 0x8d2, 0x7, 0x8, 0x7, 0x3, 0x10001, 0xf428, 0x80000001, 0x1, 0xd3, 0x1, 0x6, 0x8, 0x4, 0x5, 0x632, 0x5, 0xe, 0x63, 0xffffffff, 0x7, 0x4, 0x7, 0x3, 0x8, 0x200, 0x0, 0x1, 0x1000, 0x40, 0x6, 0x0, 0x85, 0xffff, 0x8, 0x8, 0x1000, 0x6, 0x5, 0xa, 0x2, 0x1, 0x3ff, 0xa, 0x11, 0xa297, 0x4, 0xbd, 0xd, 0xb4e, 0x3, 0x80000000, 0xf, 0x5, 0x1, 0xd7fb, 0x3, 0x9, 0x4, 0x7, 0xd, 0x5, 0x80000000, 0x6, 0x80000001, 0x839, 0xe, 0xcd53, 0x300000, 0xf, 0x5a, 0xffff, 0x2, 0x9, 0x7, 0x8001, 0x4, 0xfffffc01, 0x4, 0x6cc, 0x3ff, 0x2, 0x1, 0x2, 0x80, 0x3, 0x2, 0x7, 0x5, 0xff, 0x69c, 0xd, 0x0, 0x7, 0x688, 0x7, 0xdb84, 0x4, 0x2, 0x7fff, 0x10, 0xfffffff8, 0x8, 0x8, 0x5, 0x4, 0x3, 0x0, 0x9, 0x0, 0x1e, 0xfffffff9, 0x7, 0x5, 0x1, 0xfffffff0, 0x7, 0x9, 0x0, 0x1, 0x0, 0x5, 0x5, 0x3, 0x8, 0x7, 0x8, 0x10001, 0x5, 0x7, 0x9, 0x80000001, 0x3, 0x7, 0x10000, 0xa0000000, 0xb9b, 0x6, 0xf, 0x2, 0x1ff, 0xff, 0x1, 0x10001, 0x55, 0x80, 0x7fffffff, 0x0, 0x9, 0x2, 0xc7d2, 0x8, 0x6, 0x4, 0x5, 0x553b, 0x55ca, 0xa, 0x0, 0x9, 0x8, 0x4, 0x0, 0x401, 0x2, 0x40000000, 0x0, 0x6, 0x6, 0x54, 0x2, 0x1000, 0x3, 0x23, 0xfffffffc, 0x52d1, 0x9, 0xc, 0x1, 0x6151d3c3, 0x101, 0x4, 0xb3c7, 0x8, 0xb4f, 0x5, 0x7fffffff, 0x80000001, 0x0, 0xfff, 0x0, 0xe, 0x10, 0x6, 0xffff2f72, 0x8, 0x7, 0x5, 0x3, 0x532, 0x3, 0x7fffffff, 0x16, 0x3, 0x1ff, 0x81, 0x1, 0x8, 0x7, 0x2, 0xb, 0x81, 0x100, 0x5, 0x7c53, 0x3, 0xd, 0x8c2, 0x734, 0x2f, 0xfffffffa, 0x8, 0x6, 0x4, 0x7, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0x6, 0x1, 0x1, 0x7, 0x5, 0x4, 0x1, 0x8, 0x5, 0x401, 0x2, 0x10, 0x2, 0xa8, 0xff, 0x6, 0x80000001, 0x8, 0x2, 0x81, 0x4, 0x1, 0x4, 0x2, 0x2, 0x82, 0x3, 0x10000, 0xa4, 0x4c59, 0x7, 0x5, 0x2, 0x7, 0x9, 0x8, 0x0, 0x80, 0x7, 0x76d, 0x82, 0x2, 0x5, 0x6, 0x6, 0x9, 0xaf2, 0x8080000, 0x9, 0x5, 0x6, 0x1, 0x3, 0x3, 0x3da54bfd, 0x6, 0x10, 0x8, 0x2, 0x10, 0x9, 0x29b9, 0x4, 0x3, 0x0, 0x5, 0xb, 0x1000, 0x1, 0x0, 0x9, 0x95, 0xfffffff8, 0x2, 0x8, 0x6, 0x9adb, 0x3, 0x7fff, 0x9, 0x7, 0x1, 0x1, 0x8, 0x9, 0x80000001, 0x0, 0xf3, 0x6, 0x54acfda9, 0x2, 0xf, 0xcd, 0x2, 0x6, 0x0, 0x8, 0x3, 0x3, 0x5, 0x5, 0x4, 0x2, 0x9, 0xfffffffa, 0xff, 0x8, 0x6, 0x1, 0x1, 0x3ff, 0x0, 0x400, 0x1, 0x6, 0x2, 0x400, 0x6, 0x80000000, 0x89d6, 0x1, 0x6, 0x8, 0x8, 0x2, 0x1ff, 0x9, 0x2, 0x0, 0x7, 0x7, 0x6, 0x8, 0x6, 0x5, 0x2, 0x7, 0x80000001, 0xbf, 0x8, 0xb, 0x2, 0x8, 0x0, 0x2, 0x3000000, 0x6, 0x9, 0x4, 0x7fffffff, 0x3, 0x2, 0x3, 0x3, 0x3495, 0x6, 0x0, 0x7, 0x8, 0x800, 0x6, 0x8, 0xfffffffa, 0x0, 0xffffffff, 0x2, 0x6, 0x4, 0x200, 0xffffffff, 0x0, 0x400, 0x0, 0xc, 0xb36, 0x8, 0x9, 0x2, 0x40, 0x6, 0x4, 0x6, 0x7, 0x9a, 0x50000, 0x4, 0x2, 0xfffffff1, 0x0, 0x3, 0x0, 0x8, 0x43e, 0x1000, 0xffffffff, 0x2, 0x7ff, 0x5, 0x8, 0x6, 0x8, 0x9, 0x6f, 0x2, 0xfffffff5, 0x4, 0x9, 0x8, 0x9, 0xfffff001, 0x1, 0x800, 0x1, 0x3, 0x7, 0x9ee2d37, 0x6d87, 0x9, 0x3e68, 0x8c5, 0x3, 0xff, 0x10000, 0xfffffc01, 0x100, 0x200, 0x6, 0x80, 0x3, 0x8, 0x3b28, 0x0, 0x9, 0x5c300000, 0x3, 0x2, 0x6, 0x2, 0x3f33, 0x5, 0xda, 0x2, 0x4b9, 0x9, 0x0, 0x3, 0x0, 0x9, 0x5, 0x6, 0x5, 0x1c0, 0x4, 0x7ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x8, 0x6, 0xffffffff, {0x1, 0x0, 0x400, 0x3, 0x1, 0x7}, {0xc, 0x2, 0x651, 0x9, 0xff, 0x7fffffff}, 0xfffffffe, 0x10001}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x7c1, 0x9, 0x7, 0x800, 0x4, 0x0, 0x80000000, 0x200, 0x2, 0x9, 0x0, 0x6, 0x5, 0x2, 0x1, 0x9, 0xff, 0x1000, 0x7, 0x1000, 0x7, 0x8, 0xe137, 0x80000001, 0x1, 0x800, 0x81, 0x7, 0x60ada5f2, 0x3, 0x401, 0x30000, 0x9, 0x2, 0x3, 0x6, 0x1, 0x7, 0x6, 0x2, 0xffff0001, 0xfffffffd, 0x101, 0x3, 0x2, 0x81, 0x1, 0x72, 0x6, 0x8, 0xcff, 0xffff, 0x5, 0x7, 0x2, 0x10001, 0x800, 0x4, 0x3, 0x87, 0x40f, 0x6, 0x5, 0x9, 0x8, 0x5d4, 0x0, 0x200, 0x0, 0x10, 0x9, 0xf0, 0x0, 0x3, 0xfffffff9, 0x9, 0xa799, 0x368f, 0x800, 0xa, 0xfffffff7, 0x5, 0x7, 0x7, 0x4, 0x1ff, 0x5, 0x0, 0x7ff, 0x3, 0x7, 0x7, 0x2, 0x5, 0x7fffffff, 0x6, 0xb042, 0xfa, 0x4, 0x3ff, 0xffffffff, 0x7ff, 0x0, 0x9, 0x8, 0x0, 0x2, 0x7, 0x7, 0x8000, 0x7, 0x1000, 0x6, 0xffffffff, 0x10, 0x1, 0x7, 0x4, 0x7, 0x9, 0x3, 0x8, 0xca, 0xa0a, 0x4, 0x6, 0x26b8ed79, 0x7, 0x196030dc, 0x100, 0x3, 0x400, 0xd, 0x0, 0x447, 0x2, 0x77, 0xe00, 0x0, 0xc103, 0x8, 0xaac, 0x5, 0x0, 0x7, 0x8, 0x9, 0x9, 0x99d, 0x9, 0x0, 0x8, 0x3, 0x8, 0x10000, 0x5437, 0x1, 0x5, 0x3, 0xfffffff8, 0x1, 0x0, 0x0, 0x1, 0x4, 0x4, 0x3, 0x6, 0xff, 0x7, 0x3, 0x6, 0x10, 0x8, 0x6, 0x1ff, 0x0, 0x8, 0x81, 0x100, 0xde, 0x1, 0x5, 0xb, 0x0, 0x8, 0x9, 0xe, 0x5, 0x1ff, 0x0, 0x5, 0x4, 0x4443c7fb, 0xe18, 0x0, 0x8, 0x1, 0xfffffff7, 0x1, 0x6, 0x4, 0xab, 0x6, 0x4, 0x4, 0x6, 0x7, 0x3, 0x9, 0x7, 0xb9b, 0x0, 0xfffffff8, 0x3, 0x8b, 0x8, 0xfffffffb, 0x6, 0x5, 0x8, 0x2, 0x8, 0x6, 0x6, 0x8, 0xfff, 0xffffffff, 0x6, 0xff, 0x7, 0x6, 0x1, 0x6, 0x4, 0x9, 0x2, 0x730, 0x81, 0x7, 0x64, 0x6, 0xfffffff8, 0x3, 0x400, 0x3ff, 0x0, 0x4, 0x1, 0x4, 0x3, 0x100, 0x5, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x226}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4e}, @TCA_U32_INDEV={0x14, 0x8, 'ip6tnl0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6a}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_POLICE={0x10a4, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x4, 0x100, 0xa, 0xffff0, 0x0, 0x0, 0x6, 0x3, 0x8, 0xa64, 0x4, 0x8, 0x0, 0x358, 0xfffffffa, 0x4, 0xffffffde, 0x40, 0xcbd, 0xd, 0x80, 0x5, 0xfffffff4, 0x26ab, 0x0, 0x0, 0xc, 0x800, 0x5, 0x7b6, 0xe8, 0x401, 0x5, 0xf4c2, 0x8, 0x2, 0x2, 0x6, 0xffffffff, 0x40, 0x8, 0x675, 0x8, 0x4, 0x1, 0x2, 0x842e, 0x0, 0x6, 0x7, 0xfbb1, 0x3, 0x3ff, 0x4, 0x400, 0x5, 0x4, 0x3, 0xffffffff, 0x2, 0x6, 0x8001, 0x6, 0x101, 0x5, 0x40, 0xfffffbff, 0x3, 0x7f, 0x7fd4, 0x9, 0x588, 0x7, 0x9, 0x7887, 0x8, 0x0, 0x1, 0x6, 0x6, 0x62c6, 0xff, 0x3, 0x8, 0x7fffffff, 0x8, 0x10000, 0xe, 0x377d, 0x6, 0x5, 0x4554, 0x3ff, 0x8, 0x3, 0xffffffff, 0x8, 0xa, 0x22b, 0xa164, 0x3, 0xffff0000, 0x2, 0x1, 0x6, 0x7f, 0x400, 0x5, 0x7, 0xfffff859, 0xe0000000, 0x1ff, 0x0, 0x5, 0x3, 0x1, 0x0, 0xf, 0x3d, 0x7, 0x40, 0x88fc, 0x1, 0x9, 0x10001, 0x5, 0xcc15, 0x8, 0x4, 0xff, 0x3, 0x80, 0xfffffe01, 0x5, 0xdd, 0x7, 0x8, 0x2, 0x81, 0x21b, 0x62, 0x0, 0x9, 0x2, 0x7, 0x88c, 0x51e8, 0xffff, 0x5, 0x7000, 0x7, 0x1, 0x5, 0x7, 0x8, 0xff, 0xffff, 0x8, 0xa3, 0x5, 0x3, 0x3, 0x0, 0xfffffff1, 0x7, 0x7, 0x5, 0x2, 0x5, 0xc727, 0xff, 0x2, 0x8000, 0x2, 0x80, 0x6, 0x76d, 0x3, 0xd, 0x0, 0x743b, 0x0, 0x2, 0xa1, 0x200, 0x2, 0x800, 0x7, 0x4, 0x9, 0x1, 0x4, 0x6, 0x5, 0xffffff80, 0x5, 0x9, 0x5, 0x5, 0xfffffffd, 0x8, 0x80000001, 0x4, 0x8, 0x6, 0x65, 0x8, 0xd62, 0xfffffeff, 0x1, 0xfffffffa, 0xbb63, 0xf74, 0xfffffff8, 0xfff, 0xa6, 0x800, 0x5, 0xfb, 0xffff0001, 0x4, 0x8, 0x5, 0x3, 0x3, 0xffffffff, 0x8, 0x2, 0x3, 0x9, 0x3423, 0x4, 0x8, 0x2e0, 0x2, 0x6, 0x400, 0x5, 0x4, 0x581, 0x1, 0x2, 0x8, 0x1, 0x1, 0x100, 0x7, 0xfffff3cc, 0x100, 0xfffffffc, 0xa, 0xb2, 0x7, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x81, 0x6, 0xb, {0xd, 0x2, 0xf33, 0x8, 0xf6, 0x4}, {0x1, 0x2, 0x9, 0x4, 0xfff, 0x9566}, 0x7c, 0x3, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x0, 0x218, 0x60a, {0xc7, 0x1, 0x1, 0x2, 0xa7, 0xc}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x6}, 0x56, 0x5, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x5, 0x200, 0x6, 0x1, 0x3, 0xf166, 0x4, 0xffffffff, 0xffffffff, 0x42b70000, 0xde, 0x2, 0x1, 0x80000000, 0xfffffff8, 0x6, 0x1, 0x69f4, 0x3, 0x7, 0x1, 0x7fffffff, 0x7fffffff, 0x0, 0x5, 0x5, 0x7, 0x8c, 0x10d, 0x4, 0x1efd, 0x5e1994c6, 0x6, 0x6, 0x0, 0x6, 0x1, 0x5, 0x5, 0x89e6, 0x7ff, 0x7, 0x6, 0x984, 0xe0, 0x7ff, 0x2, 0x9, 0x5, 0x0, 0x800, 0x8, 0x5895, 0x8000, 0x7ff, 0x5f00, 0x6e31, 0xfffffffd, 0xe, 0x6, 0x3ff, 0x3, 0x3, 0x6ec, 0x5, 0x62, 0x7, 0x7, 0x5, 0xd41e, 0xf6dd, 0x41, 0x200, 0x700, 0x8, 0x9, 0x4, 0x0, 0x6, 0x9, 0x8, 0xc904, 0x80000000, 0xfffffffd, 0x5, 0x32f1, 0xe01b, 0x40d8, 0x6980, 0x2, 0x6, 0x4, 0x1000, 0x9, 0x1, 0x5, 0x5, 0x6, 0xfffffffb, 0x2ffd, 0x8, 0x0, 0x7, 0x6, 0x7, 0x8000, 0x4, 0x6, 0xf, 0x8000, 0x4, 0x7, 0x4, 0x9, 0xf4, 0x7, 0x8, 0x10, 0x81, 0x1, 0x4c, 0x81, 0xffffffff, 0x101, 0xfffffffa, 0xfffffffd, 0x2, 0x9, 0x4, 0x2, 0x5, 0x6, 0x1000, 0x4, 0x1, 0x31, 0x6, 0x5, 0x0, 0x5, 0xffffffff, 0xe9, 0x7, 0x2, 0x2, 0x7, 0x9, 0x4, 0x9, 0x3, 0x9, 0x6, 0xfffffff2, 0x5, 0x7f, 0xae3, 0x80000001, 0x1, 0x6, 0x0, 0x6, 0xffffffff, 0x2, 0x5, 0x5, 0x4, 0xf, 0x9, 0x31, 0x40, 0xffffff00, 0x3, 0xfffff3bc, 0x2, 0x1, 0xa, 0x841b, 0x1, 0x4, 0x2, 0x401, 0x57ec, 0x6, 0x5, 0x6, 0x6, 0x4bb7350d, 0x6, 0x2, 0x2, 0x10001, 0x6, 0x9, 0x6, 0xab, 0x3ff, 0xfffffff7, 0x9, 0x4, 0x1, 0x8, 0xfffffffc, 0x81, 0x7fff, 0xc403, 0x4, 0x2, 0x6, 0x9, 0x5, 0x7b27, 0x80, 0x4, 0x6, 0xef6, 0x8, 0x4, 0xe8, 0x7, 0x9, 0x2, 0xb2, 0x7094, 0x4, 0x200, 0x0, 0xd12, 0x4f, 0x6, 0x9, 0x3, 0x7f, 0x3, 0x8, 0xc, 0x101, 0x6, 0x4, 0x7f, 0xfffffff9, 0x7692f5f3, 0x1, 0x8, 0x4, 0x0, 0x6, 0x9, 0xed, 0x3, 0x9, 0x7fff, 0x0, 0x5, 0x1d, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xa, 0x3, 0x1, 0xe4b, 0x8, 0x3ff, 0x3, 0x2, 0x7, 0x983, 0xf6f, 0xffff, 0x1, 0x9, 0x717, 0x1000, 0xe2e, 0x1, 0x1, 0x40, 0x8, 0x5, 0x1, 0x3d8, 0xf1, 0x4, 0x6d48, 0x1, 0x3, 0xf2, 0xaeb, 0x4, 0x127, 0x1000, 0x1, 0x8, 0x9, 0x91d, 0x5, 0x80, 0x80, 0x80, 0x7, 0x7, 0x6, 0xfffff9b9, 0x2, 0x5, 0x80000000, 0x0, 0x8, 0xfff, 0x8, 0x20000000, 0x8001, 0x1, 0x80000000, 0x5, 0xfff, 0x3, 0x7, 0x7, 0x8, 0xd, 0x1ff, 0x401, 0x4966, 0x9, 0x6, 0x9, 0xf46, 0x5, 0x2, 0x7, 0x7, 0xfff, 0x6, 0x2, 0x80000001, 0x6, 0x80000001, 0x2, 0x2, 0x1, 0x7, 0x2, 0x5, 0x10, 0xffff2a1c, 0x10000, 0x80000001, 0xc, 0x6, 0x102c, 0x401, 0x1, 0x5, 0x2, 0xffffffff, 0x2, 0x6, 0xff, 0x0, 0x10001, 0x0, 0x8, 0xe, 0x0, 0x10, 0xf97, 0x925, 0x2, 0x5, 0x7fffffff, 0x3d, 0x7, 0x1ff, 0xf6a, 0xfff000, 0xb1f1, 0x8, 0x8, 0x9, 0x1, 0xd302, 0x8, 0x4, 0x9, 0xe, 0x6, 0x10, 0xf, 0x7f, 0x4, 0x6, 0xffffffff, 0x8, 0x5, 0x7, 0x4, 0xfff, 0x2, 0x0, 0x7, 0xc0000000, 0x80, 0x7, 0x10000, 0x9, 0xfffffffd, 0x6, 0xeb, 0x3531, 0x7, 0x100, 0x5, 0x9, 0x8, 0xde8f, 0x2, 0x3, 0x3, 0x1, 0xffffffff, 0x6, 0xc, 0x1, 0xe2, 0x6, 0x7, 0x1db3, 0x7fff, 0xffffff01, 0x81, 0x1000, 0x800, 0x9071, 0x6, 0x0, 0x8, 0x80, 0x8, 0x6, 0x9, 0x4, 0x8, 0x4, 0xc, 0x0, 0x9, 0x6, 0xd3e3, 0xfff, 0x8, 0x2, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x3, 0xc5, 0x5, 0x1cce, 0xc, 0x1, 0xff87, 0x90000, 0x6, 0x2, 0x4, 0x5, 0x0, 0x571, 0x1229, 0x1436c1ab, 0x2, 0x0, 0x2, 0x9, 0x5, 0x7, 0x5, 0x3, 0x7fff, 0x10001, 0x81, 0x7fff, 0xfff, 0x101, 0x8, 0x1, 0x87, 0x88f, 0x6, 0x5, 0x182, 0x0, 0x1, 0x3, 0x40000000, 0x0, 0xfffffff8, 0x7, 0x200, 0x2, 0x101, 0x9, 0x9, 0xfffffc01, 0x0, 0x9, 0x8, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x4b2, 0x6cc4b812, 0xc0, 0x5, 0xfffffffe, 0x1, 0x113, 0x5, 0xae, 0xfad, 0xffffffff, 0x0, 0x8, 0x3, 0x5bdd, 0x2, 0x1, 0xfffffffc, 0x5, 0x7, 0x4d, 0x0, 0xcbd, 0x3, 0x5, 0xfffffffb, 0x81, 0x99, 0x4, 0x2, 0x2d, 0x9, 0x2, 0x1, 0x5, 0x1, 0x1ff, 0x5c, 0xffffff7f, 0x80000000, 0x7, 0xffffffae, 0x0, 0x100, 0x8, 0x2a3, 0xffff, 0x6, 0x6, 0x7, 0x10001, 0x7, 0xc68, 0x9, 0xce6, 0x0, 0x2, 0x9, 0xc, 0x3, 0x1, 0x81, 0x8000, 0xfcd7, 0x2, 0xab10, 0x6, 0x36, 0x7, 0x3, 0x7f, 0x3, 0x8000, 0x1, 0x8, 0x9, 0x0, 0x9, 0x5, 0x20040, 0x1, 0x8, 0x3, 0x1, 0x7, 0x6, 0xcdf, 0x9, 0x6, 0x3, 0xfff, 0x2, 0x9, 0xfffffff7, 0x4, 0x9, 0x800, 0x8, 0x4, 0x0, 0x9c, 0x8, 0x1, 0x401, 0x5, 0x1, 0x6, 0xfffffff5, 0x5, 0xfffffffa, 0x9, 0x8, 0x4, 0x66, 0x3, 0x9, 0x1, 0x3bb6, 0x4, 0xe26a, 0xff, 0x80000001, 0x10000000, 0xe3a, 0x10000, 0x1, 0x4, 0x101, 0xb1, 0xffffff24, 0x3a, 0xfffffffb, 0x2, 0x9, 0x0, 0x10000, 0x4a5, 0x3, 0x3, 0x5, 0x813, 0x9, 0x8, 0x4, 0x6, 0x8, 0x2, 0xfffffff7, 0x2f, 0x3, 0x5, 0x66, 0x0, 0x7, 0x39d, 0xc, 0x6, 0x3ff, 0x6db7cf72, 0x3, 0x8, 0x0, 0xb, 0x5, 0x2, 0x6, 0x1, 0xa, 0xca, 0x0, 0xff, 0x6, 0x0, 0x137, 0x0, 0x657fdd70, 0x3, 0x8e7, 0x7, 0x5, 0x0, 0xe20, 0x7, 0x72, 0x4, 0x1, 0x0, 0xfffff800, 0xee2c, 0x3, 0x9, 0x0, 0x14, 0x8, 0x9, 0x3, 0x7, 0x8, 0x2, 0x9, 0x2, 0x2, 0xffffffff, 0xffffffff, 0x5, 0x2, 0x3, 0x3, 0xf2, 0x4, 0x8, 0x1000, 0xc, 0xfff, 0x0, 0x7f, 0x40, 0x8000, 0x9, 0x7e3f5966, 0x5, 0x80000001, 0x7, 0x797, 0x2, 0x7, 0x5, 0x7, 0x80000000, 0x8, 0x3697, 0x3ff, 0x7, 0x8, 0x0, 0x6d, 0x2, 0x8001, 0x2, 0x0, 0x8001, 0x62, 0x3, 0x4, 0x7, 0x5, 0x4, 0x9, 0x273, 0x1ff, 0x2, 0x3, 0x6, 0x6]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x6, 0x8a}}]}, 0x1dcc}, 0x1, 0x0, 0x0, 0x94}, 0x0) r8 = socket(0x2, 0x3, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 7.760944507s ago: executing program 3 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000800), 0xfd, 0x525, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDvOOvEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9bM9ckajECY78AZx74s4FwY1LOSDxIwI1SByMZjxOncRu0iaOQ/z5SKN5b2Z2vt+XxO/Zz2u/AMbWnYh4EhGTEfF2RMzlx5N8izc6W3rdRwePVw8PHq8m0W6/9Y8kO58ei55/k7qd37MUET/4TsSPk9Nxm3v7myu1WnUnry+06tsLzb39+xv1lfXqenWrUlleWl587cGrlUtr6wv1ybz05Q9//+QbP03Tms2P9LbjMnWaXjyKk7oVEd8bRrARmMjbMznqRPhMChHxbES8mD3+52Ii+20CADdZuz0X7bneOgBw0xWyObCkUM7nAmajUCiXO3N4z8VModZotu49auxurXXmyuajWHi0Uasu5nOF81FM0vpSVv64XjlRfxARz0TEz6ems3p5tVFbG+UTHwAYY7dPjP//nuqM/2eavoLkAIDhKY06AQDgyhn/AWD8GP8BYPwY/wFg/HTGf/+jDwDGidf/ADB+zjf+J51v9QQA/t99/8030619mH//9do7e7ubjXfur1Wbm+X67mp5tbGzXV5vNNaz7+ypn3W/WqOxvfRK7L47/83tZmuhubf/sN7Y3Wo9zL7X+2G1mF3leQQAjNIzL3zwpyQdkV+fzrboWcuhONLMgGErjDoBYGQmRp0AMDJW+4LxdYHX+KYH4Ibos0TvMaV+HxBqt9vt4aUEDNndL5j/h3HVM//vU0AwZsz/w/gy/w/jq91Ozrvmfxy/sDSM5YgBgCtgjh8Y8P7/s/n+N/mbAz9aO3nF+8PMCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK637vq/5Xwt8NkoFMrliKciYj6KyaONWnUxIp6OiD9OFafS+tKIcwYALqrw1yRf/+vu3Muzx049f/uoOBkRP/nlW794d6XV2vlDxGTyz6nu8db7+fHKp4v81CW1AADG09S5r+yO09m+54X8RwePV7vbcHLs72/fjohSJ/7hwWQcHsW/FbeyfSmKETHzrySvdyQ9cxcX8eS9iPh8v/YnMZvNgXRWPj0Zf+KSnr+cP37hWPxCdq6zT38Wn7uEXGDcfJD2P2/0e/wV4k627//4L2U91MXl/V96q9XDrA/8OH63/5sY0P/dOW+MV3733U5p+vS59yK+eCuiG/uwp//pxk8GxH/51N1O3z/15y89/+Kg3Nq/irgb/eP3xlpo1bcXmnv79zfqK+vV9epWpbK8tLz42oNXKwvZHPXC4NHg76/fe3rQubT9MwPil85o/1cHRjzu1/99+4df+YT4X3+pX/xCPPcJ8dMx8WvnjL8y89vSoHNp/LUB7T/r93/vnPE//Mv+qWXDAYDRae7tb67UatUdhU9V6D7bvC75jEFhIvb20x/5dcnnZOFbVxVrcsBf3c9e6vxNnjjVbn+mWIN6jMuYdQOug6MHfUT8Z9TJAAAAAAAAAAAAAAAAfV3m55MGfRhu1G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5vpfAAAA//8Hi8oe") symlinkat(&(0x7f0000001040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)=@known='system.posix_acl_access\x00') unshare(0x62040200) lseek(0xffffffffffffffff, 0x5, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000740)={{0x2, 0x4e23, @private=0xa010102}, {0x1, @remote}, 0x6e, {0x2, 0x4e1d, @local}, 'batadv_slave_0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x92) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r5 = fsmount(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4b, 0x4b, 0x7, [@datasec={0x8, 0x3, 0x0, 0xf, 0x3, [{0x3, 0x3, 0x2}, {0x4, 0x10, 0xffffff7b}, {0x2, 0x13096eb5, 0xffffffff}], "f8edfd"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x6}}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000040)=""/25, 0x6b, 0x19, 0x2000, 0x302, 0x0, @void, @value}, 0x28) 7.701117387s ago: executing program 3 (id=2008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000dd00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@loopback, 0x0, 0xdbc, 0xfffe, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x1000000000000000}, 0x400, 0x0, 0x1}, {{@in=@empty, 0x20000000, 0x32}, 0xa, @in6=@loopback, 0x3507, 0x4, 0x0, 0xb7, 0x0, 0x0, 0xfffffffe}}, 0xe8) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x23, r1}, 0x10) 7.574897337s ago: executing program 4 (id=2009): syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @broadcast, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@generic={0x9200, "6e14eb44f297c8d57929e846e4c6920e8d265daf5636af175699e0b50323cf70fedb0ebce3963e976130b584511f211401fb12be76aac710ccff21636b52b16ca6b87304e6987b50de52224b7a9a0ec0962f4d7219fafa064b3cc9e91ae91930d6f332d190a7"}}}, &(0x7f0000000080)={0x0, 0x4, [0xeae, 0xc47, 0x5bd, 0x2]}) r0 = socket$inet6(0xa, 0x6, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x2, 0x1, 0xf1}, {0x2, 0x1, 0x59, 0x3}, {0x6e1, 0x5, 0x7, 0x1}, {0x8, 0x11, 0x6}, {0x7f, 0xff, 0x40, 0x9}, {0x3, 0x2, 0x5, 0x81}, {0x3, 0x5, 0x4, 0x8}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x184, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "8bdc913e94fd371d47f865e0f356024a32ea15393f9742f0ff6bda20f8a955e566cb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc360}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0xffffff3b, 0x6, 0x34488, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @value=r2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x7, 0x1, 0x0, 0x7, {{0x28, 0x4, 0x2, 0x9, 0xa0, 0x66, 0x0, 0x8, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0xfa, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x9, [{@remote, 0x3}, {@empty, 0x5}, {@rand_addr=0x64010100, 0xa}, {@empty, 0x8}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x1, [{0x6, 0x10, "5f3c25cc7463837694d4b41b781d"}, {0x1, 0xc, "12a78f2efc991afd89dc"}, {0x7, 0x8, "df7958b77822"}, {0x6, 0xa, "5b996f53a6572345"}, {0x0, 0x8, "eab2aa7a179e"}, {0x5, 0x11, "682d58d496d382d0c2aa56b1326af2"}, {0x0, 0x9, "5a5d68a8c6a45a"}]}]}}}}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0xfff, '\x00', r4, r2, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xd218}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_STATUS={0x8}, @CTA_LABELS_MASK={0x18, 0x17, [0x3, 0xf9, 0x3, 0x8000, 0x200]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8855}, 0x4000040) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x40) read$FUSE(r2, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r8) read$rfkill(r2, &(0x7f0000002980), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e00)={r2, 0xe0, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000002b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002bc0)=[0x0, 0x0], 0x0, 0x6c, &(0x7f0000002c00)=[{}, {}], 0x10, 0x10, &(0x7f0000002c40), &(0x7f0000002c80), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000002cc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x2, 0x6, &(0x7f00000029c0)=@raw=[@exit, @generic={0x40, 0xa, 0x7, 0x3, 0x7}, @ldst={0x3, 0x2, 0x4, 0x8, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000002a00)='syzkaller\x00', 0x3, 0x37, &(0x7f0000002a40)=""/55, 0x41100, 0x52, '\x00', 0x0, @fallback=0x27, r0, 0x8, &(0x7f0000002a80)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002ac0)={0x3, 0xd, 0x2, 0x18a}, 0x10, r9, r2, 0x0, &(0x7f0000002e40)=[r5, r2, r3, r5, r3, r5, r3, r3, r2], 0x0, 0x10, 0x7ff, @void, @value}, 0x94) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x10, 0x3f8, 0x1, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x3) ioctl$FIONCLEX(r0, 0x5450) r10 = dup(r2) pipe2$9p(&(0x7f0000003040), 0x4000) mlockall(0x0) syz_extract_tcp_res$synack(&(0x7f0000003080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000003100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r10, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10, 0x6e}}}}, [@NL80211_ATTR_SSID={0x1a, 0x34, @random="2ba1cbc8f2c111bd3f7598795a62f2f16abf0542bf9a"}]}, 0x44}, 0x1, 0x0, 0x0, 0x14044}, 0x812) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), r10) sendmsg$NL80211_CMD_START_NAN(r10, &(0x7f0000003380)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x48, r12, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x68}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xdbc9e9e7d5e8f781}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4004004) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000033c0)="a842bb9585aa43afa101180e926c8d0255d664a0e5b29aa9019a4b2268a902ce1851390fe2f57475ac5dd08b3abda663b0a0fd9cbeced8961e6011435097a6cd55bd01f7b279892e91b13c1358247b132e76d72a4bed4fe9c5c718559126b4fbd843193d72d7c2b3d43c5386b72678", 0x6f) 7.569713197s ago: executing program 4 (id=2010): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) eventfd(0x401) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.868715755s ago: executing program 6 (id=2012): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f0000000980)={0x0, 0x0, 0x7, {0x7, 0x0, "12279dfa7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "1e3cecee73b1d2987a18"}}, 0x0, 0x0, 0x0}, 0x0) 6.743066645s ago: executing program 3 (id=2013): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = dup2(r2, r2) getpeername$packet(r3, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000180)) 6.657944755s ago: executing program 4 (id=2015): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) 6.566121235s ago: executing program 4 (id=2017): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.491717174s ago: executing program 4 (id=2019): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x489263d8) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x25, 0x80000, 0x8000, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000094000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000080"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9e65660ff3b20618baa000ec36f40f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x47}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000140)=@attr_pvtime_ipa) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x22020600) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) 6.482094424s ago: executing program 34 (id=2019): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x489263d8) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x25, 0x80000, 0x8000, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000094000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000080"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9e65660ff3b20618baa000ec36f40f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x47}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000140)=@attr_pvtime_ipa) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x22020600) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) 4.57158446s ago: executing program 5 (id=2027): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_gettime(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000040000000b0f065e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@ipv6_newrule={0x58, 0x20, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x20, 0x0, 0x8, 0x0, 0x0, 0x1, 0x10}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee00}}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x58}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) sendmsg$unix(r2, 0x0, 0x881) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4, 0x7300}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b40000000000100061146c000000000007000000000000009500000000000000bc9159de447a6bd87adc1e36312104d21933294996a7db3cf047262ab1a76f2fabbfcd71f9615dc1b49fea44a357c13e454ecc66136ba95161ba48e913287d79ee74d63ea877e398850dbd86796e3497e8457a2dfe3638b20bebf8d8b9d88e1b227aad7c222dfce9d40e749b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.570755928s ago: executing program 6 (id=2028): syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902", @ANYBLOB="05"], 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c67635f6d657267652c61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c61636c2c636f6d70726573735f63616368652c6661756c745f747970653d30303030303030303030303030303030303030342c001ba5098c4b"], 0x1, 0x5505, &(0x7f0000002480)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000003c0)={0x1100, 0x2, 0xb, 0x2}) 1.947559584s ago: executing program 1 (id=2032): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) (async) fchdir(r5) sendmmsg$unix(r4, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = dup(r0) sendmsg$netlink(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 1.937706984s ago: executing program 1 (id=2033): r0 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYRES8], 0x1c}}, 0x0) 1.262672253s ago: executing program 5 (id=2036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0x24004856) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000005000000e0000000030000006200baa5", @ANYRES32=r0, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000030000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b73c36cf403025b44838b50000000000008500000003"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfff00002}, {0x16, 0x0, 0x0, 0x1}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.117516243s ago: executing program 5 (id=2037): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240103) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)='\x00\x00', 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000740)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x0, &(0x7f0000000200), &(0x7f0000000180)='GPL\x00', 0x4, 0x89, &(0x7f0000000280)=""/137, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 1.003827083s ago: executing program 5 (id=2038): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setrlimit(0x8, &(0x7f0000000080)) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="8100000007880017060000022681ad000c000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x5, 0x2, 0x52bc, 0x404, r1, 0xbb8, '\x00', 0x0, r0, 0x5, 0x4, 0x5, 0x8, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x5, 0x2, 0x52bc, 0x404, r1, 0xbb8, '\x00', 0x0, r0, 0x5, 0x4, 0x5, 0x8, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc0c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="4283ce7031735e6fa008cc2e5890e18809e23beb06384ac1ae785f0b6720cd4c7c0009afa3f330e2f2bace033b8bfeff7e244718000000000000000000000000000000711252465eaaf98991b67ca02a29c5acbab494e0312937ddc3539356e449fdecab79c4edc23cb61869463f3ee469c63ef0380a11bea3b21a487f0f72a11646716dfad76750e6921d20ad80151d25c748255b08020808c104571a31907ab2d27e72e01fee0a96747473ff00ce7920d3bf8ba1e6b351ae633583cb8f0044fa543a82fb4a14a83296a249aa4ac20e88ee2e95f677a2cbb89ec12c1ffc609fa77b43a0458e93d1b1a77ba3f1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="4283ce7031735e6fa008cc2e5890e18809e23beb06384ac1ae785f0b6720cd4c7c0009afa3f330e2f2bace033b8bfeff7e244718000000000000000000000000000000711252465eaaf98991b67ca02a29c5acbab494e0312937ddc3539356e449fdecab79c4edc23cb61869463f3ee469c63ef0380a11bea3b21a487f0f72a11646716dfad76750e6921d20ad80151d25c748255b08020808c104571a31907ab2d27e72e01fee0a96747473ff00ce7920d3bf8ba1e6b351ae633583cb8f0044fa543a82fb4a14a83296a249aa4ac20e88ee2e95f677a2cbb89ec12c1ffc609fa77b43a0458e93d1b1a77ba3f1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) eventfd(0x3fd) (async) eventfd(0x3fd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000021, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000021, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xd1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80c2, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, 0x0, 0x0) 1.003359402s ago: executing program 1 (id=2039): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xff, 0x8, 0xfffffff9, 0x40c00, r0, 0x5bf7, '\x00', r1, r2, 0x2, 0x1, 0x5, 0xe, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_clone(0x801400, 0x0, 0x0, 0x0, 0x0, 0x0) 992.524632ms ago: executing program 1 (id=2040): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/166, 0xa6}], 0x1, &(0x7f0000002280)=[{0x0}, {&(0x7f0000000f00)=""/210, 0xd2}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socket(0x28, 0x800, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000eb08fac577bc644a1d0000414006002c0012800b00010067726574617000001c00027805000a000000000108000400b63ef23b080007000a010101"], 0x4c}}, 0x4014) 979.619423ms ago: executing program 5 (id=2041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x005\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x305800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000440)={@private=0xa010102, @broadcast, r7}, 0xc) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = syz_open_pts(0xffffffffffffffff, 0x200000) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000180)={0x37e8, 0x10000, 0x8, 0xffff, 0x0, "6542761d8e8557f8a90952aadb02bdf5051020", 0x5, 0x2}) listen(r5, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) dup2(r9, r5) 896.002792ms ago: executing program 5 (id=2042): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x4, 0x4, 0x5, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000580), 0x20000000}, 0x20) close(r0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x200006, 0x17, 0x9db1}}, 0x30) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000000d40)=[{{&(0x7f0000000500)={0xa, 0x4e20, 0x8, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3800000000000000290006003600000062030000000000000718000000030409040000000000000000000400"/56], 0x38}}], 0x1, 0x4000) recvmmsg(r9, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/4096, 0x1000}, 0xfffffffa}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 493.872731ms ago: executing program 7 (id=2044): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffffd, 0x2400a800, &(0x7f0000000640)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x141341) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000299000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32=0x0, @ANYRES32], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x22, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xaf74, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x52ffd7d4b7d70667}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0xf9, &(0x7f0000000340)=""/249, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x9, 0x7731, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000700)=[r0, r0], &(0x7f0000000840)=[{0x0, 0x2, 0x9, 0xb}, {0x4, 0x4, 0xa, 0x9}, {0x2, 0x4, 0x3, 0x5}, {0x5, 0x4, 0x2, 0x1}, {0x3, 0x4, 0x3, 0x8}, {0x1, 0x1, 0x2, 0x4}, {0x5, 0x5, 0x3, 0x4}], 0x10, 0x11d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x2acc}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x1, '\x00', @a}) (async) linkat(r9, 0x0, r9, &(0x7f0000000040)='./file0\x00', 0x0) 384.180081ms ago: executing program 7 (id=2045): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000900002000000e001"], 0x190) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') close(r1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffffe, 0x6cb17d18, 0x9, 0x2, 0x5f, "ff788494f842d428d6d525f2f9cc21034f4839", 0x84, 0x3}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c020080", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250b0000008800058024000280080004000800000008000400070000000800020001000080080001001f0000002c000280080001001f000000080002000400000008000100150000000800010014000000080001001c00000007000100696200002c000280080002000800000008000200e5c000000800030000000000080002000b00000008000200010000003400098008000200cbf7ffff08000100060000000800020006000000080001000500000008000100f3ffffff0800010049030000440007800c00040001000000000000000c00030002000000000000000c00030003000000000000000c0004004000000000000000080001000351000008000200010001000c000380080003009fbb0000480005803c0002800800010018000000080001001d00000008000300080000000800030005000000080002009a00000008000300ffffffff08000100070000000800010075647000280007800c000300040000000000000008000200ffffffff0800010005000000080001000800000068000680080001009de000000400020008000100090000004700040067636d28616573290000000000000000000000000000000000000000000000001f00000055bd526bc517eb882131cd4261e93b0696362a038fe713c779a3fc8ba7bdad0008000600ff0000002c000980080002001000000008000100fdffffff080002000600000008000200050000000800010005000000"], 0x224}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c020080", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250b0000008800058024000280080004000800000008000400070000000800020001000080080001001f0000002c000280080001001f000000080002000400000008000100150000000800010014000000080001001c00000007000100696200002c000280080002000800000008000200e5c000000800030000000000080002000b00000008000200010000003400098008000200cbf7ffff08000100060000000800020006000000080001000500000008000100f3ffffff0800010049030000440007800c00040001000000000000000c00030002000000000000000c00030003000000000000000c0004004000000000000000080001000351000008000200010001000c000380080003009fbb0000480005803c0002800800010018000000080001001d00000008000300080000000800030005000000080002009a00000008000300ffffffff08000100070000000800010075647000280007800c000300040000000000000008000200ffffffff0800010005000000080001000800000068000680080001009de000000400020008000100090000004700040067636d28616573290000000000000000000000000000000000000000000000001f00000055bd526bc517eb882131cd4261e93b0696362a038fe713c779a3fc8ba7bdad0008000600ff0000002c000980080002001000000008000100fdffffff080002000600000008000200050000000800010005000000"], 0x224}, 0x1, 0x0, 0x0, 0x40000}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x240, 0x8c) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x5, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x5, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) 377.683181ms ago: executing program 7 (id=2046): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x80000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/104, 0x68) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'geneve1\x00', 0x112}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tcp_retransmit_synack\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000080)=""/73}, 0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r4, 0x9, 0x0) 338.966831ms ago: executing program 6 (id=2047): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x626, 0xa80) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x10000, 0x5}) socket$pptp(0x18, 0x1, 0x2) syz_clone3(&(0x7f00000013c0)={0x40000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, {0x2}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/223, &(0x7f0000001380)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x7, {r1}}, 0x58) r5 = getpid() r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) r7 = syz_clone3(&(0x7f00000014c0)={0x6000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/47, 0x2f, &(0x7f0000000180)=""/28, &(0x7f0000001440)=[r3, r5], 0x2, {r6}}, 0x58) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$UHID_INPUT(r1, &(0x7f0000001540)={0x8, {"aa6a8ecc4ac149ff2087f34697d79b8a6e1d0d725936084a67102abfe8988f2cee1b3528ab5e7990a085fcc5b95f62c6aea57aaba7b032679cb785aba93a5ab8b035273bf5f9db3920db977851b49efd2306a1fdeeb7d6f727fe95a63d7c3f7ab61c5a8b8d670366cd757be47d8a42338cfe41056348fe91974205fc28cffba745b9d41e60c304c8ae6c0f258c57e564994dfde1bdb9201d4cce43e923b8e9315d2ee5765cca441f0bba55c49b423944a4e74109c92eb5b7b248939f3b9fb6aeff54fba86a40db2adeb21c15b5364c0f618b9ad712c6700255b3179472541dba97b3111f4606f13e70911b3720f5f08c47fb35d01fa9c9d070f7e8ac838aa542fa5691c79887cbc20b7c615d53e8feeb0addc71efe83f7a3f4904634c847ceda08b69eaabd93213fae731841860af75ebab0234db78c7cc21a1270144fd362a571c7eea2831283c28af42f45832a6687129eac947f97c71fd94ec6a1b635bb0be96b5f731f19c9e91de57b5e504fbf8b5026a95d096329f1ee8ca64f9a9a041771b1842f36197a83720247ad21d8ae510993edeb782e791a0389cbd541ad4eb102ed3b154e8cb3143a4e61aaab4cc8d507e790903abdb6be74a97e80f9147fad28ab5ce5e3fc545e850479e5fe1609feb2387bdb7e37ca5aeb13fb5165f66f71ac340c49a0051bb98948e2927e8fce04255821bbf360454e18da5dfc88ffd6060effd49d23bce43aa85017f15eaa924e11756116c10d0db69f30bc6b1fbe4bc2176ddff3ff8e686493e2cd80de6650ea2d54b0bbd19c366469a4027111392e5ae04f0bc24b665d119b5367dfc7e4f1e2956fa23060ecbc6afc2a88efc4060f10f1a06af656c897e7a6cc955d7951c02928f6ddb8a9286431fa47a564f7e07baea7854f55bc83f3c977ea5260aefc60b2bceb5d2bdf6880163af8aef1e87c905f8731cee3e553689af59a021d8adfab72b8a3ea29cc2584da12d0f59f27ebc77ff262731df83d248333ef8dfb0b3b480bac69b1bf2de28deba18b01a1b4f9bd4eb88657dc9f82ff78c7fa3987a94a5a08bea916ca02c1226788cd31054b68c12b330ace7e86377f51086e9ff93fc1437aee4f099eccd87396833bef5390155892a20d1dcb569c38ec69bc4671a26cceac4db244f2b96f90bd17aa7740d4fb21e89d3f73f6c1c2daa6f584db226701c6765616202b6c1436ce0883ffea6a6c27ec3826363ab82baec8e65e87dbd7c2f219eeb9bf687a4d6c8b78ed015da4472cc8dfc6a19a4ccb6713a412892b6fef3e355fcbd206e138460edce7ffa13311a2d27aab8ee13d632b0b0b693d321b4f03a3fd33c54e7bac7342e8bb3cb85345eb95dd17160a43950fa1c08e2f45eee77717a59bbf7d81222e120fda3f27960f53b9bd3098e7d9a76500eee8382379634bc7e1a671cf0a189d020292d07a35f8fc5cf5f9be6557b6d55cb5e978dc51143ec813c39b083b3cf6f3fa87ef990dbe6e6b254a34ec9a2136f99afc21ee699a140acb1ee89b0321f72300650eab6712dd7ae15afbe5f8d4291a05f93df6cfa3004640bffa66560711f381538163213d08d4752bb443e7504fdf1e20745d94fdba38619a3cf748c5e24ef9a2caa79a22840986cdacbef6e2b1ff6d466ddfc3f4325a1d8f8173378230d0b7a6849a659d491f856a8e1d6c3e49e16143c6c68624f337411cdbeecefacd2835935902392b5ff544672a1b1712941a0e7d18b50a136e138bbacfc032a8c609e965f3262569961e9cf5f17c0074eba5fc623aee24f7c20fa51a5b78505abe9ff89cd9219f0ac2d3f8b08a572373b2929d04b05a5ae16ab4ffe0238a8adc91e82dab89a0c81993302b87e194465fc029e38883fad555ca1ad5d70962ce280cd7849b9ed6e727e8cc9122fa871e0399be1e39ecb7f6c11a9b23f724fea61a3cb1e837ff885f90ce33510f3d819ed5581962204cc02565b7f6237ec9811b5ae6d31b0e730573ed8f5d457e65939480b24c0a3f146d1368cfd2bccbc0662e87a0c9a9e58642dbe4ddcf99908643361229255593c9ec9b2c13a035a595fa32a30c5265602e3033ad102c5e7857941a7cc2b386bd6f30c52b444dae03cfa468839d0c080fdabdfd37db4eda2d551c8c9abb6a1c72916215639ff5e96efbd2b44683c88dfb046dffc6c93dba33fc99db7b65c90936cff470a2aebf06bdff050397b59b4ed9bd039f457647cc16eb6720997e51775cf077883f3039cceb0462b67472d00322b0190a280f874b6dbee3093429fac0bcbe183933eeca7302f205a0bb069c51eeb422aff21d0f95e25d7cb47b77f29b6114519d9d59e2f7ed1779be94c853a151ba5a7f94d0dd40586b64a2525381d03cfcdda087f85a7c2d1a69b48ca4b2b118eb7b7ff0e2b02cb8b0b83b57a2a5c3e6dc55e5db2b1d8e94f7dc4a4705aa79d6f7ea29a40089cbeae87d4b82822a72dabec22deee572c69b70a05afdcbbc56516409524935cb1b5bc2c6861a830b5275ef9eb22f92f8de5ba18c9ebc6b7311a10cf7005f832460778c6811fe28e40b53c28a92f3fd0b599622ca93a8a39a5d6238081fd098f22630d8161798b1c419678fc8160e5902019cd71d0fe6a267b76a8216e11f5ecc2ebe6704d7a21a6e323e10d411cd37b4a2a6e50e3dc8d4229799de5e22fb06e67bfe5a1579534da4a001480f0419a71df0b86ce7584664a49d2401dc6a31ce8469d8815dd97ebeacdb244b8fb049afa5b44aba398daf2ad71d6e13e4048953897c77b5386d4e4ac2eb9ed0e13d998c06a851b656d377098bddc36f3be5b40f7c2ccb1596b2a36168cbc6971c50e19a2407956c04d832559d39e5df31b0bd4c2af12c2e05210c49d5fb6abe7771211cf197dcc1f04e26e42cf1d9b8ca828ffe2b89659fd79ec8e2c006da8da82314ffb8caf672be0b1e508e453a84f637a31f5c84b12a3c47565c2a57cc93fd34641e46f6f6d54199b5a5b9d4f4248dfff25d333056b863b8cb51bfda49cc987a8014483b2a911b4b5a6aa86a36ac109adb0af1e89e3fc18aa291dd58668e4f01d0ba0da37a035eac2eee9c7e5e04e8547a607333db208d80d698db008d9c8a1c9a6a9b6f6d3b37d24b4fc2ce8b3e56b8bfd0fa13732dc46eb6aaea94dc864c17f353c78c6f7c55f473ea9bb19fc17fd45ba921e805cd6bd24b69a4ecf1140dd93f96066a4444d32b7af602b9852017b121bfdb7d72f90e572bb325da35c380b9a817c8580b95e391c5befaeee6e63d6854d248a94794fc48f0cca713cd2e9da6adac8dbf8141ea1ea4725b97fdc5b74d249dcba3b373bd408d49c26804fcb2e41d15e5f7f45184391212b27bbcd5e547693039a1b8bc5b5b1cc1f82fc392d6bc91eb3c8fd1e3571f233e6361e740ccf7fda575c0c792a21a743e76fc2dc13e0398e763880a69d3692d3def40916fae2099c3e13e7c901bf65ef307030d261bf6ae7c620f0af92f74233e504583a47da97a679959d67213d9edb98101df5f4f23ef7372a0f9826b8c42d84184733aa9481ed9cec5e684f6a842178b9df9aec5997b789ada55ed25b236ef07c9eece7f3ea7c300dfeba21d52ea27d1270515d06060c7742537ac87be8203d194ed19c8090c32943f0e440232dc88a998bec823d7f55b7b99609e6874517caa6a83081451b52ad958d517f38d7f0c3d222f1a1599e749a5600fb84bf0952b82a84836ad6f3047061225f9729082e80e1c3a344707635ac71563a90b823f49b2d1e78e1565bbbd74a12ea8811f01e4453dee9064e1f7b66f6b32869ec06a0284b08023f8e122f56b15b247b02ac55894bbd38ea3133edfb9d713bd2ad19b18c7fb279b260d53e1adb9c76eb1fac5e31899111b1efdbec2a2c3eaf2be6d449524b8adeffa2b2de15b11e0ba0c0d1e1f31a813c33c7a032b7d49c944312597de95e9a1e2033ffaefac75fae36efb4a11f0956579ea19a943336e1b237568a1acf65d655bcd8f315adae853fb1a3d686c98ad1a3a30bb5cd4be03bc6338761d783948593e9d7e8116448166cb70b3def6689c7f90e154e8bc951e9da9426e8482c6c34246cb3658c2c6185a1e0f77a3bb06b76bc8ef5587f9a012a8098b374f7dd7f503789d9cdaac040faa60f2fc4fe75d7f008534c212487df5e218c726915d7b4303a6dd887ec35923dff0c62b0a2d6a88ad320716f708ec5f663780c33d78d35191b9d60c44788172946f18479293488b8efd57b7f890707e9c1f8dd539294400dade131ba233826a568d0d32acba91517aebf393129169667ab4233a4a0d60c217c2e3d53de46afadae43b90189ee1a310bdd8b1bc5cfeb76e2a57913a9a567439e2226481429c0ae12efc622223add5bdb57ebd03a4fbd36abe885d16aaf10ce8c4834f952b99a588b20c7b8da81533f71fd719f61bf19a6e8c7da7a3e5bf576afecf8917e89b80c0bbfb2d9556a9cbd913a72cfdcce8fdc5e1dc917b754ff4d033d1fc871c39ae56aa3c67c0f81695bd264f92f7564664ae12d44378fa52e18715d6eaedeba1520dd6a54733cf80ab5d193fc5d1242369db2be05c578cd5b3be5aa2385efe1b1259d8c803ac4b950d85d9c03a670c8ee51b9ff2589144652f19a36313756d319e261e3e8fb97e6633903fbf0bd1129fb4f0f44e7735306b127473cd15887da61cad2bdfe992dfc83351bbd622b5f6bb7db704b5d7a8e09a093e36ca2c926915c62520251c755334688f57dfe027240687fc9f9b40f846dc5bc5b8e1ac9f5fb6dc8e77cca67d475205cf243e867b137563eabad7a3592392b715fa5ed108a391ec7ddc88c8b9947a24d0551878cc4b56b6a335249dd98bb30f27a7a3d986d8b43bf9e01f45fe13226a2e01ef2ed0461ff5128f2159dffa4170d45aa5d1a93cd7ac301fc6b23ae196d1726969bea6830a3ffb504529c9f993c2f1294f9887983c7e88eaa384185d43417baeb02932fe10c31be51017818340988522759be66c1c39450d9c423feec365b54e66755cf26214b6ed44d0ed34c16ad96ec83ece2b357fa5b72058a5a0b918457c89c51e74dd0d532eee1c61663059ed28c71a9b376850edd04c486bf06b280696eec3bc03e7b2e5b3f55e46b9530e47a3738214a98e5c140ad248fb8a975646b84bf33e09c53090b1b116b3dd0a6ac7b3f97b6ae50d4f47254af0423bc7a374eeac1b2e075aff16d46ec2621008b306f3ba99ba695537e5a09846c0876170c5a664a77e81ac1ffa813d36efef1f0b2eb250845a6aeba8a81e0bae02f52d398fab739ced9ad64639aec66998f93801d041f380a74203cafaf77ddb8073c56cd699554d6570950160647b1ef9675114754daa38466bad676d584cd1109718febed5b56df12dd0ca4c1a51143c91d04b7a8b385361fe4570ea5c3477a06ddf1f8319339a62f29510aa851477e47a537873e7b5e7c3398737e61b319a67f674b633ad622f26291c84f0df28dd8cd02085cb69a96330eea10ed02442aeddacede44e07ae4595b45e7f5162810779669c0cc914ced471e425735b6f9b44f67b115b259dd5af712663c454fdfcf2d0dd4405d93f1b3e8544cd7f1f3bf1e3159778980be6d3e1bdc1f052d780e1908d9de22628a6520406345d3a96c727ba7e42f5ef2f6c38cb97cfcdd56280c265d295ac4333ed7d7c3f7e865323c1767ffe121e0956e8b9bfccfef9a7001f9456663382ec137a73dc2619ac8fe27faa7a321cd28015647b7a7e6661bff78eb12ccb5207ed5964a75ea9c8da01e912cc8bf6d26342b5e34aded76b3d41c03086fe703330d149d3b1bb329e70", 0x1000}}, 0x1006) r9 = syz_open_procfs(r4, &(0x7f0000002580)='net/mcfilter\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000002600)={0x5, &(0x7f00000025c0)=[{0x5, 0x6, 0x3, 0xfffffff7}, {0x5, 0x8a, 0x9, 0x9}, {0x4, 0x0, 0x8, 0x80000001}, {0xc, 0x9, 0x2}, {0x7, 0x81, 0x3, 0x5}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002840)={0x2c, &(0x7f0000002640)={0x20, 0x7, 0xd8, {0xd8, 0xd, "a41e15fbad7005a099382032e009ac83997e9c289283d98f06c625fc118274282135de48986555dec8a448927821f15ed239a6111fb5996a5127003265e8d5e56a0e0ade023db421f88b9699cd0094f8800f13b0af7c65852fd33383a864f120da3538383d0b067135a0076b9f21162bc8a0d082776c0394273c311cd05c5753933b6afb69c7434a36a54dcf8e163a766c0dae7ce3a15efa9c9bb0600c8640049b03edb4318c949ec3be9ae085b0a76f06dbde894bea9fa2fcabf2c93e3a9d26d086d894d3e4f3f31edd09ace61dde9a035e6730be7e"}}, &(0x7f0000002740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000002780)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x9, 0x4e, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0xb, 0x8000}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "d819759970089fd10bd0f23f3519730d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x4, 0x9}]}}, &(0x7f00000027c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0xd3, 0x3b, "2a1c3d67", "823657cd"}}, &(0x7f0000002800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x2, 0x2, 0x9, 0x8}}}, &(0x7f0000002c80)={0x84, &(0x7f0000002880)={0x20, 0x15, 0x3a, "6f97305ddf5193abea5dab42dcc31d3b2ffdc8cf95086d9140e246e023d62c9477bfc75ecbd216db2620712373a3cfc786019b8218b7b1f530b9"}, &(0x7f00000028c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002940)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f0000002980)={0x20, 0x0, 0x4, {0x2, 0x10}}, &(0x7f00000029c0)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000002a00)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000002a40)={0x40, 0xb, 0x2, "65ff"}, &(0x7f0000002a80)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000002ac0)={0x40, 0x13, 0x6, @local}, &(0x7f0000002b00)={0x40, 0x17, 0x6, @local}, &(0x7f0000002b40)={0x40, 0x19, 0x2, 'rQ'}, &(0x7f0000002b80)={0x40, 0x1a, 0x2, 0x1fe}, &(0x7f0000002bc0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000002c00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002c40)={0x40, 0x21, 0x1, 0x70}}) prlimit64(r3, 0x2, 0x0, &(0x7f0000002d40)) getpriority(0x1, r7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002e00)={'ip6tnl0\x00', &(0x7f0000002d80)={'syztnl2\x00', 0x0, 0x4, 0xf3, 0x8, 0xc, 0x4, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x40, 0x25, 0x7ff}}) writev(r2, &(0x7f0000002f00)=[{&(0x7f0000002e40)="e8a2723379b4ad8d6e0d970bd03840d0e845c72fa6252eabe1d395b120e8be1d39a08ad4501bcab6f1a96860446ad5953224bbb4d73ba4ae774eccc3a75621b563f94bb5c063e13f41b4eedd7856d936534eddf182c392a996bd912b97863ebbe5820495eb4476aedcc077ea359e4e0b90c61373556858c488ae696b4afb4aa4297b8a95ecbe344b0881a5206b1aa05a", 0x90}], 0x1) socket$igmp6(0xa, 0x3, 0x2) getresuid(&(0x7f0000002f40), &(0x7f0000002f80), &(0x7f0000002fc0)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r6) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x40, r10, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x80}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x44801) prlimit64(r3, 0x2, &(0x7f0000003140)={0x0, 0x4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003200)={0x9, &(0x7f0000003180)=[{0x7, 0x7f, 0x81, 0x54}, {0x3ff, 0x23, 0x8, 0x4}, {0xff01, 0x0, 0x2, 0xff}, {0x8, 0xc, 0xc, 0xde6f}, {0x9, 0x1, 0x5, 0x56a}, {0x2, 0x0, 0xf8, 0x8}, {0x40, 0x5, 0x3, 0xb8}, {0x7, 0x7, 0xf2}, {0x1, 0x7, 0xf, 0x3}]}) close_range(r2, r6, 0x2) bind$inet(r6, &(0x7f0000003240)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) getrlimit(0xc, &(0x7f0000003280)) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000032c0)=0x1) execveat(0xffffffffffffffff, &(0x7f0000003300)='./file0\x00', &(0x7f0000003440)={[&(0x7f0000003340)='ip6tnl0\x00', &(0x7f0000003380)='/selinux/enforce\x00', &(0x7f00000033c0)='}\x00', &(0x7f0000003400)='@!)!*[&:\x00']}, &(0x7f00000034c0)={[&(0x7f0000003480)='/[\x00']}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000036c0)={r6, 0x0, 0x0, 0x80, &(0x7f0000003500), &(0x7f0000003540)=""/128, 0x9, 0x0, 0x7e, 0x55, &(0x7f00000035c0)="33f4ce1657f979c6dd75c4f34bd9612ac7f82e04087147cd648c4afefd59519cec429322c172bd1315c2ff524353eb4537129f4973774bfdf2f2cc49a3f857210897834d6f79d92dc4b20a89f31a8204953bc0c4f23f144b00bcdf75284482b75e597438389929389c40e47478de41183bff0500a5f4c4a593187dac0c88", &(0x7f0000003640)="589eaeadf5a3010419fb370cb60526e27ea376ec21268a7ddd8a94f7a161ffd1f215bcc969d20ebcd97ae2ee2399e911edae41dfa96745134b4c6bd807aa5b4401e3bb8b848c64c728b6f86035d0b62c84f94db808", 0x1, 0x0, 0x2}, 0x50) write$UHID_CREATE2(r9, &(0x7f0000003740)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xa2, 0x8, 0xfff, 0xff, 0xdba1, 0xf, "84b65fd5908c4505f861dc2fb6b03027cbee7dd7f6a482e57bd5a6647752cddc2fa9bfefbaf9386b1da5fef617cc52cd17548a89943a515e07223ca9d573bacba09fd6b393bc47214053bf865b3c77b4c22c76d35e2be722f9c1dc8f927640ef54d382f646947466d6cef4731a0a135af7f1b6b6298325d339d0e4c27538632c6dbdd801c1c7d6b1da587d875ef75357b5236f8403f13bfeef94253d369a63342680"}}, 0x1ba) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000003900)) 266.978281ms ago: executing program 7 (id=2048): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) 144.095051ms ago: executing program 7 (id=2049): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="53f61a4122f0", @void, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x30, 0x2, 0x0, 0x0, "cc6b8393b94f2018728020c8c4ad2ff511efd9e66c0fe02c2983c77c5e18885c79706896c38dfae52fb275f01b0f5e71b0bfd0dee39a3c994b7a928d1881e742"}}}}, &(0x7f0000000000)={0x1, 0x4, [0x389, 0x563, 0x8e0, 0x5b2]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x10013, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20800}, 0x4000040) 113.184391ms ago: executing program 7 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x719c9fb3ddc5d761, &(0x7f0000000040)=0x3ff) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) listen(0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB="0000800000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000d0000000004000000110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000000c0)={0x10000002}) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@sysvgroups}, {@data_ordered}, {@nojournal_checksum}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@quota}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 67.941141ms ago: executing program 1 (id=2051): syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x500, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x500, 0x0, 0x1, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) unlinkat(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x200) 0s ago: executing program 1 (id=2052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00e8ffffffffef23b4277effffff00"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) socket$inet(0x2, 0x1, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab05", 0x2d, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): : comm syz.1.1661: casefold flag without casefold feature [ 276.095450][ T1804] Bluetooth: hci0: command 0x1003 tx timeout [ 276.101566][ T3654] Bluetooth: hci0: sending frame failed (-49) [ 276.103041][ T7143] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1661: missing EA_INODE flag [ 276.120103][ T7143] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1661: error while reading EA inode 12 err=-117 [ 276.133000][ T7143] EXT4-fs (loop1): 1 orphan inode deleted [ 276.138685][ T7143] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue [ 276.251493][ T1806] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 276.861418][ T1806] usb 3-1: device descriptor read/64, error -71 [ 277.031433][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 277.324391][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 277.340371][ T7172] device bridge0 entered promiscuous mode [ 277.346161][ T7172] device macsec1 entered promiscuous mode [ 277.354488][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 277.361299][ T7172] device bridge0 left promiscuous mode [ 277.471741][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.487398][ T25] usb 5-1: config 0 has no interface number 0 [ 277.488716][ T1806] usb 3-1: device descriptor read/64, error -71 [ 277.501419][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.512785][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.522593][ T25] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 277.531910][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.540589][ T25] usb 5-1: config 0 descriptor?? [ 277.771394][ T1806] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 278.028140][ T7174] input: syz0 as /devices/virtual/input/input35 [ 278.041554][ T1806] usb 3-1: device descriptor read/64, error -71 [ 278.058088][ T7174] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 278.080763][ T7176] input: syz0 as /devices/virtual/input/input36 [ 278.087320][ T25] usbhid 5-1:0.1: can't add hid device: -71 [ 278.094986][ T25] usbhid: probe of 5-1:0.1 failed with error -71 [ 278.107681][ T25] usb 5-1: USB disconnect, device number 34 [ 278.116150][ T7176] FAULT_INJECTION: forcing a failure. [ 278.116150][ T7176] name failslab, interval 1, probability 0, space 0, times 1 [ 278.128759][ T7176] CPU: 0 PID: 7176 Comm: syz.1.1669 Tainted: G W 5.10.232-syzkaller-00746-g49e8ba0a684f #0 [ 278.139928][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.149818][ T7176] Call Trace: [ 278.153051][ T7176] dump_stack_lvl+0x1e2/0x24b [ 278.157576][ T7176] ? panic+0x812/0x812 [ 278.161580][ T7176] ? bfq_pos_tree_add_move+0x43b/0x43b [ 278.166978][ T7176] ? kstrtouint_from_user+0x20a/0x2a0 [ 278.172252][ T7176] dump_stack+0x15/0x17 [ 278.176353][ T7176] should_fail+0x3c6/0x510 [ 278.180613][ T7176] ? bm_register_write+0xbf/0x1240 [ 278.185538][ T7176] __should_failslab+0xa4/0xe0 [ 278.190367][ T7176] should_failslab+0x9/0x20 [ 278.194700][ T7176] __kmalloc+0x60/0x330 [ 278.198778][ T7176] ? selinux_file_permission+0x2bb/0x560 [ 278.204311][ T7176] bm_register_write+0xbf/0x1240 [ 278.209077][ T7176] ? security_file_permission+0x86/0xb0 [ 278.214798][ T7176] ? rw_verify_area+0x1c3/0x360 [ 278.219494][ T7176] ? remove_binfmt_handler+0x310/0x310 [ 278.224937][ T7176] vfs_write+0x36a/0xe70 [ 278.229110][ T7176] ? kmem_cache_free+0x1c0/0x1e0 [ 278.234086][ T7176] ? kernel_write+0x3d0/0x3d0 [ 278.238561][ T7176] ? putname+0xe7/0x140 [ 278.242738][ T7176] ? do_sys_openat2+0x1fc/0x710 [ 278.247428][ T7176] ? do_sys_open+0x220/0x220 [ 278.251876][ T7176] ? __kasan_check_read+0x11/0x20 [ 278.256720][ T7176] ? __fdget_pos+0x2ee/0x3a0 [ 278.261147][ T7176] ksys_write+0x199/0x2c0 [ 278.265327][ T7176] ? __ia32_sys_read+0x90/0x90 [ 278.269930][ T7176] ? debug_smp_processor_id+0x17/0x20 [ 278.276055][ T7176] __x64_sys_write+0x7b/0x90 [ 278.280599][ T7176] do_syscall_64+0x34/0x70 [ 278.284920][ T7176] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 278.290812][ T7176] RIP: 0033:0x7fb4ab5a3d29 [ 278.295009][ T7176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.314631][ T7176] RSP: 002b:00007fb4a9c15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.322875][ T7176] RAX: ffffffffffffffda RBX: 00007fb4ab793fa0 RCX: 00007fb4ab5a3d29 [ 278.330769][ T7176] RDX: 0000000000000030 RSI: 0000000020000040 RDI: 000000000000000f [ 278.338596][ T7176] RBP: 00007fb4a9c15090 R08: 0000000000000000 R09: 0000000000000000 [ 278.346739][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.354879][ T7176] R13: 0000000000000000 R14: 00007fb4ab793fa0 R15: 00007ffece6e63d8 [ 278.363529][ T1807] Bluetooth: hci0: command 0x1001 tx timeout [ 278.371602][ T3654] Bluetooth: hci0: sending frame failed (-49) [ 278.454940][ T608] print_req_error: 149 callbacks suppressed [ 278.454956][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 278.471087][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 278.474645][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 278.487889][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.513619][ T309] buffer_io_error: 132 callbacks suppressed [ 278.513631][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 278.528143][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.539475][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.550763][ T608] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 278.559251][ T309] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.571065][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 278.579420][ T608] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.579489][ T2472] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.592199][ T608] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 278.609138][ T309] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 278.610310][ T608] blk_update_request: I/O error, dev loop1, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.617784][ T309] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 278.629055][ T608] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 278.636535][ T2472] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 278.644636][ T608] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 278.652555][ T309] Buffer I/O error on dev loop1p2, logical block 11, async page read [ 278.789020][ T7196] netlink: 'syz.2.1675': attribute type 4 has an invalid length. [ 278.837549][ T7196] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1675'. [ 278.934225][ T7206] device bridge2 entered promiscuous mode [ 279.220319][ T7218] input: syz0 as /devices/virtual/input/input37 [ 279.301497][ T1804] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 279.731562][ T1804] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 279.751454][ T1804] usb 4-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.771446][ T1804] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 279.794946][ T1804] usb 4-1: config 1 interface 0 has no altsetting 0 [ 279.947589][ T7232] input: syz0 as /devices/virtual/input/input38 [ 279.971556][ T1804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 279.991214][ T1804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.008403][ T1804] usb 4-1: Product: syz [ 280.013650][ T1804] usb 4-1: Manufacturer: syz [ 280.018126][ T1804] usb 4-1: SerialNumber: syz [ 280.039279][ T7236] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 280.072394][ T7236] EXT4-fs (loop1): orphan cleanup on readonly fs [ 280.079204][ T7236] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 280.094645][ T7236] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 280.102239][ T7236] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #16: comm syz.1.1686: iget: immutable or append flags not allowed on symlinks [ 280.125453][ T7236] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1686: couldn't read orphan inode 16 (err -117) [ 280.137723][ T7236] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 280.169651][ T7243] fuse: Bad value for 'rootmode' [ 280.205115][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1690'. [ 280.216468][ T7246] device vlan2 entered promiscuous mode [ 280.223905][ T1807] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 280.316714][ T7246] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 280.316714][ T7246] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 280.316714][ T7246] [ 280.335302][ T7246] EXT4-fs (loop1): Unrecognized mount option "smackfsfloor=quota" or missing value [ 280.381452][ T1802] Bluetooth: hci0: command 0x1009 tx timeout [ 280.667580][ T7246] EXT4-fs (loop1): Invalid want_extra_isize 125 [ 280.836671][ T1807] usb 3-1: Using ep0 maxpacket: 32 [ 280.863104][ T1804] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 280.877156][ T1804] usb 4-1: USB disconnect, device number 46 [ 280.886057][ T1804] usblp0: removed [ 280.969569][ T7261] 9pnet: Insufficient options for proto=fd [ 281.261519][ T1807] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.269618][ T1807] usb 3-1: config 0 has no interface number 0 [ 281.276096][ T1807] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.287115][ T1807] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.296813][ T1807] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 281.305912][ T1807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.317997][ T1807] usb 3-1: config 0 descriptor?? [ 281.991475][ T1807] usbhid 3-1:0.1: can't add hid device: -71 [ 281.997375][ T1807] usbhid: probe of 3-1:0.1 failed with error -71 [ 282.004821][ T1807] usb 3-1: USB disconnect, device number 39 [ 282.216017][ T7277] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 282.502989][ T7281] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 282.514625][ T7281] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.604551][ T24] kauditd_printk_skb: 136 callbacks suppressed [ 282.604566][ T24] audit: type=1326 audit(2000000017.390:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7287 comm="syz.4.1699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x0 [ 282.963775][ T7294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 282.975851][ T7294] EXT4-fs (loop1): 1 truncate cleaned up [ 282.981497][ T7294] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,min_batch_time=0x0000000000000fff,journal_dev=0x0000000000000005,quota,abort,max_batch_time=0x0000000000000004,,errors=continue [ 283.009841][ T7294] syz.1.1701 (pid 7294) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 283.291430][ T1807] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 283.458108][ T24] audit: type=1326 audit(2000000018.240:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.485194][ T24] audit: type=1326 audit(2000000018.270:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.510012][ T24] audit: type=1326 audit(2000000018.270:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.534168][ T1807] usb 2-1: Using ep0 maxpacket: 8 [ 283.539251][ T24] audit: type=1326 audit(2000000018.270:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.564227][ T24] audit: type=1326 audit(2000000018.270:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.588084][ T24] audit: type=1326 audit(2000000018.270:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.611793][ T24] audit: type=1326 audit(2000000018.270:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.635807][ T24] audit: type=1326 audit(2000000018.270:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 283.671458][ T1807] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 283.679410][ T1807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.689729][ T1807] usb 2-1: config 0 has no interface number 0 [ 283.842807][ T7319] input: syz0 as /devices/virtual/input/input40 [ 283.861731][ T1807] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 283.878601][ T1807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.887887][ T1807] usb 2-1: Product: syz [ 283.892757][ T1807] usb 2-1: Manufacturer: syz [ 283.897609][ T1807] usb 2-1: SerialNumber: syz [ 283.906558][ T1807] usb 2-1: config 0 descriptor?? [ 284.173420][ T7321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1708'. [ 284.191656][ T1807] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 284.202853][ T1807] uvcvideo: No valid video chain found. [ 284.223719][ T1807] usb 2-1: USB disconnect, device number 31 [ 285.529886][ T309] print_req_error: 134 callbacks suppressed [ 285.529902][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 285.553367][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 285.553416][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.565630][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.586916][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.604866][ T608] buffer_io_error: 118 callbacks suppressed [ 285.604878][ T608] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 285.627159][ T7362] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.637409][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 285.648095][ T7362] EXT4-fs (loop1): 1 truncate cleaned up [ 285.660350][ T7362] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,nombcache,noload,,errors=continue [ 285.703386][ T7359] input: syz0 as /devices/virtual/input/input41 [ 285.733057][ T24] audit: type=1400 audit(2000000020.520:7702): avc: denied { unlink } for pid=7361 comm="syz.1.1719" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 285.762749][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 286.259120][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 286.742945][ T309] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.755462][ T309] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.759113][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.771413][ T309] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 286.790409][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.791285][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 286.813239][ T608] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 286.821254][ T608] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 286.821384][ T7375] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 286.829439][ T7375] EXT4-fs (loop2): mount failed [ 286.841762][ T608] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 286.852027][ T309] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 286.860440][ T608] Buffer I/O error on dev loop1p2, logical block 11, async page read [ 286.870534][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 286.898513][ T1802] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 286.985230][ T7393] input: syz0 as /devices/virtual/input/input42 [ 287.421441][ T1802] usb 6-1: Using ep0 maxpacket: 8 [ 287.559807][ T7406] input: syz0 as /devices/virtual/input/input43 [ 288.311585][ T1802] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 288.334102][ T1802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.351409][ T1802] usb 6-1: Product: syz [ 288.355469][ T1802] usb 6-1: Manufacturer: syz [ 288.359922][ T1802] usb 6-1: SerialNumber: syz [ 288.627055][ T24] kauditd_printk_skb: 81 callbacks suppressed [ 288.627069][ T24] audit: type=1400 audit(2000000023.400:7784): avc: denied { nlmsg_write } for pid=7423 comm="syz.1.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 288.682235][ T1802] usb 6-1: config 0 descriptor?? [ 288.699939][ T24] audit: type=1107 audit(2000000023.400:7785): pid=7423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 288.725719][ T7427] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 288.822467][ T7427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 288.829887][ T7427] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 288.839261][ T7427] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 288.853567][ T7427] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 288.860955][ T7427] EXT4-fs (loop1): 1 truncate cleaned up [ 288.866572][ T7427] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 288.881291][ T1802] usb_ehset_test: probe of 6-1:0.0 failed with error -32 [ 288.896771][ T7427] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.1736: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 288.924076][ T1802] usb 6-1: USB disconnect, device number 24 [ 288.933682][ T24] audit: type=1326 audit(2000000023.720:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 288.989410][ T24] audit: type=1326 audit(2000000023.740:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 289.036535][ T24] audit: type=1326 audit(2000000023.820:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 289.077762][ T7443] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 289.174518][ T24] audit: type=1326 audit(2000000023.850:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8ced245e5 code=0x7ffc0000 [ 289.179871][ T7443] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.217244][ T7443] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x000000000000cac8,delalloc,resuid=0x0000000000000000,noquota,dioread_nolock,jqfmt=vfsold,sysvgroups,noauto_da_alloc,,errors=continue [ 289.244223][ T24] audit: type=1326 audit(2000000024.020:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 289.268516][ T7443] xt_hashlimit: size too large, truncated to 1048576 [ 289.287160][ T24] audit: type=1400 audit(2000000024.050:7791): avc: denied { mounton } for pid=7442 comm="syz.5.1741" path="/186/bus/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.323327][ T24] audit: type=1400 audit(2000000024.110:7792): avc: denied { bind } for pid=7442 comm="syz.5.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.431110][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'. [ 289.474347][ T7445] device erspan0 entered promiscuous mode [ 289.589973][ T7479] input: syz0 as /devices/virtual/input/input44 [ 290.141452][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 290.171422][ T1806] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 290.211531][ T2895] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 290.381789][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 290.411465][ T1806] usb 6-1: Using ep0 maxpacket: 16 [ 290.425365][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.531502][ T1806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.542466][ T1806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.552730][ T1806] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 290.561747][ T1806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.570271][ T1806] usb 6-1: config 0 descriptor?? [ 290.582016][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.593366][ T25] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 290.604352][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.839855][ T25] usb 2-1: config 0 descriptor?? [ 290.891553][ T2895] usb 5-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 290.903248][ T2895] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.916476][ T2895] usb 5-1: New USB device found, idVendor=256c, idProduct=806d, bcdDevice= 0.00 [ 290.925437][ T2895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.934451][ T2895] usb 5-1: config 0 descriptor?? [ 291.093191][ T7487] 9pnet: Insufficient options for proto=fd [ 291.306734][ T1806] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 291.481880][ T2895] usb 5-1: language id specifier not provided by device, defaulting to English [ 292.604865][ T2895] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 292.616244][ T2895] usb 5-1: USB disconnect, device number 35 [ 292.788446][ T7489] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 292.797152][ T7489] EXT4-fs error (device loop5): ext4_dirty_inode:6110: inode #3: comm syz.5.1751: mark_inode_dirty error [ 292.809382][ T7489] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 292.818012][ T7489] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #3: comm syz.5.1751: mark_inode_dirty error [ 292.829959][ T7489] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.1751: Failed to acquire dquot type 0 [ 292.842802][ T7489] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 292.851891][ T7489] EXT4-fs error (device loop5): ext4_dirty_inode:6110: inode #16: comm syz.5.1751: mark_inode_dirty error [ 292.863980][ T7489] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 292.872443][ T7489] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #16: comm syz.5.1751: mark_inode_dirty error [ 292.887998][ T7489] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 292.896768][ T7489] EXT4-fs error (device loop5) in ext4_orphan_del:3292: error 27 [ 292.905497][ T7489] EXT4-fs error (device loop5) in ext4_do_update_inode:5303: error 27 [ 292.918922][ T7489] EXT4-fs error (device loop5): ext4_truncate:4389: inode #16: comm syz.5.1751: mark_inode_dirty error [ 292.933480][ T7489] EXT4-fs error (device loop5) in ext4_orphan_cleanup:3108: error 27 [ 292.943636][ T7489] EXT4-fs (loop5): 1 truncate cleaned up [ 292.949462][ T7489] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 292.958561][ T7489] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.019289][ T1806] usb 6-1: USB disconnect, device number 25 [ 293.026375][ T1808] Bluetooth: hci0: command 0x1003 tx timeout [ 293.033731][ T3654] Bluetooth: hci0: sending frame failed (-49) [ 293.040511][ T1805] usb 2-1: USB disconnect, device number 32 [ 293.045027][ T608] print_req_error: 197 callbacks suppressed [ 293.045044][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 293.065429][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.077562][ T608] buffer_io_error: 173 callbacks suppressed [ 293.077573][ T608] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 293.118670][ T7526] EXT4-fs (loop1): Invalid want_extra_isize 3 [ 293.223695][ T2472] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 293.278607][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 293.520311][ T2471] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 293.690526][ T2472] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.742784][ T2471] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.777506][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.788491][ T608] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 293.796499][ T608] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.807554][ T608] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 293.810535][ T2472] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 293.815708][ T608] blk_update_request: I/O error, dev loop1, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.829030][ T2472] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 293.842033][ T2471] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 293.843875][ T2472] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 293.851470][ T608] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 293.859663][ T2472] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 293.875375][ T2472] Buffer I/O error on dev loop1p3, logical block 12, async page read [ 294.047766][ T7547] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 294.076746][ T7547] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 294.087675][ T7547] F2FS-fs (loop5): Unrecognized mount option "noinline_xatur" or missing value [ 294.112989][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 294.113003][ T24] audit: type=1400 audit(2000000028.900:7822): avc: denied { ioctl } for pid=7553 comm="syz.3.1767" path="socket:[41178]" dev="sockfs" ino=41178 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.176286][ T24] audit: type=1400 audit(2000000028.900:7823): avc: denied { bind } for pid=7553 comm="syz.3.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.367076][ T7559] input: syz0 as /devices/virtual/input/input45 [ 294.476603][ T7568] overlayfs: './file0' not a directory [ 294.714037][ T24] audit: type=1400 audit(2000000029.500:7824): avc: denied { map } for pid=7572 comm="syz.3.1773" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 294.738010][ T7573] binder_alloc: binder_alloc_mmap_handler: 7572 20fff000-21000000 already mapped failed -16 [ 294.751452][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 294.769806][ T24] audit: type=1326 audit(2000000029.550:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 294.799723][ T24] audit: type=1326 audit(2000000029.550:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 294.825048][ T24] audit: type=1326 audit(2000000029.560:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 294.849693][ T24] audit: type=1326 audit(2000000029.560:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 294.874475][ T24] audit: type=1326 audit(2000000029.560:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 294.899441][ T24] audit: type=1326 audit(2000000029.560:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 294.925924][ T24] audit: type=1326 audit(2000000029.560:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.5.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 295.053862][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 295.061512][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 295.125832][ T7585] device veth0_vlan left promiscuous mode [ 295.134007][ T7585] device veth0_vlan entered promiscuous mode [ 295.149313][ T7585] device veth1_macvtap left promiscuous mode [ 295.159765][ T7585] device veth1_macvtap entered promiscuous mode [ 295.199918][ T1805] Bluetooth: hci0: command 0x1001 tx timeout [ 295.206331][ T3654] Bluetooth: hci0: sending frame failed (-49) [ 295.214425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.222104][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 295.227466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.235119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.243741][ T7] bridge2: port 3(bridge_slave_1) entered blocking state [ 295.250790][ T7] bridge2: port 3(bridge_slave_1) entered forwarding state [ 295.258550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.266953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 295.275086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.283366][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 295.291742][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.299918][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.308138][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.316801][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.325158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.333889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.343009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.351834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.360287][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.369329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.377938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.386417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.395657][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.403933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.413136][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.421550][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 295.422562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.437660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.445498][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.452897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.460405][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.468572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.476903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.486687][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 295.495209][ T7] bridge2: port 1(veth3) entered blocking state [ 295.501286][ T7] bridge2: port 1(veth3) entered forwarding state [ 295.510961][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 295.518627][ T25] usb 5-1: config 151 has an invalid interface number: 193 but max is 0 [ 295.539102][ T25] usb 5-1: config 151 has no interface number 0 [ 295.546470][ T25] usb 5-1: config 151 interface 193 has no altsetting 0 [ 295.556729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 295.565034][ T7] bridge2: port 2(veth5) entered blocking state [ 295.571259][ T7] bridge2: port 2(veth5) entered forwarding state [ 295.580765][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 295.698136][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 295.741272][ T25] usb 5-1: New USB device found, idVendor=0499, idProduct=101c, bcdDevice=7c.77 [ 295.756665][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.794953][ T25] usb 5-1: Product: syz [ 295.802741][ T25] usb 5-1: Manufacturer: ࠾ [ 295.807314][ T25] usb 5-1: SerialNumber: syz [ 296.236155][ T7] Bluetooth: hci1: Frame reassembly failed (-84) [ 296.282059][ T25] snd-usb-audio: probe of 5-1:151.193 failed with error -2 [ 296.289802][ T25] usb 5-1: USB disconnect, device number 36 [ 296.314909][ T7602] input: syz0 as /devices/virtual/input/input46 [ 296.488067][ T7605] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 296.497887][ T7605] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 296.508231][ T7605] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.528943][ T7605] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 296.536286][ T7605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 296.697916][ T7618] udc-core: couldn't find an available UDC or it's busy [ 296.705579][ T7618] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 296.812223][ T286] attempt to access beyond end of device [ 296.812223][ T286] loop1: rw=2049, want=40968, limit=40427 [ 296.961397][ T1808] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 297.029029][ T7630] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.1788: casefold flag without casefold feature [ 297.042629][ T7630] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1788: missing EA_INODE flag [ 297.054577][ T25] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 297.064727][ T7630] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1788: error while reading EA inode 12 err=-117 [ 297.078862][ T7630] EXT4-fs (loop1): 1 orphan inode deleted [ 297.084593][ T7630] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue [ 297.110834][ T7634] netlink: 'syz.1.1789': attribute type 1 has an invalid length. [ 297.231595][ T1808] usb 4-1: device descriptor read/64, error -71 [ 297.262010][ T1805] Bluetooth: hci0: command 0x1009 tx timeout [ 297.301470][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 297.381505][ T1806] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 297.441530][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.452684][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.462406][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 297.471264][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.479530][ T25] usb 5-1: config 0 descriptor?? [ 297.542012][ T25] hub 5-1:0.0: USB hub found [ 297.621567][ T1808] usb 4-1: device descriptor read/64, error -71 [ 297.742920][ T1806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.754534][ T1806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.765080][ T1806] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 297.774020][ T1806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.782840][ T1806] usb 2-1: config 0 descriptor?? [ 297.851526][ T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 297.901448][ T1808] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 297.971694][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 297.977643][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 298.011762][ T25] usb 5-1: USB disconnect, device number 37 [ 298.171477][ T1808] usb 4-1: device descriptor read/64, error -71 [ 298.262108][ T1806] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 298.268694][ T1806] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 298.275939][ T1806] arvo 0003:1E7D:30D4.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 298.301448][ T1805] Bluetooth: hci1: command 0x1003 tx timeout [ 298.307577][ T7600] Bluetooth: hci1: sending frame failed (-49) [ 298.561391][ T1808] usb 4-1: device descriptor read/64, error -71 [ 298.688238][ T1808] usb usb4-port1: attempt power cycle [ 298.694011][ T1806] usb 2-1: USB disconnect, device number 33 [ 298.774664][ T7638] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 299.101414][ T1808] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 299.214243][ T309] print_req_error: 186 callbacks suppressed [ 299.214262][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 299.224640][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 299.233071][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 299.242947][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.254757][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.265619][ T2472] buffer_io_error: 164 callbacks suppressed [ 299.265631][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 299.277334][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.301563][ T1808] usb 4-1: device descriptor read/8, error -71 [ 299.308574][ T7646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1792'. [ 299.323323][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 299.331215][ T608] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 299.339693][ T309] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.350929][ T608] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.362643][ T309] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 299.370670][ T608] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 299.379048][ T2472] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.390440][ T309] blk_update_request: I/O error, dev loop1, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.414440][ T608] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 299.424228][ T2472] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 299.432796][ T309] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 299.442017][ T608] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 299.452288][ T2472] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 299.591438][ T1808] usb 4-1: device descriptor read/8, error -71 [ 300.385363][ T1806] Bluetooth: hci1: command 0x1001 tx timeout [ 300.397656][ T7600] Bluetooth: hci1: sending frame failed (-49) [ 300.663714][ T7677] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 300.686325][ T7677] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 300.734553][ T7677] F2FS-fs (loop1): invalid crc value [ 300.760436][ T7677] F2FS-fs (loop1): Found nat_bits in checkpoint [ 300.831723][ T7677] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 300.848799][ T7677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 300.919946][ T7677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7677 comm=syz.1.1800 [ 301.097358][ T1808] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 301.353463][ T7689] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39064 sclass=netlink_xfrm_socket pid=7689 comm=syz.1.1800 [ 301.571427][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 301.571441][ T24] audit: type=1400 audit(2000000036.330:7867): avc: denied { create } for pid=7690 comm="syz.4.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 302.111254][ T1808] usb 3-1: Using ep0 maxpacket: 16 [ 302.271456][ T1808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.361513][ T1808] usb 3-1: config index 0 descriptor too short (expected 2093, got 45) [ 302.369608][ T1808] usb 3-1: config 7 has an invalid interface number: 117 but max is 0 [ 302.377912][ T24] audit: type=1326 audit(2000000037.130:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.434966][ T1808] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 302.445836][ T24] audit: type=1326 audit(2000000037.130:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.649644][ T1808] usb 3-1: config 7 has no interface number 0 [ 302.656957][ T1808] usb 3-1: config 7 interface 117 has no altsetting 0 [ 302.664266][ T1804] Bluetooth: hci1: command 0x1009 tx timeout [ 302.672207][ T24] audit: type=1326 audit(2000000037.130:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.696005][ T24] audit: type=1326 audit(2000000037.130:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.723736][ T24] audit: type=1326 audit(2000000037.130:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.748337][ T24] audit: type=1326 audit(2000000037.130:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.772218][ T24] audit: type=1326 audit(2000000037.130:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.797649][ T24] audit: type=1326 audit(2000000037.130:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.821377][ T24] audit: type=1326 audit(2000000037.130:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe573334d29 code=0x7ffc0000 [ 302.862214][ T1808] usb 3-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=ed.ff [ 302.877292][ T1808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.893430][ T1808] usb 3-1: Product: syz [ 302.902609][ T1808] usb 3-1: Manufacturer: syz [ 302.911173][ T1808] usb 3-1: SerialNumber: syz [ 303.162058][ T7685] xt_socket: unknown flags 0x58 [ 303.241768][ T1808] usb 3-1: bad CDC descriptors [ 303.251687][ T1808] usb 3-1: USB disconnect, device number 40 [ 303.416578][ T7724] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 303.447275][ T7724] EXT4-fs (loop1): Ignoring removed bh option [ 303.466000][ T7724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 303.478182][ T7724] EXT4-fs (loop1): 1 truncate cleaned up [ 303.483966][ T7724] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue [ 303.954011][ T7739] netlink: 'syz.3.1815': attribute type 16 has an invalid length. [ 303.961987][ T7739] netlink: 64102 bytes leftover after parsing attributes in process `syz.3.1815'. [ 304.032600][ T2895] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 304.040045][ T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 304.461478][ T2895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.471753][ T25] usb 5-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 304.481929][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.494799][ T2895] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 304.503921][ T2895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.511941][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=806d, bcdDevice= 0.00 [ 304.521163][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.529304][ T2895] usb 3-1: config 0 descriptor?? [ 304.534596][ T25] usb 5-1: config 0 descriptor?? [ 305.102888][ T2472] print_req_error: 260 callbacks suppressed [ 305.102906][ T2472] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 305.103258][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 305.108932][ T2472] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.147094][ T2471] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 305.151463][ T25] usb 5-1: language id specifier not provided by device, defaulting to English [ 305.159452][ T2471] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.185691][ T2471] buffer_io_error: 230 callbacks suppressed [ 305.185703][ T2471] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 305.200351][ T2471] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.211967][ T2471] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 305.220004][ T2471] blk_update_request: I/O error, dev loop1, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.231298][ T2472] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 305.232391][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.239661][ T2471] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 305.250304][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 305.266274][ T2472] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.266392][ T309] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.277960][ T2472] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 305.288578][ T309] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 305.296394][ T2471] Buffer I/O error on dev loop1p7, logical block 11, async page read [ 305.312370][ T2472] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 305.365688][ T309] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 305.527660][ T7770] EXT4-fs (loop1): Test dummy encryption mode enabled [ 305.534989][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 305.542329][ T7770] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.1822: casefold flag without casefold feature [ 305.556174][ T7770] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 305.566347][ T7770] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue [ 305.622783][ T25] usb 5-1: USB disconnect, device number 38 [ 305.987264][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 306.301616][ T1809] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 306.361456][ T1807] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 306.582489][ T24] kauditd_printk_skb: 115 callbacks suppressed [ 306.582513][ T24] audit: type=1326 audit(2000000041.370:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 306.622039][ T24] audit: type=1326 audit(2000000041.400:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 306.648291][ T24] audit: type=1326 audit(2000000041.430:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 306.678711][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1833'. [ 306.695023][ T7811] device vlan2 entered promiscuous mode [ 306.700467][ T7811] device gretap0 entered promiscuous mode [ 306.708978][ T1809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.724232][ T24] audit: type=1326 audit(2000000041.460:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 306.749169][ T1809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.760734][ T1809] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 306.771200][ T24] audit: type=1326 audit(2000000041.510:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 306.795740][ T1807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.806830][ T1809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.873123][ T1807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.931958][ T1809] usb 2-1: config 0 descriptor?? [ 306.966809][ T1807] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 306.981443][ T24] audit: type=1326 audit(2000000041.760:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 307.022438][ T1807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.051551][ T1807] usb 4-1: config 0 descriptor?? [ 307.056844][ T24] audit: type=1326 audit(2000000041.760:7998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 307.083570][ T7811] device gretap0 left promiscuous mode [ 307.093280][ T1808] usb 3-1: USB disconnect, device number 41 [ 307.292663][ T7814] fuse: blksize only supported for fuseblk [ 307.392591][ T24] audit: type=1326 audit(2000000041.760:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 307.416355][ T24] audit: type=1326 audit(2000000041.760:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ab5a392b code=0x7ffc0000 [ 307.445240][ T1807] uclogic 0003:5543:0042.001E: unbalanced collection at end of report description [ 307.456774][ T24] audit: type=1326 audit(2000000041.790:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4ab5d65e5 code=0x7ffc0000 [ 307.482961][ T1809] itetech 0003:06CB:73F6.001F: collection stack underflow [ 307.490221][ T1809] itetech 0003:06CB:73F6.001F: item 0 2 0 12 parsing failed [ 307.498156][ T1807] uclogic 0003:5543:0042.001E: parse failed [ 307.504231][ T1807] uclogic: probe of 0003:5543:0042.001E failed with error -22 [ 307.512070][ T1809] itetech: probe of 0003:06CB:73F6.001F failed with error -22 [ 307.780523][ T20] usb 2-1: USB disconnect, device number 34 [ 307.781513][ T1807] usb 4-1: USB disconnect, device number 51 [ 307.801411][ T1808] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 307.834210][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 308.451455][ T1808] usb 3-1: device descriptor read/64, error -71 [ 308.585189][ T7851] device pim6reg1 entered promiscuous mode [ 308.605573][ T7853] xt_TCPMSS: Only works on TCP SYN packets [ 308.631471][ T532] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 308.663414][ T7853] overlayfs: failed to resolve './file1': -2 [ 308.711744][ T7855] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 308.723985][ T7855] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.851399][ T1808] usb 3-1: device descriptor read/64, error -71 [ 308.862134][ T7866] xt_l2tp: v2 sid > 0xffff: 117440512 [ 308.981604][ T20] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 309.103959][ T532] usb 5-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 309.115633][ T532] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.129377][ T532] usb 5-1: New USB device found, idVendor=256c, idProduct=806d, bcdDevice= 0.00 [ 309.138785][ T532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.179299][ T532] usb 5-1: config 0 descriptor?? [ 309.189788][ T1808] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 309.381598][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.393190][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.403331][ T20] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 309.412691][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.421589][ T20] usb 4-1: config 0 descriptor?? [ 309.485847][ T1808] usb 3-1: device descriptor read/64, error -71 [ 309.711538][ T532] usb 5-1: language id specifier not provided by device, defaulting to English [ 310.091870][ T532] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 310.102271][ T532] usb 5-1: USB disconnect, device number 39 [ 310.131440][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 310.137544][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 310.152206][ T20] usb 4-1: USB disconnect, device number 52 [ 310.171461][ T1808] usb 3-1: device descriptor read/64, error -71 [ 310.181957][ T7897] overlayfs: missing 'lowerdir' [ 310.292645][ T1808] usb usb3-port1: attempt power cycle [ 310.362329][ T7901] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 310.377567][ T7901] ext4 filesystem being mounted at /379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.566703][ T309] print_req_error: 201 callbacks suppressed [ 310.566721][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 310.605312][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 310.619862][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 310.675760][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.690715][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.699072][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.714947][ T309] buffer_io_error: 180 callbacks suppressed [ 310.714970][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 310.721409][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 310.729264][ T309] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.736658][ T608] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 310.736703][ T608] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.736713][ T608] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 310.736744][ T608] blk_update_request: I/O error, dev loop1, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.736753][ T608] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 310.736782][ T608] blk_update_request: I/O error, dev loop1, sector 211 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.736790][ T608] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 310.736817][ T608] Buffer I/O error on dev loop1p3, logical block 12, async page read [ 310.736841][ T608] Buffer I/O error on dev loop1p3, logical block 13, async page read [ 310.736865][ T608] Buffer I/O error on dev loop1p3, logical block 14, async page read [ 310.748198][ T309] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 310.821406][ T1808] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 310.855359][ T7912] EXT4-fs (loop5): Ignoring removed nobh option [ 310.862658][ T7912] EXT4-fs (loop5): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 311.091496][ T1808] usb 3-1: Using ep0 maxpacket: 16 [ 311.312439][ T1808] usb 3-1: config 43 has too many interfaces: 164, using maximum allowed: 32 [ 311.391984][ T1808] usb 3-1: config 43 has an invalid descriptor of length 252, skipping remainder of the config [ 311.402996][ T1808] usb 3-1: config 43 has 0 interfaces, different from the descriptor's value: 164 [ 311.578860][ T1808] usb 3-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=6c.f5 [ 311.588301][ T1808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.596921][ T1808] usb 3-1: Product: syz [ 311.601406][ T1808] usb 3-1: Manufacturer: syz [ 311.605907][ T1808] usb 3-1: SerialNumber: syz [ 311.773859][ T1807] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 311.926845][ T1808] usb 3-1: USB disconnect, device number 44 [ 312.037896][ T24] kauditd_printk_skb: 94 callbacks suppressed [ 312.037905][ T24] audit: type=1400 audit(2000000501.750:8096): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 312.164066][ T1807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.175108][ T1807] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.184084][ T1807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.197302][ T1807] usb 6-1: config 0 descriptor?? [ 312.510968][ T1808] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 312.685895][ T7945] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 312.694951][ T7945] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.717339][ T1807] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 312.726791][ T1807] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0020/input/input47 [ 312.781790][ T1808] usb 4-1: Using ep0 maxpacket: 16 [ 312.805860][ T1807] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 312.911919][ T1808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.922227][ T1808] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.931513][ T1808] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 312.940932][ T1808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.950482][ T1808] usb 4-1: config 0 descriptor?? [ 313.009377][ T532] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 313.221420][ T1808] usb 4-1: USB disconnect, device number 53 [ 313.580579][ T1808] usb 6-1: USB disconnect, device number 26 [ 313.800597][ T532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.811393][ T532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.821039][ T532] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 313.830010][ T532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.838786][ T532] usb 3-1: config 0 descriptor?? [ 314.093125][ T1809] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 314.109546][ T1808] usb 3-1: USB disconnect, device number 45 [ 314.646771][ T532] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 314.656196][ T7968] input: syz0 as /devices/virtual/input/input48 [ 314.743446][ T1809] usb 4-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 314.753586][ T1809] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.766781][ T1809] usb 4-1: New USB device found, idVendor=256c, idProduct=806d, bcdDevice= 0.00 [ 314.776475][ T1809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.789182][ T1809] usb 4-1: config 0 descriptor?? [ 314.910487][ T24] audit: type=1326 audit(2000000504.399:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 314.934749][ T24] audit: type=1326 audit(2000000504.399:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 314.958994][ T532] usb 2-1: Using ep0 maxpacket: 16 [ 314.968225][ T24] audit: type=1326 audit(2000000504.399:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 314.991829][ T24] audit: type=1326 audit(2000000504.426:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cecf1d29 code=0x7ffc0000 [ 315.146431][ T7988] 9pnet: Insufficient options for proto=fd [ 315.155537][ T532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.166654][ T532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.177662][ T532] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 315.187596][ T532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.196608][ T532] usb 2-1: config 0 descriptor?? [ 315.526056][ T20] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 315.530958][ T1809] usb 4-1: language id specifier not provided by device, defaulting to English [ 315.611001][ T1809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 315.619206][ T1809] usb 4-1: USB disconnect, device number 54 [ 315.859706][ T20] usb 5-1: device descriptor read/64, error -71 [ 315.889811][ T24] audit: type=1107 audit(2000000960.301:8101): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='rs' [ 315.925725][ T7971] F2FS-fs (loop1): invalid crc value [ 315.939790][ T7971] F2FS-fs (loop1): Found nat_bits in checkpoint [ 315.977491][ T7971] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 316.975260][ T532] hid-multitouch 0003:1FD2:6007.0021: unknown main item tag 0x4 [ 316.997197][ T532] hid-multitouch 0003:1FD2:6007.0021: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 317.236490][ T20] usb 5-1: device descriptor read/64, error -71 [ 317.244645][ T24] audit: type=1326 audit(2000000961.547:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 317.268630][ T24] audit: type=1326 audit(2000000961.556:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 317.296822][ T24] audit: type=1326 audit(2000000961.556:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 317.328483][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 317.341970][ T24] audit: type=1326 audit(2000000961.556:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 317.844830][ T24] audit: type=1326 audit(2000000961.556:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 317.908205][ T20] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 317.956143][ T24] audit: type=1326 audit(2000000961.556:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.109717][ T24] audit: type=1326 audit(2000000961.556:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.133771][ T24] audit: type=1326 audit(2000000961.556:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.165501][ T24] audit: type=1326 audit(2000000961.556:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.189387][ T24] audit: type=1326 audit(2000000961.556:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.218741][ T24] audit: type=1326 audit(2000000961.556:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.256264][ T24] audit: type=1326 audit(2000000961.556:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.374189][ T24] audit: type=1326 audit(2000000961.556:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.377363][ T567] usb 2-1: USB disconnect, device number 35 [ 318.399683][ T8042] syz.3.1891[8042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.403755][ T8042] syz.3.1891[8042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.415900][ T286] attempt to access beyond end of device [ 318.415900][ T286] loop1: rw=2049, want=45104, limit=40427 [ 318.444653][ T24] audit: type=1326 audit(2000000961.556:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7209fb8d29 code=0x7ffc0000 [ 318.485811][ T8015] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 318.503089][ T8015] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 318.580853][ T8015] F2FS-fs (loop2): Found nat_bits in checkpoint [ 318.645571][ T8015] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 318.652724][ T8015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 318.819592][ T309] print_req_error: 93 callbacks suppressed [ 318.819611][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 318.840914][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 318.856223][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 318.872202][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 318.886396][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 318.901830][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 318.932804][ T2472] buffer_io_error: 82 callbacks suppressed [ 318.932825][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 318.949745][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 318.967309][ T2472] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 318.991000][ T309] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.008832][ T608] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 319.024452][ T20] usb usb5-port1: attempt power cycle [ 319.029590][ T608] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.033248][ T2472] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 319.053417][ T309] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 319.059071][ T2472] blk_update_request: I/O error, dev loop1, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.074173][ T309] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 319.084505][ T608] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 319.098037][ T2472] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 319.103145][ T309] Buffer I/O error on dev loop1p2, logical block 11, async page read [ 319.116029][ T608] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 319.460843][ T567] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 319.490402][ T20] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 319.831987][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 320.140947][ T567] usb 2-1: Using ep0 maxpacket: 16 [ 320.287051][ T20] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 320.294807][ T20] usb 5-1: can't read configurations, error -61 [ 320.383809][ T567] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 320.393399][ T567] usb 2-1: config 0 has no interface number 0 [ 320.399529][ T567] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 39836, setting to 1024 [ 320.458797][ T567] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 320.469043][ T20] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 320.510432][ T528] attempt to access beyond end of device [ 320.510432][ T528] loop5: rw=1, want=1041, limit=128 [ 320.617559][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 320.622913][ T567] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 320.632366][ T567] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 320.641225][ T567] usb 2-1: Product: syz [ 320.645282][ T567] usb 2-1: SerialNumber: syz [ 320.650489][ T567] usb 2-1: config 0 descriptor?? [ 320.945568][ T8067] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 321.027583][ T20] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 321.075539][ T20] usb 5-1: can't read configurations, error -61 [ 321.084467][ T20] usb usb5-port1: unable to enumerate USB device [ 321.300987][ T567] usb 2-1: invalid MIDI in EP 0 [ 321.306184][ T567] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 321.314240][ T567] usb 2-1: USB disconnect, device number 36 [ 321.733765][ T1809] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 321.920730][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1908'. [ 321.993919][ T1809] usb 3-1: Using ep0 maxpacket: 8 [ 322.081560][ T8129] xt_TCPMSS: Only works on TCP SYN packets [ 322.145708][ T1809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.157127][ T1809] usb 3-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 322.175666][ T1809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.188095][ T1809] usb 3-1: config 0 descriptor?? [ 322.485015][ T1809] uvcvideo: Found UVC 0.00 device (05a9:2630) [ 322.492730][ T1809] uvcvideo: No valid video chain found. [ 322.645961][ T8151] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 322.678348][ T8151] EXT4-fs (loop1): orphan cleanup on readonly fs [ 322.686781][ T1809] usb 3-1: USB disconnect, device number 46 [ 322.773642][ T8151] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 322.796039][ T8151] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #3: comm syz.1.1918: mark_inode_dirty error [ 322.819726][ T8151] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1918: Invalid block bitmap block 3 in block_group 0 [ 322.861195][ T8151] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 322.871476][ T8151] EXT4-fs error (device loop1): ext4_dirty_inode:6110: inode #3: comm syz.1.1918: mark_inode_dirty error [ 322.882936][ T8151] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm syz.1.1918: lblock 6 mapped to illegal pblock 1 (length 1) [ 322.897514][ T8151] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.1918: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.912103][ T8151] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.1918: Failed to acquire dquot type 0 [ 322.927373][ T8151] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 49: comm syz.1.1918: lblock 1 mapped to illegal pblock 49 (length 1) [ 322.943614][ T8151] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.1918: Failed to acquire dquot type 0 [ 322.955535][ T8151] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 322.965270][ T8151] EXT4-fs error (device loop1): ext4_evict_inode:283: inode #15: comm syz.1.1918: mark_inode_dirty error [ 322.977157][ T8151] EXT4-fs warning (device loop1): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 322.987600][ T8163] exfat: Deprecated parameter 'utf8' [ 322.998728][ T8151] EXT4-fs (loop1): 1 orphan inode deleted [ 323.004755][ T8151] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000020,grpid,errors=remount-ro,nombcache,noblock_validity,errors=continue,min_batch_time=0x0000000000000577, [ 323.005640][ T8163] exfat: Deprecated parameter 'utf8' [ 323.145131][ T8163] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3ca7b50d, utbl_chksum : 0xe619d30d) [ 323.711028][ T8176] input: syz1 as /devices/virtual/input/input49 [ 324.421635][ T8182] exfat: Deprecated parameter 'utf8' [ 324.426849][ T8182] exfat: Deprecated parameter 'namecase' [ 324.432589][ T8182] exfat: Deprecated parameter 'utf8' [ 324.878578][ T309] print_req_error: 98 callbacks suppressed [ 324.878597][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 324.899541][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 324.913149][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 324.936625][ T2472] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.952704][ T608] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.974387][ T309] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.985929][ T2472] buffer_io_error: 86 callbacks suppressed [ 324.985942][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 325.008301][ T608] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 325.016172][ T608] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.038347][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 325.049386][ T2472] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.461327][ T309] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.765461][ T2472] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 325.773328][ T2472] blk_update_request: I/O error, dev loop1, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.815314][ T2472] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 325.825600][ T608] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 325.870026][ T309] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 325.883591][ T8214] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 325.900043][ T8214] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,debug,lazytime,,errors=continue [ 326.507510][ T24] kauditd_printk_skb: 138 callbacks suppressed [ 326.507525][ T24] audit: type=1326 audit(2000000969.824:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 326.538901][ T24] audit: type=1326 audit(2000000969.824:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 326.604327][ T24] audit: type=1326 audit(2000000969.824:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 326.681560][ T24] audit: type=1326 audit(2000000969.824:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 326.773363][ T24] audit: type=1326 audit(2000000969.833:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 326.828723][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 326.849017][ T24] audit: type=1326 audit(2000000969.833:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 326.905199][ T8182] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 326.929575][ T24] audit: type=1326 audit(2000000969.833:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 326.955774][ T24] audit: type=1326 audit(2000000969.833:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab5a3d29 code=0x7ffc0000 [ 327.323640][ T8234] FAT-fs (loop1): bogus number of reserved sectors [ 327.332171][ T8234] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 327.341729][ T8234] FAT-fs (loop1): Can't find a valid FAT filesystem [ 327.355669][ T24] audit: type=1400 audit(2000000970.885:8256): avc: denied { ioctl } for pid=8239 comm="syz.2.1937" path="/dev/usbmon0" dev="devtmpfs" ino=150 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 327.384106][ T8232] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 327.394949][ T8232] EXT4-fs (loop5): barriers disabled [ 327.400203][ T8232] JBD2: no valid journal superblock found [ 327.406489][ T8232] EXT4-fs (loop5): error loading journal [ 327.601093][ T309] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 327.611997][ T608] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 327.622796][ T2472] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 328.034586][ T8258] EXT4-fs (loop5): Test dummy encryption mode enabled [ 328.046328][ T8258] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 328.057714][ T8258] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.350976][ T24] audit: type=1400 audit(2000000972.721:8257): avc: denied { watch } for pid=8257 comm="syz.5.1943" path="/231/mnt/file1" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 329.375353][ T8266] overlayfs: workdir and upperdir must be separate subtrees [ 329.459923][ T8269] futex_wake_op: syz.4.1944 tries to shift op by -1; fix this program [ 329.502538][ T8259] FAT-fs (loop2): Directory bread(block 64) failed [ 329.509202][ T8259] FAT-fs (loop2): Directory bread(block 65) failed [ 329.515759][ T8259] FAT-fs (loop2): Directory bread(block 66) failed [ 329.522287][ T8259] FAT-fs (loop2): Directory bread(block 67) failed [ 329.528849][ T8259] FAT-fs (loop2): Directory bread(block 68) failed [ 329.535195][ T8259] FAT-fs (loop2): Directory bread(block 69) failed [ 329.541762][ T8259] FAT-fs (loop2): Directory bread(block 70) failed [ 329.548141][ T8259] FAT-fs (loop2): Directory bread(block 71) failed [ 329.554662][ T8259] FAT-fs (loop2): Directory bread(block 72) failed [ 329.560963][ T8259] FAT-fs (loop2): Directory bread(block 73) failed [ 330.176477][ T2927] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 330.309751][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.309763][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.310235][ T8319] device bridge_slave_0 entered promiscuous mode [ 330.311041][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.311051][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.311515][ T8319] device bridge_slave_1 entered promiscuous mode [ 330.412928][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.412940][ T8319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.413010][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.434253][ T8319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.496700][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.497086][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.497321][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.520036][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.520483][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.535182][ T8025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.537791][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.551732][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.551742][ T8025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.573970][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.574172][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.599409][ T2927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.599736][ T2927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.599755][ T2927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.599781][ T2927] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 330.599794][ T2927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.600284][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.600546][ T2927] usb 5-1: config 0 descriptor?? [ 330.667467][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.676522][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.689286][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.863856][ T8319] device veth0_vlan entered promiscuous mode [ 330.998799][ T608] print_req_error: 108 callbacks suppressed [ 330.998827][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 331.032847][ T2472] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 331.066562][ T2471] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 331.210703][ T2472] blk_update_request: I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.243968][ T2471] blk_update_request: I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.266007][ T8319] device veth1_macvtap entered promiscuous mode [ 331.293829][ T608] blk_update_request: I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.337956][ T2472] buffer_io_error: 93 callbacks suppressed [ 331.337989][ T2472] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 331.358458][ T2471] Buffer I/O error on dev loop1p7, logical block 8, async page read [ 331.382045][ T608] Buffer I/O error on dev loop1p2, logical block 8, async page read [ 331.399237][ T2471] blk_update_request: I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.411399][ T608] blk_update_request: I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.432119][ T2472] blk_update_request: I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.444850][ T2471] Buffer I/O error on dev loop1p7, logical block 9, async page read [ 331.452769][ T608] Buffer I/O error on dev loop1p2, logical block 9, async page read [ 331.463433][ T2472] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 331.473113][ T2471] blk_update_request: I/O error, dev loop1, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.485977][ T608] Buffer I/O error on dev loop1p2, logical block 10, async page read [ 331.508801][ T2472] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 331.516964][ T2471] Buffer I/O error on dev loop1p7, logical block 10, async page read [ 331.526862][ T608] Buffer I/O error on dev loop1p2, logical block 11, async page read [ 331.535570][ T1809] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 331.682814][ T1808] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 331.734645][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.753969][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.762304][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.775603][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.784241][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.847272][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.865098][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.922752][ T528] device bridge_slave_1 left promiscuous mode [ 331.929574][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.937341][ T528] device bridge_slave_0 left promiscuous mode [ 331.943029][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 331.943049][ T24] audit: type=1326 audit(2000000975.120:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 331.944407][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.975670][ T1808] usb 2-1: Using ep0 maxpacket: 32 [ 331.984830][ T24] audit: type=1326 audit(2000000975.147:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.036385][ T24] audit: type=1326 audit(2000000975.184:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.060508][ T1809] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 332.079481][ T1809] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.112588][ T1809] usb 6-1: config 1 interface 0 has no altsetting 0 [ 332.126973][ T24] audit: type=1326 audit(2000000975.221:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.166309][ T528] device veth1_macvtap left promiscuous mode [ 332.172985][ T1808] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 332.184360][ T1808] usb 2-1: config 0 has no interface number 0 [ 332.197119][ T528] device veth0_vlan left promiscuous mode [ 332.206229][ T1808] usb 2-1: config 0 interface 184 has no altsetting 0 [ 332.222675][ T24] audit: type=1326 audit(2000000975.332:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.304016][ T24] audit: type=1326 audit(2000000975.350:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.345662][ T1809] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 332.360212][ T1809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.382671][ T1809] usb 6-1: Product: syz [ 332.390060][ T24] audit: type=1326 audit(2000000975.369:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.416725][ T1809] usb 6-1: SerialNumber: syz [ 332.452612][ T8330] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 332.459568][ T1808] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 332.466358][ T24] audit: type=1326 audit(2000000975.406:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.486487][ T8330] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 332.507016][ T1808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.525880][ T1808] usb 2-1: Product: syz [ 332.535161][ T24] audit: type=1326 audit(2000000975.424:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.552234][ T1808] usb 2-1: Manufacturer: syz [ 332.560509][ T24] audit: type=1326 audit(2000000975.443:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74725492b code=0x7ffc0000 [ 332.586734][ T1808] usb 2-1: SerialNumber: syz [ 332.596601][ T1808] usb 2-1: config 0 descriptor?? [ 332.638177][ T1808] smsc75xx v1.0.0 [ 332.638453][ T8353] EXT4-fs (loop6): Ignoring removed orlov option [ 332.659756][ T8353] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,init_itable,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,orlov, [ 332.724862][ T8353] EXT4-fs error (device loop6): ext4_check_all_de:656: inode #12: block 7: comm syz.6.1968: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 332.744681][ T8353] EXT4-fs (loop6): Remounting filesystem read-only [ 332.757622][ T2927] gt683r_led 0003:1770:FF00.0022: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 332.821302][ T8361] tmpfs: Bad value for 'nr_inodes' [ 332.885818][ T567] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 333.366368][ T532] usb 5-1: USB disconnect, device number 44 [ 333.401120][ T20] gt683r_led 0003:1770:FF00.0022: failed to send set report request: -19 [ 333.471153][ T567] usb 4-1: Using ep0 maxpacket: 32 [ 333.698977][ T567] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 334.024707][ T567] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 334.034598][ T567] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 334.045811][ T1808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 334.057475][ T1808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.088877][ T1809] usbhid 6-1:1.0: can't add hid device: -71 [ 334.096039][ T1809] usbhid: probe of 6-1:1.0 failed with error -71 [ 334.110770][ T1809] usb 6-1: USB disconnect, device number 27 [ 334.306345][ T567] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.324792][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1973'. [ 334.334364][ T567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.342222][ T567] usb 4-1: Product: Ђ [ 334.346049][ T567] usb 4-1: Manufacturer: 봦⒂⋡陠ꏫ⧭ℎ諆㗼楣髥ﶚ靿졜ጆ䦗擬㵐遢ォᰍ㉩覑콎㯪޵ﱩ첥⸌찒ὃ㡂⥺㰌쀝ꉶ竖Ἷ鱙哖븜♚年႙鮶퓫鬀㼳驥밭៷﹚ˋἹꪘ︢㎫担⩗ꤧ䝚น밈ꑙ戠㸽놗૎橛 [ 334.379658][ T8373] input: syz0 as /devices/virtual/input/input50 [ 334.386060][ T8373] input: failed to attach handler leds to device input50, error: -6 [ 334.394606][ T567] usb 4-1: SerialNumber: syz [ 335.239338][ T8340] exfat: Unknown parameter 'namec;e' [ 335.293604][ T8340] EXT4-fs (loop1): journaled quota format not specified [ 335.421840][ T1804] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 335.822940][ T1804] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.834315][ T1804] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.844865][ T1804] usb 6-1: config 0 interface 0 has no altsetting 0 [ 335.852168][ T1804] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 335.868542][ T1804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.881632][ T1804] usb 6-1: config 0 descriptor?? [ 335.898856][ T1808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 335.931632][ T1808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 335.944641][ T8390] FAT-fs (loop1): Unrecognized mount option "00000000000000000000003" or missing value [ 335.957200][ T1808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 335.967730][ T1808] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 335.980100][ T1808] usb 2-1: USB disconnect, device number 37 [ 336.822477][ T1804] saitek 0003:06A3:0621.0023: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.5-1/input0 [ 336.893757][ T8396] loop1: p1 p2 p4[EZD] [ 336.898007][ T8396] loop1: p1 size 16128 extends beyond EOD, truncated [ 336.906146][ T8396] loop1: p2 size 2130728454 extends beyond EOD, truncated [ 336.914011][ T8396] loop1: p4 size 65536 extends beyond EOD, truncated [ 336.939457][ T8400] netem: change failed [ 337.037338][ T8379] udc-core: couldn't find an available UDC or it's busy [ 337.052716][ T8379] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 337.138875][ T1800] usb 6-1: USB disconnect, device number 28 [ 337.266941][ T567] cdc_ncm 4-1:1.0: bind() failure [ 337.272791][ T567] cdc_ncm 4-1:1.1: bind() failure [ 337.294934][ T567] usb 4-1: USB disconnect, device number 55 [ 337.488977][ T8409] bridge: RTM_NEWNEIGH with invalid ether address [ 337.698059][ T8434] exfat: Deprecated parameter 'utf8' [ 337.703696][ T8434] exfat: Deprecated parameter 'namecase' [ 337.709235][ T8434] exfat: Deprecated parameter 'utf8' [ 337.714375][ T8434] exfat: Bad value for 'gid' [ 337.860386][ T1807] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 337.968709][ T2912] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 338.079221][ T8454] xt_hashlimit: size too large, truncated to 1048576 [ 338.239777][ T2912] usb 2-1: Using ep0 maxpacket: 8 [ 338.293914][ T1807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.313178][ T1807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.333820][ T1807] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 338.344293][ T1807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.355915][ T1807] usb 6-1: config 0 descriptor?? [ 338.369875][ T2912] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 338.384176][ T2912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.401633][ T2912] usb 2-1: config 0 descriptor?? [ 338.620695][ T24] kauditd_printk_skb: 231 callbacks suppressed [ 338.620711][ T24] audit: type=1400 audit(2000000981.283:8530): avc: denied { setattr } for pid=8476 comm="syz.3.2001" name="tun" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 338.684074][ T2912] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 338.698500][ T2912] asix: probe of 2-1:0.0 failed with error -71 [ 338.712883][ T2912] usb 2-1: USB disconnect, device number 38 [ 338.881485][ T24] audit: type=1326 audit(2000000981.523:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 338.905546][ T24] audit: type=1326 audit(2000000981.523:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 338.929534][ T24] audit: type=1326 audit(2000000981.523:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 338.953068][ T24] audit: type=1326 audit(2000000981.523:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 338.985256][ T24] audit: type=1326 audit(2000000981.523:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 339.008990][ T24] audit: type=1326 audit(2000000981.523:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 339.033507][ T24] audit: type=1326 audit(2000000981.523:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 339.268822][ T24] audit: type=1326 audit(2000000981.523:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 339.502332][ T24] audit: type=1326 audit(2000000981.523:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff747254d29 code=0x7ffc0000 [ 340.255881][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 340.267154][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'. [ 341.342705][ T528] Bluetooth: hci0: Frame reassembly failed (-84) [ 341.393481][ T1807] usbhid 6-1:0.0: can't add hid device: -71 [ 341.400645][ T1807] usbhid: probe of 6-1:0.0 failed with error -71 [ 341.410647][ T1807] usb 6-1: USB disconnect, device number 29 [ 341.415246][ T532] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 341.646546][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.653699][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.661234][ T8530] device bridge_slave_0 entered promiscuous mode [ 341.670308][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.677208][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.688024][ T8530] device bridge_slave_1 entered promiscuous mode [ 341.718619][ T532] usb 2-1: Using ep0 maxpacket: 32 [ 341.761427][ T8534] xt_NFQUEUE: number of total queues is 0 [ 341.985802][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.992797][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.995394][ T532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.000063][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.011528][ T532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.017789][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.027898][ T532] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 342.043530][ T532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.050616][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.052214][ T532] usb 2-1: config 0 descriptor?? [ 342.064020][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.071922][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.082334][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.090467][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.097672][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.106315][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.114746][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.121724][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.135006][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.144412][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.157793][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.169918][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.177893][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.185268][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.193400][ T8530] device veth0_vlan entered promiscuous mode [ 342.202942][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.213660][ T8530] device veth1_macvtap entered promiscuous mode [ 342.222432][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.234195][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.305137][ T8025] device veth1_macvtap left promiscuous mode [ 342.621955][ T532] greenasia 0003:0E8F:0012.0024: item fetching failed at offset 0/3 [ 342.631259][ T532] greenasia 0003:0E8F:0012.0024: parse failed [ 342.659318][ T532] greenasia: probe of 0003:0E8F:0012.0024 failed with error -22 [ 342.836350][ T1807] usb 2-1: USB disconnect, device number 39 [ 343.433979][ T8560] syz.5.2026[8560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.434017][ T8560] syz.5.2026[8560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.528865][ T2912] Bluetooth: hci0: command 0x1003 tx timeout [ 343.545938][ T2310] Bluetooth: hci0: sending frame failed (-49) [ 343.712764][ T1807] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 343.766932][ T532] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 343.994839][ T1807] usb 2-1: Using ep0 maxpacket: 32 [ 344.027035][ T532] usb 6-1: Using ep0 maxpacket: 16 [ 344.330603][ T1807] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 344.330840][ T532] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 344.339581][ T1807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.348739][ T532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.356699][ T1807] usb 2-1: Product: syz [ 344.364436][ T532] usb 6-1: Product: syz [ 344.368441][ T1807] usb 2-1: Manufacturer: syz [ 344.372260][ T532] usb 6-1: Manufacturer: syz [ 344.376768][ T1807] usb 2-1: SerialNumber: syz [ 344.381391][ T532] usb 6-1: SerialNumber: syz [ 344.386995][ T1807] usb 2-1: config 0 descriptor?? [ 344.396008][ T532] usb 6-1: config 0 descriptor?? [ 345.122089][ T8557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8557 comm=syz.1.2025 [ 345.392646][ T1807] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:81:e7:15:91:f2 [ 345.404441][ T1807] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 345.411963][ T1807] usb 2-1: USB disconnect, device number 40 [ 345.609488][ T24] kauditd_printk_skb: 97 callbacks suppressed [ 345.609503][ T24] audit: type=1326 audit(2000000987.724:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.640517][ T24] audit: type=1326 audit(2000000987.733:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.664839][ T24] audit: type=1326 audit(2000000987.733:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.689088][ T24] audit: type=1326 audit(2000000987.733:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.713625][ T24] audit: type=1326 audit(2000000987.733:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.738306][ T24] audit: type=1326 audit(2000000987.733:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.761930][ T24] audit: type=1326 audit(2000000987.733:8643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.782819][ T532] Bluetooth: hci0: command 0x1001 tx timeout [ 345.785505][ T24] audit: type=1326 audit(2000000987.733:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.791066][ T2310] Bluetooth: hci0: sending frame failed (-49) [ 345.820431][ T24] audit: type=1326 audit(2000000987.733:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 345.844072][ T24] audit: type=1326 audit(2000000987.733:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9dbe3dfd29 code=0x7ffc0000 [ 346.743363][ T2927] usb 6-1: USB disconnect, device number 30 [ 346.804107][ T8598] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2036'. [ 347.209241][ T8617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2040'. [ 347.440938][ T1807] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 347.510399][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2043'. [ 347.520309][ T8619] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 347.573323][ T8623] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 347.582300][ T8623] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.863677][ T1807] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 347.872861][ T1807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.886933][ T1807] usb 6-1: config 0 descriptor?? [ 347.995910][ T8647] overlayfs: failed to resolve './file0': -2 [ 348.001943][ T286] ------------[ cut here ]------------ [ 348.007505][ T286] WARNING: CPU: 1 PID: 286 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 348.015767][ T286] Modules linked in: [ 348.019607][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W 5.10.232-syzkaller-00746-g49e8ba0a684f #0 [ 348.031262][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.037148][ T2927] Bluetooth: hci0: command 0x1009 tx timeout [ 348.047507][ T286] RIP: 0010:drop_nlink+0xc1/0x110 [ 348.052562][ T286] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 cb f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef 2c b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 348.072642][ T286] RSP: 0018:ffffc90000ae7cc0 EFLAGS: 00010293 [ 348.078891][ T286] RAX: ffffffff81b79191 RBX: 0000000000000000 RCX: ffff88810ae30000 [ 348.087242][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.096253][ T286] RBP: ffffc90000ae7ce8 R08: ffffffff81b79114 R09: 0000000000000003 [ 348.104322][ T286] R10: fffff5200015cf88 R11: dffffc0000000001 R12: dffffc0000000000 [ 348.112293][ T286] R13: 1ffff1102248266d R14: ffff888112413320 R15: ffff888112413368 [ 348.120531][ T286] FS: 00005555716c7500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 348.129657][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.133542][ T8647] EXT4-fs (loop7): Ignoring removed nobh option [ 348.136552][ T286] CR2: 00007f9db468f000 CR3: 00000001237ef000 CR4: 00000000003526b0 [ 348.142275][ T8647] EXT4-fs (loop7): Ignoring removed bh option [ 348.142299][ T8647] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.152064][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.176447][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.184693][ T286] Call Trace: [ 348.188169][ T286] ? show_regs+0x58/0x60 [ 348.192333][ T8647] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 348.202737][ T286] ? __warn+0x160/0x2f0 [ 348.221344][ T286] ? drop_nlink+0xc1/0x110 [ 348.225744][ T286] ? report_bug+0x3d9/0x5b0 [ 348.230186][ T286] ? drop_nlink+0xc1/0x110 [ 348.234882][ T286] ? handle_bug+0x41/0x70 [ 348.239162][ T286] ? exc_invalid_op+0x1b/0x50 [ 348.244279][ T286] ? asm_exc_invalid_op+0x12/0x20 [ 348.249161][ T286] ? drop_nlink+0x44/0x110 [ 348.253495][ T286] ? drop_nlink+0xc1/0x110 [ 348.257948][ T286] ? drop_nlink+0xc1/0x110 [ 348.262100][ T286] shmem_rmdir+0x59/0x90 [ 348.266486][ T286] vfs_rmdir+0x2b7/0x3f0 [ 348.270627][ T286] incfs_kill_sb+0x108/0x220 [ 348.275060][ T286] deactivate_locked_super+0xad/0x110 [ 348.280323][ T286] deactivate_super+0xbe/0xf0 [ 348.284865][ T286] cleanup_mnt+0x45c/0x510 [ 348.289430][ T286] __cleanup_mnt+0x19/0x20 [ 348.293712][ T286] task_work_run+0x129/0x190 [ 348.298333][ T286] exit_to_user_mode_loop+0xbf/0xd0 [ 348.303356][ T286] syscall_exit_to_user_mode+0xa2/0x1a0 [ 348.308957][ T1807] usb 6-1: Cannot read MAC address [ 348.309217][ T286] do_syscall_64+0x40/0x70 [ 348.313986][ T1807] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 348.326330][ T286] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 348.330580][ T1807] usb 6-1: USB disconnect, device number 31 [ 348.332360][ T286] RIP: 0033:0x7fb4ab5a5057 [ 348.342113][ T286] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 348.362370][ T286] RSP: 002b:00007ffece6e5678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 348.370694][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb4ab5a5057 [ 348.378487][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffece6e5730 [ 348.386799][ T286] RBP: 00007ffece6e5730 R08: 0000000000000000 R09: 0000000000000000 [ 348.394758][ T286] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffece6e67b0 [ 348.402718][ T286] R13: 00007fb4ab61f8f4 R14: 00007ffece6e67f0 R15: 000000000000019f [ 348.410611][ T286] ---[ end trace b7223d0ea544a258 ]--- [ 348.415886][ T286] ------------[ cut here ]------------ [ 348.421127][ T286] WARNING: CPU: 0 PID: 286 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 348.428854][ T286] Modules linked in: [ 348.432792][ T286] CPU: 0 PID: 286 Comm: syz-executor Tainted: G W 5.10.232-syzkaller-00746-g49e8ba0a684f #0 [ 348.444095][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.453935][ T286] RIP: 0010:drop_nlink+0xc1/0x110 [ 348.458819][ T286] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 cb f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef 2c b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 348.478463][ T286] RSP: 0018:ffffc90000ae7cc0 EFLAGS: 00010293 [ 348.484483][ T286] RAX: ffffffff81b79191 RBX: 0000000000000000 RCX: ffff88810ae30000 [ 348.492328][ T286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.500135][ T286] RBP: ffffc90000ae7ce8 R08: ffffffff81b79114 R09: 0000000000000003 [ 348.507979][ T286] R10: fffff5200015cf88 R11: dffffc0000000001 R12: dffffc0000000000 [ 348.515888][ T286] R13: 1ffff11022482585 R14: ffff888112412be0 R15: ffff888112412c28 [ 348.523658][ T286] FS: 00005555716c7500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 348.532441][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.539040][ T286] CR2: 00007f9dbe46fe31 CR3: 00000001237ef000 CR4: 00000000003506b0 [ 348.547108][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.554929][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.562824][ T286] Call Trace: [ 348.565846][ T286] ? show_regs+0x58/0x60 [ 348.569963][ T286] ? __warn+0x160/0x2f0 [ 348.573943][ T286] ? drop_nlink+0xc1/0x110 [ 348.578157][ T286] ? report_bug+0x3d9/0x5b0 [ 348.582833][ T286] ? drop_nlink+0xc1/0x110 [ 348.587129][ T286] ? handle_bug+0x41/0x70 [ 348.591280][ T286] ? exc_invalid_op+0x1b/0x50 [ 348.595827][ T286] ? asm_exc_invalid_op+0x12/0x20 [ 348.600918][ T286] ? drop_nlink+0x44/0x110 [ 348.605086][ T286] ? drop_nlink+0xc1/0x110 [ 348.609413][ T286] ? drop_nlink+0xc1/0x110 [ 348.613734][ T286] shmem_rmdir+0x59/0x90 [ 348.617751][ T286] vfs_rmdir+0x2b7/0x3f0 [ 348.621860][ T286] incfs_kill_sb+0x1a2/0x220 [ 348.626335][ T286] deactivate_locked_super+0xad/0x110 [ 348.631479][ T286] deactivate_super+0xbe/0xf0 [ 348.636293][ T286] cleanup_mnt+0x45c/0x510 [ 348.640555][ T286] __cleanup_mnt+0x19/0x20 [ 348.644951][ T286] task_work_run+0x129/0x190 [ 348.649287][ T286] exit_to_user_mode_loop+0xbf/0xd0 [ 348.654338][ T286] syscall_exit_to_user_mode+0xa2/0x1a0 [ 348.659766][ T286] do_syscall_64+0x40/0x70 [ 348.664043][ T286] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 348.669851][ T286] RIP: 0033:0x7fb4ab5a5057 [ 348.674016][ T286] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 348.693701][ T286] RSP: 002b:00007ffece6e5678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 348.701963][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb4ab5a5057 [ 348.709909][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffece6e5730 [ 348.717891][ T286] RBP: 00007ffece6e5730 R08: 0000000000000000 R09: 0000000000000000 [ 348.725974][ T286] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffece6e67b0 [ 348.734194][ T286] R13: 00007fb4ab61f8f4 R14: 00007ffece6e67f0 R15: 000000000000019f [ 348.742181][ T286] ---[ end trace b7223d0ea544a259 ]--- [ 348.747665][ T286] list_del corruption. prev->next should be ffff88810cf981a0, but was ffff88810cfa1090 [ 348.757452][ T286] ------------[ cut here ]------------ [ 348.762886][ T286] kernel BUG at lib/list_debug.c:61! [ 348.768188][ T286] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 348.774015][ T286] CPU: 1 PID: 286 Comm: syz-executor Tainted: G W 5.10.232-syzkaller-00746-g49e8ba0a684f #0 [ 348.785296][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.795398][ T286] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 348.801460][ T286] Code: 4c 89 f6 e8 5c 5e 56 02 0f 0b 48 c7 c7 40 32 60 85 4c 89 f6 e8 4b 5e 56 02 0f 0b 48 c7 c7 a0 32 60 85 4c 89 f6 e8 3a 5e 56 02 <0f> 0b 48 c7 c7 00 33 60 85 4c 89 f6 e8 29 5e 56 02 0f 0b cc 55 48 [ 348.821013][ T286] RSP: 0018:ffffc90000ae7c50 EFLAGS: 00010246 [ 348.826888][ T286] RAX: 0000000000000054 RBX: ffff88810cfa1090 RCX: fd3602e0facc3d00 [ 348.834811][ T286] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 348.842893][ T286] RBP: ffffc90000ae7c70 R08: ffffffff81523288 R09: fffff5200015cea1 [ 348.850813][ T286] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 348.858668][ T286] R13: ffff88810cf98168 R14: ffff88810cf981a0 R15: ffff88810cf98e60 [ 348.866420][ T286] FS: 00005555716c7500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 348.875180][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.881654][ T286] CR2: 000000110c300aac CR3: 00000001237ef000 CR4: 00000000003506a0 [ 348.889425][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.897313][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.905128][ T286] Call Trace: [ 348.908254][ T286] ? __die_body+0x62/0xb0 [ 348.912425][ T286] ? die+0x88/0xb0 [ 348.915976][ T286] ? do_trap+0x1a4/0x310 [ 348.920286][ T286] ? __list_del_entry_valid+0x10c/0x120 [ 348.925758][ T286] ? handle_invalid_op+0x95/0xc0 [ 348.930811][ T286] ? __list_del_entry_valid+0x10c/0x120 [ 348.936168][ T286] ? exc_invalid_op+0x32/0x50 [ 348.940757][ T286] ? asm_exc_invalid_op+0x12/0x20 [ 348.945616][ T286] ? wake_up_klogd+0xb8/0xf0 [ 348.950291][ T286] ? __list_del_entry_valid+0x10c/0x120 [ 348.955824][ T286] __dentry_kill+0x250/0x650 [ 348.960225][ T286] ? lockref_put_or_lock+0x104/0x170 [ 348.965364][ T286] dentry_kill+0xc0/0x2a0 [ 348.969511][ T286] dput+0x40/0x80 [ 348.972978][ T286] incfs_free_mount_info+0x60/0x210 [ 348.978110][ T286] incfs_kill_sb+0x1c2/0x220 [ 348.982796][ T286] deactivate_locked_super+0xad/0x110 [ 348.988174][ T286] deactivate_super+0xbe/0xf0 [ 348.992687][ T286] cleanup_mnt+0x45c/0x510 [ 348.996929][ T286] __cleanup_mnt+0x19/0x20 [ 349.001193][ T286] task_work_run+0x129/0x190 [ 349.005620][ T286] exit_to_user_mode_loop+0xbf/0xd0 [ 349.010775][ T286] syscall_exit_to_user_mode+0xa2/0x1a0 [ 349.016247][ T286] do_syscall_64+0x40/0x70 [ 349.020489][ T286] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 349.026232][ T286] RIP: 0033:0x7fb4ab5a5057 [ 349.030559][ T286] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 349.050412][ T286] RSP: 002b:00007ffece6e5678 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 349.058663][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb4ab5a5057 [ 349.066451][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffece6e5730 [ 349.074272][ T286] RBP: 00007ffece6e5730 R08: 0000000000000000 R09: 0000000000000000 [ 349.082167][ T286] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffece6e67b0 [ 349.090178][ T286] R13: 00007fb4ab61f8f4 R14: 00007ffece6e67f0 R15: 000000000000019f [ 349.097996][ T286] Modules linked in: [ 349.101945][ T286] ---[ end trace b7223d0ea544a25a ]--- [ 349.107329][ T286] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 349.113655][ T286] Code: 4c 89 f6 e8 5c 5e 56 02 0f 0b 48 c7 c7 40 32 60 85 4c 89 f6 e8 4b 5e 56 02 0f 0b 48 c7 c7 a0 32 60 85 4c 89 f6 e8 3a 5e 56 02 <0f> 0b 48 c7 c7 00 33 60 85 4c 89 f6 e8 29 5e 56 02 0f 0b cc 55 48 [ 349.133487][ T286] RSP: 0018:ffffc90000ae7c50 EFLAGS: 00010246 [ 349.139512][ T286] RAX: 0000000000000054 RBX: ffff88810cfa1090 RCX: fd3602e0facc3d00 [ 349.147537][ T286] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 349.155343][ T286] RBP: ffffc90000ae7c70 R08: ffffffff81523288 R09: fffff5200015cea1 [ 349.163393][ T286] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 349.171914][ T286] R13: ffff88810cf98168 R14: ffff88810cf981a0 R15: ffff88810cf98e60 [ 349.180185][ T286] FS: 00005555716c7500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 349.188996][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.195449][ T286] CR2: 000000110c300aac CR3: 00000001237ef000 CR4: 00000000003506a0 [ 349.203605][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.212609][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 349.220702][ T286] Kernel panic - not syncing: Fatal exception [ 349.227587][ T286] Kernel Offset: disabled [ 349.231807][ T286] Rebooting in 86400 seconds..