last executing test programs: 17m35.938027413s ago: executing program 32 (id=312): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x2020) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521) 5m32.088673649s ago: executing program 33 (id=3735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) fcntl$setlease(r3, 0x400, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000a40), 0x400, r0}, 0x38) 5m31.174782626s ago: executing program 2 (id=3741): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2f9c005bad47f4c114716299f78933d59186e7b6115f1706a320c6ae47f3984770cca6d9a08262648422e9ae"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x7, 0x30, "dca9e7a3be5457027b8cb77e78c683d8113995437b32ccf14ce8fabcea3d0acd9af53234b5e93f9055291fe423fec24b"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x73c}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x8cf7}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5m29.770737884s ago: executing program 1 (id=3744): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$selinux_access(r1, &(0x7f0000000580)={'system_u:object_r:audisp_var_run_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0xfff}, 0x52) 5m29.633520897s ago: executing program 1 (id=3745): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m28.727958754s ago: executing program 1 (id=3750): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000a000206000000000000000048000200656362286369706865725f6e756c6c2900"], 0x138}, 0x1, 0xe}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) 5m28.125688365s ago: executing program 2 (id=3754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5m27.36752787s ago: executing program 5 (id=3756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x50) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='hug']) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0x7, 0xf, 0x9}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x8, 0xa, 0x1, 0xed8, 0x9, 0x48c, 0x40, 0x925e, [{0x101, 0x4, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_vlan\x00'}]}}]}, 0x68}}, 0x20040054) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 5m26.743837992s ago: executing program 2 (id=3758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r6, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) 5m26.737493463s ago: executing program 1 (id=3759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@gettaction={0x14, 0x32, 0x301, 0x4, 0xfffffffe}, 0x14}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x71, &(0x7f0000000200)=ANY=[@ANYRES32=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b70200000000000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) 5m26.711619683s ago: executing program 6 (id=3760): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m26.323092861s ago: executing program 1 (id=3761): mkdir(&(0x7f0000000180)='./file0\x00', 0xe0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = gettid() syz_open_procfs(r4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="a710d032dc2fbfc67110ae00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x1, 0x0, 0x0, 0x7, 0xd, 0x7, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x5, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x100480, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32]) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 5m26.196114283s ago: executing program 5 (id=3763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 5m25.865313049s ago: executing program 5 (id=3764): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m25.612999374s ago: executing program 2 (id=3765): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5m25.599537644s ago: executing program 6 (id=3766): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m25.252044351s ago: executing program 1 (id=3767): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x5, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/73, 0x18}], 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x20000, 0x1, 0x5}, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b400000003"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79, 0x0, 0x0, 0x85}, @initr0, @exit]}, 0x0, 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="020d000014000000000000000012000200030000000000000000000600320003000000000000000000000010002b00000000000000000000000000fc02000000000000000000000000000005000500000000000a004e230000000700000000000000000000000000000001070000000000000005000600000000000a004e210000000700000000000000000000ffffac14142602000100"/160], 0xa0}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000540)={@id={0x2, 0x0, @auto="62f1d115618bd948b59d19297fd93f14"}}) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000028c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x80082102, &(0x7f0000000100)={r6}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x600) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x8000000000000000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}], [], 0x6b}}) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000001380)={0x140, 0x0, 0x5, 0x101, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0xa}, [@typed={0xee, 0x14b, 0x0, 0x0, @binary="a559ddde0b02f20a218019f777237d8b8b0e370ae5cbb1ef77a145310ed0b557248d77ff7a68c0de43db9c77afab24450a5bca90123c3987ffb0fb5f972ce7b12dc98b1e7f57f9fd8e68c2909e11af0f5c2b00dc694bedfebb0fe717b9a9718b180bfb134df6c1e013dba6c340ee04c829f8dca0e56094247d6f5daa35d4ae2b9335e2d60b9fcbe52905d0f5ce0734a32af715bcdb0ce6716e38831b1a2b9591c61e9549622e53a53ef17d1a51095c184ed2be31a58ae7ae887264c963de904b2d99d87b95aa4bfcc7d55b1746c9beecf3c6d7e7f1b577021da41d8f1a162a1c6f5bacca520d30e06906"}, @generic="e5912a6ed3e30fe51b5ff66cf450da16c0ca14832c8755720385341aed998438da", @nested={0x10, 0x1d, 0x0, 0x1, [@nested={0x4, 0xab}, @typed={0x8, 0x12b, 0x0, 0x0, @fd=r7}]}, @typed={0x8, 0x30, 0x0, 0x0, @uid=r8}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5m25.030626745s ago: executing program 5 (id=3769): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004300)=ANY=[@ANYBLOB="78000000150020002bbd84be0a7fdf250a20abff", @ANYRES32=r1, @ANYBLOB="14000100fe88000000000000000000000000010114000100ff010000000000000000000000000001140001000000000000000000000000000000000014000200fc00000000000000000000000000000108000900034000000800080000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4081}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000300)=""/140, 0x8c, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup(r2) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 5m24.786635s ago: executing program 2 (id=3770): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x6de, &(0x7f0000001b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa27c7d70700080800450806d000000000ff2f9078ac1e0001e00000012001880f06bc9078e203000000000000c8d5e248031009e1bf08137121b26bcc494ae2fdf7401d3214da920d283f3e89b8b3dc7bd990fb5db03f7c7c217118eee3e088c3e95c16b197e600a9002af393c8dc37bf310f8eabe28c64db1a49f044cbb4af4737d88dd8e7e293df08bd1d4cbfdd43be9438ea0572aaf4a93ef6e81c3302e0f9a81a736ea06fbbb0b4d6b321bc637518f774e0feb7f5e830ef62dfa8a237ad1571ec8973bf658a2d67112dab0912de148a75caa6f0563de4be10a32d2d2ee089af575a4624143e533e692e8bf17790d587d29a187c5f95b5f035b6cc92035ed919d680c96b26163d1b8baace7c603908443008ebade6a4009e46b93bfea92b71fa5a7bed7aa450853444b5667a7268d4f0d52bec8d2573fd648a5e3288ecd09749771f28db6b5469dab40996decadb888bef58d6073cc294584a3607cdbd0682feb0a2bd2108903826dd482bcfa8e2e5cd7586d21bc97e255d65716c884d5f21d83769113dbdb1199ff9f051a96a1ff7f3bbb6a0da87459e3e5d3ca666c5f27b35cd8a539aefe31160b84b9211362149236abab750598912908792e0dd6a3260a73c7414ad339d7f56b992149d061d8770afa2453ba74ec1e758889348e2c7cd21f7e6baed3a8b7979f30f373422d5a87d85a29358f633c757188b9e9defbf28b17ebb31c53d11e3f5b6ba5e2c8fc448937fa3d666e297eb15181517d889cbfd92066e670954786efb426784a6144df84557db7bf333d9cd18a3a055cc115a8648e260bf6a3c554b62b8d6edca6dfd9a0756fcd3527d46c6a38163341546f6d40560bd531ca75c2ad87a5716a9eed1ffe37b4877d255dff232cc2f1154aa1c7f4494578ad71f6f8011388a39426b956331e1182919502fd2cb0bc53a9b8b67173810edcb7b6c946ddd7ce6f4594340cc0c302b3b93166c048379a62f7299f90aa5391c519e5103893c841a5bbd1429646f35e857a0110fb8c847fd5ec84d4d5560fd888928ce87577f05a547718ba05c050bfc5864e1e4c970620f423a151c7ec3f1f4420214a7e79e0a3947011208b69cb1927d7227ad6d0045d55e5d95daa436341df2633bf010fffd43c41e2ab69e56735cac5fbe4738367e9e7094b2879dfc4fa09e009032861736472e91cc5ce7e258e3fadd1f00f14580198469f028461671871f67f968ba62524d50e0954f4e3b040d4b6b39c1a8fb7192b656c0d460cb5a5e68c31c22da1337e732aa83bc7e0d546f81e5af4b1dd40a6f6a12261302deda5109f4946db90a87d5a2a4047713f30690e6f4083d01ecb81384b3b260c53f7cafee4c43234f93e1cca476d7557fc7802c0c371b1c7660eeadf0a2a81c36029cd9462515522baeb1b899a6c8e8454110179e62116e6cc5b4bbab0c0d6307d529905f964847f34482bbf521795c5e3fe87ea8449c8b26386e31eb17b23473aff311a72ba6c42dc3b9d8e9fc63b36214e5d7622d0a8ab2f75885d70c00f183bf4d59169a9a49c1b22a8ed6a4b6882f1b82f233f7f7c3fadd30c1e5cb818c8599611414c01a30e3e7fc3a77b1f8b570da95155e854a9154d07b67652969604ce142737555c0b22fa33ed8165d6b0dcda52336da5cf6f5eff2b7d73dfebcde42c7efb52feb2104967f8de15c357f23ad0935d6245b71db345c8cea0ab7eafa4b1853c4e4029b6567da67102a2da28460a9bbc527c0a12316815f11ddf820f4d4c35bd7b6e4578b9c879978e7330d3e7f68e3b50260764425f6ba77f3353230ff7d51fde319cfa5db4a419ab0054f4e30130654cbf2adb44c77bd28ea67ba7267047905d04695a01563bc898ca82cdc98e2e4dc69483cb67df50bb737b149b108c2126e618bfc92e131fdfdcd4898a14e89cb4ab27b7c7e1231143ad111bad306f30d7635360b9eab98e86a09e6de8943222cde873b6e873129bc5a980c8b9deba59a755a9151133f858fdf08b6c03deed2339cf8e9ae41ae6cc8e4090a1c45c1376a8e7d0d263ae6680a5ba3c09baaea934feb134a1698124a4d5ec63a1e91553e1ec42c3d86aaddcb9f0739364f269f2f1dc34360d96c1d66aa010250bb07248843e27b374d6992bb61b59f012933dcbd652f7460a7f7048b0d46101d59b9eda996ce2f4eaccb5c1bf7ac4524060d38f1ec56d092945ec64e6266158eadc2f5a10f16fc472e43619fc2bd3a39e730863deb630c010311ad2c35c462de34bc2b027e9a68642eaea45e00998ff218d9b0d172f9695796eca809dbaca07778192ae0fac370c294ec0a5b4a6d1812ef72b6bbd1c231d71ac9d481bb1b51393633d30a2d009b4beb02a556fbc0edb1d17c5ab683252752ead7ea4c868163c7041954896d7d5dab143c1853235014248d0fe03d21afbfabae7fcffa465110c34303cea0d033f0da89b018fcb900"/1755], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x7, 0x0, &(0x7f0000001a40)="2b206d074843b3", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3fc}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x5, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xdc}}, 0x0) 5m24.743935681s ago: executing program 6 (id=3771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 5m24.729688711s ago: executing program 6 (id=3772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setgroups(0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5m24.168035102s ago: executing program 5 (id=3774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 5m24.153168052s ago: executing program 5 (id=3775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) fcntl$setlease(r3, 0x400, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000a40), 0x400, r0}, 0x38) 5m23.601021523s ago: executing program 2 (id=3776): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m23.600330763s ago: executing program 6 (id=3777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) utime(&(0x7f0000000200)='./file0\x00', 0x0) 5m23.540758994s ago: executing program 6 (id=3778): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f00000000c0)=0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8f66318349c83ead, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) 4m59.313543603s ago: executing program 34 (id=3779): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m59.271249343s ago: executing program 35 (id=3767): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x5, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/73, 0x18}], 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x20000, 0x1, 0x5}, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b400000003"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79, 0x0, 0x0, 0x85}, @initr0, @exit]}, 0x0, 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="020d000014000000000000000012000200030000000000000000000600320003000000000000000000000010002b00000000000000000000000000fc02000000000000000000000000000005000500000000000a004e230000000700000000000000000000000000000001070000000000000005000600000000000a004e210000000700000000000000000000ffffac14142602000100"/160], 0xa0}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$eJzs3MtrHVUYAPDvTt59xkfVPtT4wuKjadOHXbhQUXChIOiiuotpUmJTK00EW4qpInUpBffiUvAvcKUbUVeCW125kUKRgLRawZGZO5NXb25zb29y297fD244Z+Zk5nxz5tx75szcG0DHGsr+VCI2RcSvWTrJs/PSolBW7src2bG/586OVSJNX/+zkq+7PHd2rCxb/t+mIrM7iUg+qcTOGvudPn3m+OjU1PipIj88c+K94enTZ56ePDF6bPzY+Lsjhw8f2L/vmUMjB1sS5+asrjs+PLlr+8tvXnh17MiFt3/8urus67I4WmUohpYcy8Uea/XO2mzzonSlu40VoSFdEZE1V0/e/7dGVyw03tZ46eO2Vg5YU2mapltWXn0uBW5jlWh3DYD2KD/oL88NRP8aXQffzC49X70AyuK+Uryqa7ojKcr0LLu+baX+Yt7kyLl/voj8+Pd11PEHANbft9n456nq+Kd8VdcMxj2Lyj2XzwdnSyPuiIg7I+KuiLg7IrZF5GXvjYj7Gtz/0LL8tePP5GJTga1SNv57tri3tXT8V4z+/ksHu4rc5hiIweipTExOje+NiC0RsTt6+iYmpwbq7eO7F3/5bMmCucvzA++hYuxXvrL9l2PBoh4Xu/uWbu/o6MxoK2LPXPoonwOcvTb+hTtXWWp7ROxoYvvZuHnyia92rbT++vHX0YL7TOmXEY9X2/9c1Il/+f3JssEPjRwc7o+p8b3DEz35hUINP/18/rWV9n9D8bdA1v4bap7/8/EPVhbfr51e6Bqrdf63T1e8pmng/H+rXJKd/72VN/J0b7Hsg9GZmVP7Inorr1y7fGRha2W+LH9p07aIR2r3/+w9LjvHsvh3RkR2Et8fEQ9ExINF3R+KiIcj30Qts1ci4ocXHn2nmfgbPMxNydr/6JL2j+u0f+OJruPff9NM/FVZ+x/IU7uLJat5/1ttBW/k2AEAAMCtIsmfga8ke+bTSbJnT8TGfG53QzJ1cnrmyYmT7189Wn1WfjB6knL+szofXJ0P3VfMDZf5kWX5/cW88eddA3l+Q3HvG2ifjYv7fz7hWO3/mT+62lw5YO35vhZ0rib6f90HHoBbh89/6FwN9H9vFXCbme/UffXLpetQF2B91fpQn21DPYD1Z1APnUv/h86l/0Pn0v+hI93I9/qbSVRW/c382yAxW/vw/r7yf/VHvQ323iRx5YlI8kQ628Zq/Fs8hraqwleLn7xcg/qUv5ZRLPlr5cLlT8TcDC1YP9G+9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBW+j8AAP//HRbixA==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000540)={@id={0x2, 0x0, @auto="62f1d115618bd948b59d19297fd93f14"}}) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000028c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x80082102, &(0x7f0000000100)={r6}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x600) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x8000000000000000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}], [], 0x6b}}) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000001380)={0x140, 0x0, 0x5, 0x101, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0xa}, [@typed={0xee, 0x14b, 0x0, 0x0, @binary="a559ddde0b02f20a218019f777237d8b8b0e370ae5cbb1ef77a145310ed0b557248d77ff7a68c0de43db9c77afab24450a5bca90123c3987ffb0fb5f972ce7b12dc98b1e7f57f9fd8e68c2909e11af0f5c2b00dc694bedfebb0fe717b9a9718b180bfb134df6c1e013dba6c340ee04c829f8dca0e56094247d6f5daa35d4ae2b9335e2d60b9fcbe52905d0f5ce0734a32af715bcdb0ce6716e38831b1a2b9591c61e9549622e53a53ef17d1a51095c184ed2be31a58ae7ae887264c963de904b2d99d87b95aa4bfcc7d55b1746c9beecf3c6d7e7f1b577021da41d8f1a162a1c6f5bacca520d30e06906"}, @generic="e5912a6ed3e30fe51b5ff66cf450da16c0ca14832c8755720385341aed998438da", @nested={0x10, 0x1d, 0x0, 0x1, [@nested={0x4, 0xab}, @typed={0x8, 0x12b, 0x0, 0x0, @fd=r7}]}, @typed={0x8, 0x30, 0x0, 0x0, @uid=r8}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4m59.235347124s ago: executing program 36 (id=3776): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m59.210442855s ago: executing program 37 (id=3775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) fcntl$setlease(r3, 0x400, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000a40), 0x400, r0}, 0x38) 4m59.192647915s ago: executing program 38 (id=3778): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f00000000c0)=0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8f66318349c83ead, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) 39.577724045s ago: executing program 9 (id=6565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000180)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setgroups(0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 38.147810892s ago: executing program 9 (id=6568): mkdir(&(0x7f0000000180)='./file0\x00', 0xe0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000100)='mountinfo\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="a710d032dc2fbfc67110ae00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x1, 0x0, 0x0, 0x7, 0xd, 0x7, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x5, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x100480, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32]) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 37.087776933s ago: executing program 9 (id=6573): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x18) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x84c80, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 36.648464731s ago: executing program 9 (id=6577): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x6ddb, &(0x7f00000002c0)={0x0, 0x200000, 0x0, 0x800003, 0xf4}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r2, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 35.968862195s ago: executing program 9 (id=6579): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x2020) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521) 35.929411185s ago: executing program 9 (id=6581): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 35.851960676s ago: executing program 39 (id=6581): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 8.435837927s ago: executing program 8 (id=6685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000a40), 0x400, r0}, 0x38) 8.25664782s ago: executing program 7 (id=6688): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x2808, &(0x7f00000004c0)={[{@default_permissions}, {@redirect_dir_on}, {@xino_off}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xe}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x8) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32, @ANYBLOB="87000800768f00002400001400028006001000ffffffff000000dc18bbad4cbfa1a738180000000000000000"], 0x44}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtclass={0x38, 0x28, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1, 0xffff}, {0x6, 0xfff3}, {0x6, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000038000000000000000118010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ae000000850000000600000085100000040000000a4106000100000018420000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000010000017b8af0ff000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018220000", @ANYRES32=r0, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000df592000fcffffff9500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x63, &(0x7f0000000700)=""/99, 0x40f00, 0x68, '\x00', r4, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x4, 0x1, 0x7b7a}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000800)=[r0, r0, r5], 0x0, 0x10, 0x48b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000001801000020786c3500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket(0x10, 0x807, 0x5) r8 = socket$netlink(0x10, 0x3, 0x6) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x10000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='tlb_flush\x00', r6}, 0x10) 8.063590264s ago: executing program 7 (id=6690): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) statfs(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)=""/7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kfree\x00', r7}, 0xffffffffffffff28) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000481, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 6.473893215s ago: executing program 8 (id=6693): syz_open_dev$vcsa(0x0, 0x1, 0x20100) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0xb, 0x900}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x20000000) io_cancel(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 6.21055098s ago: executing program 7 (id=6696): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2f9c005bad47f4c114716299f78933d59186e7b6115f1706a320c6ae47f3984770cca6d9a08262648422e9ae"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x7, 0x30, "dca9e7a3be5457027b8cb77e78c683d8113995437b32ccf14ce8fabcea3d0acd9af53234b5e93f9055291fe423fec24b"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x73c}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x8cf7}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3.507954422s ago: executing program 8 (id=6698): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb83, &(0x7f00000017c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1, 0xfffffffffffffffe, 0x0, 0x200000000000000, 0x8}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_usb_disconnect(r2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x6, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000000, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) write$selinux_load(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000620000300012800b00010065727370616e00002000028004001200060010"], 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 3.456655143s ago: executing program 4 (id=6699): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() 3.208923508s ago: executing program 7 (id=6701): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) open$dir(&(0x7f0000000280)='./file0\x00', 0x84c80, 0x4) 3.157003439s ago: executing program 7 (id=6702): mkdir(&(0x7f0000000180)='./file0\x00', 0xe0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) gettid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="a710d032dc2fbfc67110ae00000000009500000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x1, 0x0, 0x0, 0x7, 0xd, 0x7, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x5, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x100480, 0x0) io_setup(0x8, &(0x7f0000004200)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.672841658s ago: executing program 0 (id=6703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000a40), 0x400, r0}, 0x38) 2.463193722s ago: executing program 8 (id=6704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 2.395169863s ago: executing program 4 (id=6705): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x112, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x6, &(0x7f0000000000)="fa794bfa", 0x4) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') (async) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f00000007c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0x7, 0x5, 0x1, {0x0, 0x181, 0x3, 0x5, 0x87, 0xd615, 0xffff, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xcea, 0x1}}, {0x0, 0x10}}}, 0xa0) (async) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 2.109339119s ago: executing program 3 (id=6707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.05927239s ago: executing program 7 (id=6708): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.943250862s ago: executing program 3 (id=6709): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.836702074s ago: executing program 3 (id=6710): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x23) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x558e, &(0x7f000000ac00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="5800000000000000000000000000000095009e2400000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) fallocate(r2, 0x8, 0x4000, 0x4000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000079c0)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @remote}, 0xc) syz_clone3(&(0x7f00000002c0)={0x200000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x2a}, &(0x7f0000000140)=""/60, 0x3c, 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x2, {r0}}, 0x58) 1.715087206s ago: executing program 0 (id=6711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYBLOB="1d52be1e82891bdefa52cc979579e70f", @ANYRES8=r2, @ANYRESDEC=r0], 0x48) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) open(0x0, 0x1050c1, 0x170) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) 1.273570425s ago: executing program 8 (id=6712): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x18) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x84c80, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1.175990847s ago: executing program 4 (id=6713): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x18) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x84c80, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 743.136085ms ago: executing program 3 (id=6714): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb83, &(0x7f00000017c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1, 0xfffffffffffffffe, 0x0, 0x200000000000000, 0x8}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x6, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000000, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) write$selinux_load(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000620000300012800b00010065727370616e00002000028004001200060010"], 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 727.187656ms ago: executing program 0 (id=6715): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) open$dir(&(0x7f0000000280)='./file0\x00', 0x84c80, 0x4) 677.831687ms ago: executing program 0 (id=6716): mount$incfs(&(0x7f0000000b40)='./file0\x00', 0x0, &(0x7f0000000bc0), 0x1, 0x0) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x2a020480) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 656.026397ms ago: executing program 8 (id=6717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x1e, &(0x7f0000000240)=""/30, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x8, 0x1a}, 0x10, 0x0, r5, 0x8, &(0x7f0000000580)=[r4, r4, r4, r4], &(0x7f00000005c0)=[{0x5, 0x2, 0xa, 0xb}, {0x5, 0x1, 0xb, 0x7}, {0x0, 0x4, 0x9, 0xa}, {0x3, 0x2, 0x1, 0x5}, {0x5, 0x5, 0x8, 0xb}, {0x2, 0x5, 0xb, 0x2}, {0x0, 0x1, 0x10, 0x4}, {0x4, 0x4, 0x1}], 0x10, 0x40}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x161300, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2) socket(0x2, 0xa, 0x300) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000240), 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="0f77795820d4a28686271c588615b13269cc71b4a795e6b2145598e390750f19bfeb7473740393a5b32f273c5aa0ff84f003675ff01697efc86d2a60161ae8593f65a06ab9beb74f9a00f993155f139a4c4a885c78d5538fd738e436dc93cced70981da38b7c0c48ad060cb93e332e10d5f87a8c21f44907709c3c", @ANYRES64=0x0, @ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008", @ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="4a32cb51dd5b5111622e0dc383160a89028b2be98058048938c10209a657018f1880f8ffb582e7ef8586af6e2441e06cae2a9f8910f92de7acaddd9915d50abd0a0c6d2dbd1ef36122ce7d030e2219441db75f5d", @ANYRES32=r9, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRES8=0x0, @ANYBLOB="f157e143b7a76a2cb6513a664aa9accdb6b35d8f5ad20741a4f01e0fcfd3d5f8c3fb6e1451ed2d811e80c1f788a8dc769a1b96e809b4522ee4d3e12c7e4c6c82522df33ed20fb11dcf10c7b71f188794c54452a2b48811372f595cc9ba2b382dc642f44bd74d0f0932eae096ec84020bf3414f3f8891e0b718c33e8364e68339f11c66d23150d46217da5e53075351dfa24472bdd3e1c596b34ddf32dcafb3b0f8ab4f21150e91102600aa4a7b85edc7ef3c4d261cd1929a6f7d8f806c6fe1973b838a377a1c68f0d83832e7c05ddc6be55ca7fdd798707b9ef9f2bdea94885af5df3a1e09b7338e98e68d19e13fb429152af9f89f692cf2480caa66fe7182ebd9e58b7933918c19018a90af876480dd7c2966b21a81107cd7274d2d5c322c88879dd711ab4eac13942c19fbf2997676e4994b5cc10664fc79c65828d6b52409d051ff7441150bae24b97db499db9996279198a3811bf4bc388b5027be59b63eece37d6cea54552b5ede7586e1f44c239557b001c528c262f2340e3c42a272b5d0194fa35d8986047a890d91aa7d381e7d1fdd1e9dda7d8630e186cd93265554a370d07cd885102d734a1749578ba99470fd6e6f23310d4bae5a2f31a206e60fbd647d8c73f7103948a5f4ac5ac83656a20f675eb2082e293fb199fe289763936ecbfda6862062e453a321ccf6a62672f5427a0c718daa2d10f9645133b52973f1a6e25498fea6f6de698a9917348a2b56e1b243db7975d8d0ded73f2051681d473d74516886473b452101212fb1563e32debd980c576432e59d9e4a0b990df4b6f7d90e59e3ad58944d8a3e516285646db00e153ffa1ef8d083855e9489478aee08d4504bec47ab0d72f29ad06a276cf24973d73ff196f91b7cee455ab6ed101f036c01eef2a9e1e2b32c97e51f180cd066015857afb86ad75cb58bdd17008b4c705daf2d4ff84d96f899a6e61bba1b98f5128505e9bc3f86d014d27490b870d7654846bc323b40358ef01cb5a412da510da3051e53af29fd86295892de02277308e198af876b45039d04a1527a7606d7e088d0874bb6153133d5fd7baa561f1d45638f1b029ed12dbb44dfd6207c19af3fcdff262b9815736eeaf709f8cbc6aee1192d60446a4d1003c6979dfdbd4e7aef3a4bead901e53538deebb6b80b4b1d6dfcc6503fe5fd1973b67f89bfc2221eb0f0787785d5f6643eb388b0d34e5f4af92942a6cc131f8361320cc21466c3b354bbefd15c681fd25aa04ecdfdf2af0aca5b1e26ec052a263478e0ded02dd1a96a602e0753ef23a73adc034d0928e95ed0db436d635edc2455104f6776ae281ce414dfcb220b30d8e71f57009c59a7fe1561fdda5a141a1efb57f6c6c1b44dc787660e6e7f952d7444ca32be285ae2f3a0b0018fa55829b30a18d3d6cbfc7f4650277f732c0d9c278a6b98c7a7ce1a76a85c615697782a60497c2d89253ec71d8cb487c1284d4c2b5dece6e5bd303a7d2dcc40f63765e1bb671a44c03f4f6ed5153fcb368e6da9ffaa02ef2f01902b197895c06b4cbd55895604d492dd2a008d977a6d53fb6cf6f67dc4ea35b232b4c9010489771e7bb460efd8cabd3affa541fd3c04bc1ca4e4fd5aa1535e2b32ae0128a623751897ad41d37cd0ff233b258dc76367768b1eeac7c57f8379ebc5e4c98379b911b5ab847032782d65d36e959a6ce61b3d8c5b2e60a9b3a4d8ae019c30f1345fcb12cd18a3ca82efc227094cf071eda1ef70542f970d40b1adb3d1d35134885501186077e1a1dbb051d7342b48f5f907b0470f30856896f5ebd65648f0a40055ce6b79a494c03051b382c36610892d614a12d7fffb741bf1be4195152c65d271b9fc6883da1c7aa28bf89781472132eb94a5606268e4c0ad22c267c277b7aeee52a1d47147034c5469a608680ba2491d0c2261ef895e54807fe8fc4845f1279570f2cc9ab23b5d9b0ab1cce2f496002bb41033ef224ae7e2c38901ad865a2a9d48266ab5e8c4f23e511b79ac9e3b7390fc77fecce620bf32880b6e59938a8db4a65c88375d7e4508433c0ee394b9fbf13fe7ab10c324bb2801b333b98fc3ae8de751abde9092b676b93f72b5f0ece005bb3432a07343194fedb5d614164b90148df49a7b640fee1f82db857b3db16290a8f03b08b1bea428b97ac193fb2338676b0e24348596b8fe6c99fe732d0583cb78d99b518bb31830ee0d29c17c728607bc5f2df6fa536be2b2728f5d9d937441f04e29ddc7a44f38cae5da8b22f822c290edcf136d80b796791f42ad139e37211b603dfcfbb29c13fc37c17f1068039fb4854cc238058cdda5bdb019d5fa78e9bebe3ef8f89f2143583bec4a0fc1d7f76219f1ee563d8ea72213f7d7c3c625612bb5d06960eab32140e246932534fcdfdcbacd8723ebf5510fb20bfcf10ef7e1af13527fb522687abb76f1d8e59842720fbb9b0b009bee7863005874b6ccc86aa98c36a93931e614a1ebee73dd960f561e53e27374f013187229da64db7ab306a0abde6240e393680a47bf4efeb76b74455475ab3a2aeb0afc28105bffe13e75f3c63d84de393a91ac6e362f6461644ede45f23f1c0da3db58f7591a336a137577108fc5043b0519958345e09125e8755951c60b7fa255a110ff1023801bffd309a01d557c0376a36dcf68325114f4058c9404d2bd2b045096bf9ed1083dc94eb28c84483754f74a1e3bd3dd7fa76b31e5264118147242ac3bf0bc336c42ac6b9cc37b59d217ebb16989d56e8e71b478020027176dac3e1cc8484a51356e5108013ea956e6776b743a0cfb51ed19a368d37cae05ba13bd732b8858e56ee5c4f68342aabd56e77eb20164aedfcee169109113421e6d2b6f372f1b988caf51260ccd1c20c89333229c23e1826eee692e596228e33ce185ecd6a4182b5307faa8aa5bf16538cff653edbe2fe19f1fae6e26c79ea5cd1694b0f4d01f23261b4567208210e66683355c90902f0b7066c47fa06a128bf3d4f25a87f41aff8392f4b69066945a78c923cb0e1bd1920c47b8826ae12ed4a3eb3401e23c6b439537d5df6cdf28e69085d55cf35dbf801a448f4586addf827f9ba236a9bcae987070f4e85b800f0408bd63ab0c91157bde2b8f043c596cd7e8d98aad64d1ab37e90dc692d0d940fc22ca09c03b5489c75ab9390e058d4e00e25b72551131eb26d04b650261261275a6a5db5616ae17d268a746dc260f743001fbe48ea1c5f93b71a5f44295c6617da208214db01976aebec0ab3103c69aa443b38985324f2fdd747ce64bde6db5a7995f49ffa84c96f110ec496db765f7fd65d4be6eb6ed16a3976be71818b2fd48dffefda951e0be9301bd2b9b857464845a56974ecfba6b93e7ea19cb1f4c4875ccd7685a65ceb368fd3afd69fce5db4095a2b52ec7372b2d92ed862e75311fb2b2dd26c6ae51729ba8f69c24beb2d267039e28b0b4ebb7d9b4855705bd973ca586bba0bbcc2d028e2a96586942ad471b83ab1204bb0ca239fbfa2b620edd77c153ec4f2d1b3339de89fd01cc1e64de13b94ecf5956faf25bd0978388c0911297373752bd734c05c8a678b797e888682a8919e78891066b4b3eaa53b279ea8bce0218e696f82a9b68cae25a6d4595ed79ea4e473e15f863c8e42c11b433416ff18aba1efdc03f4a81cb8d204e1e5b1cbb62ac1cbd2b30a57b60f5b040f0f90fb5534c52716f1b9cf67178d4f8aa2cf41bb60a6e34d96c794b4253e43769a2942d188e793372b03dd9825118732e4730855651c43eff7efa0670f7e2a7c4ed4a130f8bf6a2ecf619ca4c405cacf614d7ecc9478d1b97ce7599b6ed5dbda7cf9838ea39fbb941e4f7283f7804f86fcf223079791628afe72c85211f4ce9d0d607bfe4a777211f8d9fae80b47c96433cb11aad88ee32698677ce155edd6eab474b6f988faac2b7157b0d9f60dd0a35a0149132da6dfc7921e576389a611318f78d71e8edc4f41aa7824a77cdae900be6c174a88cc64a67a462857590752a4686921044f40e82929fc0bd811d3a16428142524cfd0f302fab661bcd308f827530d0c2603d03336c43030d22a6d2d750652a10b038dbf33768560d9b65bb6abf0ba99624d7581e4d501b370bee85e7fd0446d7e0a113ac82a28eb155689cf7e0e4efc9e49f516c8b956f0af2ba649a0cbcebb0e8cef9ac900399b1363359755ff35cb6ebc6f1defb55617757e189e3310c53f28f8287ca73ac77de1258442344b845ef07e2d37bf762502abf1e8848cfab169c6299d53e584aba319c06e3f2c763ef64f7d44e9c84dc221fc5b2839b207eae4e0dc0405fae6fef2f92f6669aa171459b4cd3953a2a7bb0100c9104a3c05f12101cfaf18000bce07d44a230bd6d82a81460f8bae17ea082ec82775c948f25994c5e144e647d84fa915505a5faa8541879899fba837c34730c9484c8770add5b59dc47c6943ad88f41b776584cc1db332d2996ced31ed3d021f0f5d20000ac8594e56c156e17b118ff631ca2b8296df5d192ff9fd4ebcd23593e76b7bb52fc9f5176015d7c9d3011cf00a2fa55931c713ffc3b3f69c82cf90b290a2b03a1530f13c059fbcb4b74a1a4ca3b18f385c5396c8108b5fa7bb085fa302bcb726b743e9b40cc21d3faf168c022a2c64d3619bf2627583cc23472150671f8b3d9069e4fb9ac84efe66af976d80c23702a6ab8b79988087a8143a5972ea897eed56ac4a1bf1462fc45225601d22f587bd47ac81ef7b7931c110d9f6a6132c13874fa1f9d559d4e2b2468f56f984b60e508dbda9431db09d7067af89299f1320fdb9bbde54b54f79c34a562abaca6f597e06f984f4347a03ce03cbc22060f660764328250dbbaefe03577815846b26620198692bdca89f4efa80dd86e9a1d9e33e43a6bbf42cea22fce7f51e8f08acef82dec22bf008f7935cac0a03d3476d2794ababe2c2177d82f76d11e3a9570e475ea0f4bea34ea1978481b67abac92502316f7cb9d1a0e95b4379c0962db62cc22ac565b3e233b9239ac6869fb5b7b863cd20a21c9a7f42004ccc5ce234b3aca6e12cd63543a7f9d63ea3bcc70cdba9606a136beab461b0fd2ed2dbb84a987ecbb338eafb3a9a1e7def3a87281c0f0b8a14a7f916480918dd2745cc8d0066816b400d7e9849529ecebaf008a14354bcefb05878a29a1f21c6885756928249057cdb14de058311fe931c6af5672b73daa99584082a86b3e39213c9c1d3a67a93f2375e6da97b0d474d05ed6fa6ddbbe0ffaaf3e1fde1bded7586c2c086ac49fc399dc3952e548e28926ac03f35d7c745246030b477c9c47560e6fa24fe2f4abce1f3a26eeeb55b846ac4d49a2402b8a43e5759794e0d0a1008790f933660fc835084c83ed9d2f19ad69a005bf63a1511a8775a9f6adb524980ed6dc7a39fcfd75dcd0ef7b61c6e2338acdf9bfd94d5666cd1066dd7715947a68af5edc703b08d3898c676f2a2c4ed10a4e9eb3b5b4d5525f27a8cc4af475c2bbd8e41033a363b706d7633fb88cd8cd4f07e772cf42ff1befbb9f26a2301a19d256a876622158bbf865be3e24b1aa6c9dab2a0c97d0bb7e2d3875ef9f6c941b2f531db128a210b87f14205f7a60ff5a4a2fdc067e6c29e1b31d95843034ffff9838544592b83ba317d589d250ba24b5ddd365bea15bf6af9e34991e9e393f7ebdcc0faea004720c33b69b5a8bc33c84364a2bc455f15bb23351bc77c9a545997c24cfa1e9f291aa5c6b07555e69c490a8956968cd83adfc1a42b8432f6bd2497be9f1edb0ed6f4a47739769f63d2f5962ce771aaeafcf", @ANYRESOCT=0x0, @ANYRES8=r4], 0x40}, 0x20008804) 566.702749ms ago: executing program 4 (id=6718): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000240)=0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 515.86719ms ago: executing program 3 (id=6719): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 109.613868ms ago: executing program 4 (id=6720): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 44.951339ms ago: executing program 0 (id=6721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='task_rename\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 44.690229ms ago: executing program 0 (id=6722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 39.951819ms ago: executing program 3 (id=6723): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb83, &(0x7f00000017c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1, 0xfffffffffffffffe, 0x0, 0x200000000000000, 0x8}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_disconnect(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x6, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000000, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) write$selinux_load(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000620000300012800b00010065727370616e00002000028004001200060010"], 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 0s ago: executing program 4 (id=6724): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x23) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x558e, &(0x7f000000ac00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="5800000000000000000000000000000095009e2400000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) fallocate(r2, 0x8, 0x4000, 0x4000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000079c0)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @remote}, 0xc) syz_clone3(&(0x7f00000002c0)={0x200000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x2a}, &(0x7f0000000140)=""/60, 0x3c, 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x2, {r0}}, 0x58) kernel console output (not intermixed with test programs): 973 ppid:12964 flags:0x00004000 [ 893.705920][ C0] Call Trace: [ 893.709194][ C0] [ 893.712124][ C0] __schedule+0xb87/0x14e0 [ 893.716549][ C0] ? release_firmware_map_entry+0x194/0x194 [ 893.722474][ C0] ? hrtimer_start_range_ns+0xada/0xc10 [ 893.728041][ C0] schedule+0xbd/0x170 [ 893.732117][ C0] do_nanosleep+0x15f/0x590 [ 893.736657][ C0] ? usleep_range_state+0x130/0x130 [ 893.741860][ C0] ? memset+0x35/0x40 [ 893.745848][ C0] ? hrtimer_init_sleeper+0x10c/0x370 [ 893.751228][ C0] hrtimer_nanosleep+0x134/0x310 [ 893.756168][ C0] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 893.761628][ C0] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 893.766828][ C0] ? get_timespec64+0x10e/0x1a0 [ 893.771692][ C0] ? __cfi_get_timespec64+0x10/0x10 [ 893.776920][ C0] common_nsleep+0x8f/0xb0 [ 893.781339][ C0] __se_sys_clock_nanosleep+0x2f7/0x380 [ 893.786887][ C0] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 893.792520][ C0] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 893.797979][ C0] x64_sys_call+0x186/0x9a0 [ 893.802490][ C0] do_syscall_64+0x4c/0xa0 [ 893.806905][ C0] ? clear_bhb_loop+0x30/0x80 [ 893.811586][ C0] ? clear_bhb_loop+0x30/0x80 [ 893.816272][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.822174][ C0] RIP: 0033:0x7f7761fc1423 [ 893.826584][ C0] RSP: 002b:00007ffcc2788218 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 893.835005][ C0] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 00007f7761fc1423 [ 893.842979][ C0] RDX: 00007ffcc2788230 RSI: 0000000000000000 RDI: 0000000000000000 [ 893.850945][ C0] RBP: 00007ffcc278829c R08: 000000000000036a R09: 0000000000000000 [ 893.858915][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 893.866881][ C0] R13: 00000000000927c0 R14: 00000000000d55be R15: 00007ffcc27882f0 [ 893.874852][ C0] [ 893.877880][ C0] task:wg-crypt-wg0 state:I stack:30728 pid:12974 ppid:2 flags:0x00004000 [ 893.887087][ C0] Call Trace: [ 893.890363][ C0] [ 893.893292][ C0] __schedule+0xb87/0x14e0 [ 893.897794][ C0] ? release_firmware_map_entry+0x194/0x194 [ 893.903790][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 893.908812][ C0] ? kthread_data+0x50/0xc0 [ 893.913311][ C0] ? wq_worker_sleeping+0x64/0x280 [ 893.918439][ C0] schedule+0xbd/0x170 [ 893.922889][ C0] rescuer_thread+0xdd6/0xf10 [ 893.927565][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 893.933058][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 893.938955][ C0] ? release_firmware_map_entry+0x194/0x194 [ 893.944844][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 893.950042][ C0] ? __kasan_check_read+0x11/0x20 [ 893.955069][ C0] ? __kthread_parkme+0x142/0x180 [ 893.960092][ C0] kthread+0x281/0x320 [ 893.964159][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 893.969372][ C0] ? __cfi_kthread+0x10/0x10 [ 893.974050][ C0] ret_from_fork+0x1f/0x30 [ 893.978564][ C0] [ 893.981602][ C0] task:wg-crypt-wg1 state:I stack:30728 pid:12976 ppid:2 flags:0x00004000 [ 893.990808][ C0] Call Trace: [ 893.994128][ C0] [ 893.997052][ C0] __schedule+0xb87/0x14e0 [ 894.001472][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.007360][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 894.012381][ C0] ? kthread_data+0x50/0xc0 [ 894.016884][ C0] ? wq_worker_sleeping+0x64/0x280 [ 894.022017][ C0] schedule+0xbd/0x170 [ 894.026080][ C0] rescuer_thread+0xdd6/0xf10 [ 894.030895][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 894.036355][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 894.042251][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.048172][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 894.053468][ C0] ? __kasan_check_read+0x11/0x20 [ 894.058613][ C0] ? __kthread_parkme+0x142/0x180 [ 894.063685][ C0] kthread+0x281/0x320 [ 894.067751][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 894.072947][ C0] ? __cfi_kthread+0x10/0x10 [ 894.077536][ C0] ret_from_fork+0x1f/0x30 [ 894.081955][ C0] [ 894.085056][ C0] task:wg-crypt-wg2 state:I stack:28784 pid:12977 ppid:2 flags:0x00004000 [ 894.094435][ C0] Call Trace: [ 894.097741][ C0] [ 894.100755][ C0] __schedule+0xb87/0x14e0 [ 894.105182][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.111069][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 894.116085][ C0] ? kthread_data+0x50/0xc0 [ 894.120638][ C0] ? wq_worker_sleeping+0x64/0x280 [ 894.125752][ C0] schedule+0xbd/0x170 [ 894.129820][ C0] rescuer_thread+0xdd6/0xf10 [ 894.134496][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 894.139969][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 894.145871][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.151759][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 894.156968][ C0] ? __kasan_check_read+0x11/0x20 [ 894.162085][ C0] ? __kthread_parkme+0x142/0x180 [ 894.167106][ C0] kthread+0x281/0x320 [ 894.171173][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 894.176364][ C0] ? __cfi_kthread+0x10/0x10 [ 894.180949][ C0] ret_from_fork+0x1f/0x30 [ 894.185452][ C0] [ 894.188468][ C0] task:napi/wg0-0 state:S stack:29040 pid:12978 ppid:2 flags:0x00004000 [ 894.197668][ C0] Call Trace: [ 894.200944][ C0] [ 894.203869][ C0] __schedule+0xb87/0x14e0 [ 894.208279][ C0] ? __cfi_wg_packet_rx_poll+0x10/0x10 [ 894.213928][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.219849][ C0] ? __kasan_check_write+0x14/0x20 [ 894.224993][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 894.230469][ C0] schedule+0xbd/0x170 [ 894.234646][ C0] napi_threaded_poll+0xe3/0x380 [ 894.239624][ C0] ? napi_threaded_poll+0x197/0x380 [ 894.244840][ C0] kthread+0x281/0x320 [ 894.248916][ C0] ? __cfi_napi_threaded_poll+0x10/0x10 [ 894.254462][ C0] ? __cfi_kthread+0x10/0x10 [ 894.259053][ C0] ret_from_fork+0x1f/0x30 [ 894.263467][ C0] [ 894.266482][ C0] task:napi/wg0-0 state:S stack:29040 pid:12979 ppid:2 flags:0x00004000 [ 894.275690][ C0] Call Trace: [ 894.279055][ C0] [ 894.281982][ C0] __schedule+0xb87/0x14e0 [ 894.286429][ C0] ? __cfi_wg_packet_rx_poll+0x10/0x10 [ 894.291893][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.297784][ C0] ? __kasan_check_write+0x14/0x20 [ 894.302912][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 894.308376][ C0] schedule+0xbd/0x170 [ 894.312458][ C0] napi_threaded_poll+0xe3/0x380 [ 894.317481][ C0] ? napi_threaded_poll+0x197/0x380 [ 894.322696][ C0] kthread+0x281/0x320 [ 894.326793][ C0] ? __cfi_napi_threaded_poll+0x10/0x10 [ 894.332357][ C0] ? __cfi_kthread+0x10/0x10 [ 894.336951][ C0] ret_from_fork+0x1f/0x30 [ 894.341376][ C0] [ 894.344409][ C0] task:napi/wg1-0 state:S stack:29040 pid:12980 ppid:2 flags:0x00004000 [ 894.353640][ C0] Call Trace: [ 894.356915][ C0] [ 894.359846][ C0] __schedule+0xb87/0x14e0 [ 894.364260][ C0] ? __cfi_wg_packet_rx_poll+0x10/0x10 [ 894.369717][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.375605][ C0] ? do_softirq+0xd3/0x120 [ 894.380194][ C0] ? __cfi_do_softirq+0x10/0x10 [ 894.385133][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 894.390639][ C0] schedule+0xbd/0x170 [ 894.394705][ C0] napi_threaded_poll+0xe3/0x380 [ 894.399743][ C0] ? napi_threaded_poll+0x197/0x380 [ 894.405051][ C0] kthread+0x281/0x320 [ 894.409131][ C0] ? __cfi_napi_threaded_poll+0x10/0x10 [ 894.414689][ C0] ? __cfi_kthread+0x10/0x10 [ 894.419283][ C0] ret_from_fork+0x1f/0x30 [ 894.423704][ C0] [ 894.426727][ C0] task:napi/wg1-0 state:S stack:27232 pid:12981 ppid:2 flags:0x00004000 [ 894.435931][ C0] Call Trace: [ 894.439205][ C0] [ 894.442131][ C0] __schedule+0xb87/0x14e0 [ 894.446547][ C0] ? __cfi_wg_packet_rx_poll+0x10/0x10 [ 894.452006][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.457903][ C0] ? __kasan_check_write+0x14/0x20 [ 894.463019][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 894.468578][ C0] schedule+0xbd/0x170 [ 894.472664][ C0] napi_threaded_poll+0xe3/0x380 [ 894.477626][ C0] ? napi_threaded_poll+0x197/0x380 [ 894.482851][ C0] kthread+0x281/0x320 [ 894.486924][ C0] ? __cfi_napi_threaded_poll+0x10/0x10 [ 894.492486][ C0] ? __cfi_kthread+0x10/0x10 [ 894.497083][ C0] ret_from_fork+0x1f/0x30 [ 894.501509][ C0] [ 894.504531][ C0] task:napi/wg2-0 state:S stack:29040 pid:12982 ppid:2 flags:0x00004000 [ 894.513739][ C0] Call Trace: [ 894.517020][ C0] [ 894.519953][ C0] __schedule+0xb87/0x14e0 [ 894.524386][ C0] ? __cfi_wg_packet_rx_poll+0x10/0x10 [ 894.529847][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.535739][ C0] ? __kasan_check_write+0x14/0x20 [ 894.540863][ C0] schedule+0xbd/0x170 [ 894.544928][ C0] napi_threaded_poll+0xe3/0x380 [ 894.549871][ C0] ? napi_threaded_poll+0x197/0x380 [ 894.555071][ C0] kthread+0x281/0x320 [ 894.559136][ C0] ? __cfi_napi_threaded_poll+0x10/0x10 [ 894.564685][ C0] ? __cfi_kthread+0x10/0x10 [ 894.569362][ C0] ret_from_fork+0x1f/0x30 [ 894.573781][ C0] [ 894.576798][ C0] task:napi/wg2-0 state:S stack:27232 pid:12983 ppid:2 flags:0x00004000 [ 894.585999][ C0] Call Trace: [ 894.589271][ C0] [ 894.592201][ C0] __schedule+0xb87/0x14e0 [ 894.596622][ C0] ? __cfi_wg_packet_rx_poll+0x10/0x10 [ 894.602096][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.608008][ C0] ? __kasan_check_write+0x14/0x20 [ 894.613131][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 894.618602][ C0] schedule+0xbd/0x170 [ 894.622673][ C0] napi_threaded_poll+0xe3/0x380 [ 894.627614][ C0] ? napi_threaded_poll+0x197/0x380 [ 894.632815][ C0] kthread+0x281/0x320 [ 894.636968][ C0] ? __cfi_napi_threaded_poll+0x10/0x10 [ 894.642545][ C0] ? __cfi_kthread+0x10/0x10 [ 894.647134][ C0] ret_from_fork+0x1f/0x30 [ 894.651565][ C0] [ 894.654589][ C0] task:syz.1.3767 state:R running task stack:24728 pid:13078 ppid:10857 flags:0x00004000 [ 894.665364][ C0] Call Trace: [ 894.668638][ C0] [ 894.671592][ C0] __schedule+0xb87/0x14e0 [ 894.676102][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.681994][ C0] schedule+0xbd/0x170 [ 894.686057][ C0] futex_wait_queue+0xf5/0x230 [ 894.690820][ C0] futex_wait+0x1a3/0x750 [ 894.695147][ C0] ? wake_up_q+0x105/0x1b0 [ 894.699564][ C0] ? __cfi_futex_wait+0x10/0x10 [ 894.704413][ C0] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 894.709614][ C0] ? __cfi_futex_wake+0x10/0x10 [ 894.714463][ C0] do_futex+0x2dc/0x420 [ 894.718612][ C0] ? _copy_from_user+0x8f/0xc0 [ 894.723376][ C0] ? __cfi_do_futex+0x10/0x10 [ 894.728052][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 894.733261][ C0] __se_sys_futex+0x273/0x2e0 [ 894.737973][ C0] ? __x64_sys_futex+0x100/0x100 [ 894.742989][ C0] ? xfd_validate_state+0x70/0x150 [ 894.748199][ C0] __x64_sys_futex+0xe5/0x100 [ 894.752892][ C0] x64_sys_call+0x7ec/0x9a0 [ 894.757401][ C0] do_syscall_64+0x4c/0xa0 [ 894.761820][ C0] ? clear_bhb_loop+0x30/0x80 [ 894.766496][ C0] ? clear_bhb_loop+0x30/0x80 [ 894.771175][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.777067][ C0] RIP: 0033:0x7fecbc38eba9 [ 894.781481][ C0] RSP: 002b:00007ffc27a9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 894.790238][ C0] RAX: ffffffffffffffda RBX: 00000000000d551a RCX: 00007fecbc38eba9 [ 894.798390][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fecbc5d618c [ 894.806365][ C0] RBP: 000000000000015e R08: 002c41e00d42cd80 R09: 0000001627a9a31f [ 894.814333][ C0] R10: 00007ffc27a9a120 R11: 0000000000000246 R12: 00007fecbc5d618c [ 894.822304][ C0] R13: 00007ffc27a9a120 R14: 00000000000d5678 R15: 00007ffc27a9a140 [ 894.830278][ C0] [ 894.833293][ C0] task:syz.1.3767 state:S stack:26296 pid:13079 ppid:10857 flags:0x00004000 [ 894.842582][ C0] Call Trace: [ 894.845900][ C0] [ 894.848834][ C0] __schedule+0xb87/0x14e0 [ 894.853251][ C0] ? __kasan_check_write+0x14/0x20 [ 894.858367][ C0] ? release_firmware_map_entry+0x194/0x194 [ 894.864262][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 894.870149][ C0] ? prepare_to_wait_event+0x40b/0x440 [ 894.875627][ C0] schedule+0xbd/0x170 [ 894.879695][ C0] uinput_read+0x744/0xac0 [ 894.884116][ C0] ? __cfi_uinput_read+0x10/0x10 [ 894.889054][ C0] ? avc_policy_seqno+0x1b/0x70 [ 894.893911][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 894.899996][ C0] ? fsnotify_perm+0x3e9/0x5b0 [ 894.904804][ C0] ? security_file_permission+0x94/0xb0 [ 894.910355][ C0] do_iter_read+0x4b0/0xb30 [ 894.915024][ C0] ? _copy_from_user+0x8f/0xc0 [ 894.919882][ C0] ? vfs_iter_read+0xa0/0xa0 [ 894.924464][ C0] ? import_iovec+0x7c/0xb0 [ 894.928969][ C0] do_readv+0x22e/0x3e0 [ 894.933173][ C0] ? generic_file_rw_checks+0x2a0/0x2a0 [ 894.938730][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 894.944362][ C0] __x64_sys_readv+0x7d/0x90 [ 894.949047][ C0] x64_sys_call+0x3bd/0x9a0 [ 894.953556][ C0] do_syscall_64+0x4c/0xa0 [ 894.957978][ C0] ? clear_bhb_loop+0x30/0x80 [ 894.962654][ C0] ? clear_bhb_loop+0x30/0x80 [ 894.967502][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.973401][ C0] RIP: 0033:0x7fecbc38eba9 [ 894.977810][ C0] RSP: 002b:00007fecbd2af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 894.986219][ C0] RAX: ffffffffffffffda RBX: 00007fecbc5d5fa0 RCX: 00007fecbc38eba9 [ 894.994193][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 895.002159][ C0] RBP: 00007fecbc411e19 R08: 0000000000000000 R09: 0000000000000000 [ 895.010129][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.018094][ C0] R13: 00007fecbc5d6038 R14: 00007fecbc5d5fa0 R15: 00007ffc27a99ec8 [ 895.026068][ C0] [ 895.029081][ C0] task:syz.1.3767 state:S stack:26128 pid:13080 ppid:10857 flags:0x00004000 [ 895.038282][ C0] Call Trace: [ 895.041559][ C0] [ 895.044483][ C0] __schedule+0xb87/0x14e0 [ 895.048901][ C0] ? __cfi___switch_to+0x10/0x10 [ 895.053836][ C0] ? release_firmware_map_entry+0x194/0x194 [ 895.059725][ C0] ? finish_task_switch+0x16b/0x7b0 [ 895.065018][ C0] ? __switch_to_asm+0x3a/0x60 [ 895.069789][ C0] schedule+0xbd/0x170 [ 895.073857][ C0] schedule_timeout+0xa6/0x2e0 [ 895.078714][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 895.084087][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 895.089587][ C0] wait_for_common+0x354/0x620 [ 895.094347][ C0] ? wait_for_completion+0x20/0x20 [ 895.099458][ C0] wait_for_completion_interruptible+0x18/0x30 [ 895.105607][ C0] __seccomp_filter+0xd7b/0x19d0 [ 895.110580][ C0] ? __secure_computing+0x290/0x290 [ 895.115783][ C0] ? preempt_schedule_irq+0xbb/0x110 [ 895.121070][ C0] ? irqentry_exit+0x37/0x40 [ 895.125677][ C0] ? sysvec_reschedule_ipi+0x78/0x80 [ 895.131075][ C0] __secure_computing+0xea/0x290 [ 895.136193][ C0] syscall_trace_enter+0xaa/0x150 [ 895.141214][ C0] syscall_enter_from_user_mode+0x1f/0x30 [ 895.146932][ C0] do_syscall_64+0x24/0xa0 [ 895.151352][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.156115][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.160796][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.166690][ C0] RIP: 0033:0x7fecbc38eba9 [ 895.171099][ C0] RSP: 002b:00007fecbd28e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 895.179600][ C0] RAX: ffffffffffffffda RBX: 00007fecbc5d6098 RCX: 00007fecbc38eba9 [ 895.187572][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fecbc5d609c [ 895.195546][ C0] RBP: 00007fecbc5d6090 R08: 00264bff0b68e7c4 R09: 0000000000000000 [ 895.203571][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 895.211644][ C0] R13: 00007fecbc5d6128 R14: 00007ffc27a99de0 R15: 00007ffc27a99ec8 [ 895.219713][ C0] [ 895.222731][ C0] task:syz.1.3767 state:S stack:28064 pid:13108 ppid:10857 flags:0x00004000 [ 895.232018][ C0] Call Trace: [ 895.235298][ C0] [ 895.238235][ C0] __schedule+0xb87/0x14e0 [ 895.242652][ C0] ? release_firmware_map_entry+0x194/0x194 [ 895.248628][ C0] schedule+0xbd/0x170 [ 895.252691][ C0] schedule_timeout+0xa6/0x2e0 [ 895.257546][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 895.262924][ C0] wait_for_common+0x354/0x620 [ 895.267682][ C0] ? __x64_sys_ioctl+0x7b/0x90 [ 895.272449][ C0] ? wait_for_completion+0x20/0x20 [ 895.277599][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 895.283068][ C0] wait_for_completion_interruptible+0x18/0x30 [ 895.289327][ C0] raw_process_ep_io+0x583/0x950 [ 895.294283][ C0] ? raw_process_ep0_io+0x7e0/0x7e0 [ 895.299481][ C0] ? __kasan_check_write+0x14/0x20 [ 895.304610][ C0] raw_ioctl+0x2025/0x30e0 [ 895.309045][ C0] ? ioctl_has_perm+0x391/0x4c0 [ 895.313894][ C0] ? __cfi_raw_ioctl+0x10/0x10 [ 895.318664][ C0] ? has_cap_mac_admin+0x330/0x330 [ 895.323774][ C0] ? handle_mm_fault+0x17be/0x2640 [ 895.328889][ C0] ? selinux_file_ioctl+0x377/0x480 [ 895.334090][ C0] ? __cfi_handle_mm_fault+0x10/0x10 [ 895.339381][ C0] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 895.344593][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 895.350145][ C0] ? __fget_files+0x2d5/0x330 [ 895.354821][ C0] ? security_file_ioctl+0x95/0xc0 [ 895.359934][ C0] ? __cfi_raw_ioctl+0x10/0x10 [ 895.364784][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 895.369581][ C0] __x64_sys_ioctl+0x7b/0x90 [ 895.374172][ C0] x64_sys_call+0x58b/0x9a0 [ 895.378766][ C0] do_syscall_64+0x4c/0xa0 [ 895.383183][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.388380][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.393057][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.398950][ C0] RIP: 0033:0x7fecbc38e7ab [ 895.403361][ C0] RSP: 002b:00007fecbd26bf70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 895.411944][ C0] RAX: ffffffffffffffda RBX: 00000000ffffff75 RCX: 00007fecbc38e7ab [ 895.419914][ C0] RDX: 00007fecbd26bff0 RSI: 0000000040085507 RDI: 0000000000000004 [ 895.427931][ C0] RBP: 0000000000000004 R08: 00007fecbc700320 R09: 0000000000000000 [ 895.435905][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 00002000000002c0 [ 895.443886][ C0] R13: 0000000000000000 R14: 00007fecbc5d6180 R15: 00007ffc27a99ec8 [ 895.451858][ C0] [ 895.454876][ C0] task:syz.5.3775 state:R running task stack:27712 pid:13106 ppid:11624 flags:0x00004004 [ 895.465650][ C0] Call Trace: [ 895.468930][ C0] [ 895.471861][ C0] __schedule+0xb87/0x14e0 [ 895.476626][ C0] ? plist_add+0x3e8/0x470 [ 895.481045][ C0] ? release_firmware_map_entry+0x194/0x194 [ 895.486939][ C0] ? __cfi___futex_queue+0x10/0x10 [ 895.492062][ C0] ? futex_wait_setup+0x1b0/0x240 [ 895.497099][ C0] schedule+0xbd/0x170 [ 895.501190][ C0] futex_wait_queue+0xf5/0x230 [ 895.505955][ C0] futex_wait+0x1a3/0x750 [ 895.510284][ C0] ? __cfi_futex_wait+0x10/0x10 [ 895.515132][ C0] ? __cfi_futex_wake+0x10/0x10 [ 895.519982][ C0] do_futex+0x2dc/0x420 [ 895.524224][ C0] ? __cfi_do_futex+0x10/0x10 [ 895.528906][ C0] __se_sys_futex+0x273/0x2e0 [ 895.533580][ C0] ? __x64_sys_futex+0x100/0x100 [ 895.538591][ C0] ? xfd_validate_state+0x70/0x150 [ 895.543705][ C0] __x64_sys_futex+0xe5/0x100 [ 895.548376][ C0] x64_sys_call+0x7ec/0x9a0 [ 895.552878][ C0] do_syscall_64+0x4c/0xa0 [ 895.557292][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.561970][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.566733][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.572624][ C0] RIP: 0033:0x7f6d0158eba9 [ 895.577036][ C0] RSP: 002b:00007f6d0249f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 895.585583][ C0] RAX: ffffffffffffffda RBX: 00007f6d017d6098 RCX: 00007f6d0158eba9 [ 895.593554][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d017d6098 [ 895.601524][ C0] RBP: 00007f6d017d6090 R08: 0000000000000000 R09: 0000000000000000 [ 895.609492][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.617454][ C0] R13: 00007f6d017d6128 R14: 00007ffd59eedf10 R15: 00007ffd59eedff8 [ 895.625519][ C0] [ 895.628609][ C0] task:syz.2.3776 state:R running task stack:24992 pid:13109 ppid:9417 flags:0x00004000 [ 895.639395][ C0] Call Trace: [ 895.642686][ C0] [ 895.645621][ C0] __schedule+0xb87/0x14e0 [ 895.650067][ C0] ? release_firmware_map_entry+0x194/0x194 [ 895.655957][ C0] ? hrtimer_start_range_ns+0xada/0xc10 [ 895.661508][ C0] schedule+0xbd/0x170 [ 895.666276][ C0] do_nanosleep+0x15f/0x590 [ 895.670871][ C0] ? save_fpregs_to_fpstate+0x192/0x220 [ 895.676419][ C0] ? usleep_range_state+0x130/0x130 [ 895.681616][ C0] ? memset+0x35/0x40 [ 895.685604][ C0] ? hrtimer_init_sleeper+0x10c/0x370 [ 895.690981][ C0] hrtimer_nanosleep+0x134/0x310 [ 895.695966][ C0] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 895.701430][ C0] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 895.706633][ C0] ? get_timespec64+0x10e/0x1a0 [ 895.711484][ C0] ? __cfi_get_timespec64+0x10/0x10 [ 895.716684][ C0] common_nsleep+0x8f/0xb0 [ 895.721098][ C0] __se_sys_clock_nanosleep+0x2f7/0x380 [ 895.726642][ C0] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 895.732357][ C0] ? __kasan_check_write+0x14/0x20 [ 895.737647][ C0] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 895.743105][ C0] x64_sys_call+0x186/0x9a0 [ 895.747699][ C0] do_syscall_64+0x4c/0xa0 [ 895.752111][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.756884][ C0] ? clear_bhb_loop+0x30/0x80 [ 895.761560][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.767456][ C0] RIP: 0033:0x7fad69dc1465 [ 895.771867][ C0] RSP: 002b:00007fff03c8a6c0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 895.780275][ C0] RAX: ffffffffffffffda RBX: 00007fad69fd5fa0 RCX: 00007fad69dc1465 [ 895.788245][ C0] RDX: 00007fff03c8a700 RSI: 0000000000000000 RDI: 0000000000000000 [ 895.796214][ C0] RBP: 00007fad69fd7da0 R08: 0000000000000000 R09: 0004527c935eaa06 [ 895.804181][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000d5826 [ 895.812178][ C0] R13: 00007fad69fd6270 R14: ffffffffffffffff R15: 00007fff03c8a840 [ 895.820152][ C0] [ 895.823169][ C0] task:syz.2.3776 state:S stack:25664 pid:13110 ppid:9417 flags:0x00004000 [ 895.832373][ C0] Call Trace: [ 895.835745][ C0] [ 895.838758][ C0] __schedule+0xb87/0x14e0 [ 895.843178][ C0] ? release_firmware_map_entry+0x194/0x194 [ 895.849328][ C0] ? selinux_socket_sock_rcv_skb+0x2c5/0x7c0 [ 895.855312][ C0] schedule+0xbd/0x170 [ 895.859377][ C0] schedule_timeout+0xa6/0x2e0 [ 895.864140][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 895.869517][ C0] ? prepare_to_wait+0x1d0/0x210 [ 895.874457][ C0] sock_alloc_send_pskb+0x65d/0x980 [ 895.879666][ C0] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 895.885382][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 895.893975][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 895.899178][ C0] ? security_socket_getpeersec_dgram+0xbb/0xd0 [ 895.905416][ C0] unix_dgram_sendmsg+0x592/0x16d0 [ 895.910529][ C0] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 895.916601][ C0] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 895.922146][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 895.927715][ C0] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 895.933260][ C0] ____sys_sendmsg+0x5a9/0x990 [ 895.938025][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 895.942870][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 895.947894][ C0] ? __schedule+0xb8f/0x14e0 [ 895.952481][ C0] ? import_iovec+0x7c/0xb0 [ 895.956986][ C0] ___sys_sendmsg+0x21c/0x290 [ 895.961664][ C0] ? __sys_sendmsg+0x270/0x270 [ 895.966512][ C0] ? futex_unqueue+0x132/0x160 [ 895.971291][ C0] ? __cfi_futex_wait+0x10/0x10 [ 895.976230][ C0] ? __fdget+0x19c/0x220 [ 895.980566][ C0] __sys_sendmmsg+0x274/0x460 [ 895.985238][ C0] ? __cfi___sys_sendmmsg+0x10/0x10 [ 895.990443][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 895.996247][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 896.001103][ C0] x64_sys_call+0x3f5/0x9a0 [ 896.005609][ C0] do_syscall_64+0x4c/0xa0 [ 896.010021][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.014692][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.019366][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.025259][ C0] RIP: 0033:0x7fad69d8eba9 [ 896.029666][ C0] RSP: 002b:00007fad6abf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 896.038073][ C0] RAX: ffffffffffffffda RBX: 00007fad69fd5fa0 RCX: 00007fad69d8eba9 [ 896.046038][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 896.054003][ C0] RBP: 00007fad69e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 896.061968][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.069930][ C0] R13: 00007fad69fd6038 R14: 00007fad69fd5fa0 R15: 00007fff03c8a5c8 [ 896.077900][ C0] [ 896.080917][ C0] task:syz.2.3776 state:S stack:28080 pid:13119 ppid:9417 flags:0x00004000 [ 896.090116][ C0] Call Trace: [ 896.093389][ C0] [ 896.096316][ C0] __schedule+0xb87/0x14e0 [ 896.100731][ C0] ? plist_add+0x3e8/0x470 [ 896.105148][ C0] ? release_firmware_map_entry+0x194/0x194 [ 896.111137][ C0] ? __cfi___futex_queue+0x10/0x10 [ 896.116275][ C0] ? futex_wait_setup+0x1b0/0x240 [ 896.121337][ C0] schedule+0xbd/0x170 [ 896.125447][ C0] futex_wait_queue+0xf5/0x230 [ 896.130210][ C0] futex_wait+0x1a3/0x750 [ 896.134538][ C0] ? wake_up_q+0x105/0x1b0 [ 896.138955][ C0] ? __cfi_futex_wait+0x10/0x10 [ 896.143811][ C0] ? __cfi_futex_wake+0x10/0x10 [ 896.148661][ C0] do_futex+0x2dc/0x420 [ 896.152817][ C0] ? __cfi_do_futex+0x10/0x10 [ 896.157501][ C0] __se_sys_futex+0x273/0x2e0 [ 896.162262][ C0] ? __x64_sys_futex+0x100/0x100 [ 896.167198][ C0] ? xfd_validate_state+0x70/0x150 [ 896.172313][ C0] __x64_sys_futex+0xe5/0x100 [ 896.176993][ C0] x64_sys_call+0x7ec/0x9a0 [ 896.181495][ C0] do_syscall_64+0x4c/0xa0 [ 896.185904][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.190670][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.195354][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.201245][ C0] RIP: 0033:0x7fad69d8eba9 [ 896.205656][ C0] RSP: 002b:00007fad6abd10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 896.214076][ C0] RAX: ffffffffffffffda RBX: 00007fad69fd6098 RCX: 00007fad69d8eba9 [ 896.222043][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad69fd6098 [ 896.230013][ C0] RBP: 00007fad69fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 896.238070][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.246042][ C0] R13: 00007fad69fd6128 R14: 00007fff03c8a4e0 R15: 00007fff03c8a5c8 [ 896.254020][ C0] [ 896.257044][ C0] task:syz.2.3776 state:R running task stack:29488 pid:13120 ppid:9417 flags:0x00004008 [ 896.267824][ C0] Call Trace: [ 896.271119][ C0] [ 896.274050][ C0] __schedule+0xb8f/0x14e0 [ 896.278470][ C0] ? __kernel_text_address+0xd/0x30 [ 896.283763][ C0] ? inat_get_opcode_attribute+0xc/0x50 [ 896.289398][ C0] ? insn_get_prefixes+0xa0f/0x1720 [ 896.294604][ C0] ? insn_get_prefixes+0xa0f/0x1720 [ 896.299799][ C0] ? inat_get_opcode_attribute+0xc/0x50 [ 896.305358][ C0] ? insn_get_opcode+0x79f/0xa90 [ 896.310289][ C0] ? inat_get_escape_attribute+0x111/0x1a0 [ 896.316100][ C0] ? irqentry_exit+0x37/0x40 [ 896.320687][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 896.326494][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 896.332648][ C0] ? smp_call_function_many_cond+0x88e/0x960 [ 896.338632][ C0] ? smp_call_function_many_cond+0x87c/0x960 [ 896.344632][ C0] ? smp_call_function_many_cond+0x88e/0x960 [ 896.350613][ C0] ? __cfi_do_sync_core+0x10/0x10 [ 896.355649][ C0] ? smp_call_function_many+0x40/0x40 [ 896.361023][ C0] ? packet_rcv_fanout+0x2cf/0x5c0 [ 896.366177][ C0] ? text_poke+0x30/0x30 [ 896.370416][ C0] ? text_poke_loc_init+0xd6/0x570 [ 896.375526][ C0] ? __cfi_do_sync_core+0x10/0x10 [ 896.380550][ C0] ? on_each_cpu_cond_mask+0x43/0x80 [ 896.385832][ C0] ? text_poke_bp_batch+0x1cc/0x580 [ 896.391046][ C0] ? text_poke_loc_init+0x570/0x570 [ 896.396268][ C0] ? __kasan_check_write+0x14/0x20 [ 896.401413][ C0] ? mutex_lock+0x8d/0x1a0 [ 896.405841][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 896.411144][ C0] ? packet_rcv_fanout+0x2cf/0x5c0 [ 896.416610][ C0] ? text_poke_finish+0x1a/0x30 [ 896.421465][ C0] ? arch_jump_label_transform_apply+0x15/0x30 [ 896.427625][ C0] ? __jump_label_update+0x37c/0x3a0 [ 896.432913][ C0] ? jump_label_update+0x39b/0x450 [ 896.438021][ C0] ? static_key_slow_inc_cpuslocked+0x1c0/0x300 [ 896.444275][ C0] ? preempt_count_add+0x90/0x1b0 [ 896.449292][ C0] ? __cfi_static_key_slow_inc_cpuslocked+0x10/0x10 [ 896.455978][ C0] ? static_key_slow_inc+0x1a/0x30 [ 896.461112][ C0] ? bpf_enable_stats+0x106/0x140 [ 896.466146][ C0] ? __sys_bpf+0x5a3/0x780 [ 896.470582][ C0] ? bpf_link_show_fdinfo+0x320/0x320 [ 896.475972][ C0] ? up_read+0x56/0x1d0 [ 896.480143][ C0] ? do_user_addr_fault+0x9ac/0x1050 [ 896.485436][ C0] ? debug_smp_processor_id+0x17/0x20 [ 896.490818][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 896.495414][ C0] ? x64_sys_call+0x488/0x9a0 [ 896.500182][ C0] ? do_syscall_64+0x4c/0xa0 [ 896.504850][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.509526][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.514199][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.520271][ C0] [ 896.523293][ C0] task:syz.2.3776 state:S stack:26048 pid:13121 ppid:9417 flags:0x00004000 [ 896.532583][ C0] Call Trace: [ 896.535903][ C0] [ 896.538857][ C0] __schedule+0xb87/0x14e0 [ 896.543275][ C0] ? plist_add+0x3e8/0x470 [ 896.547706][ C0] ? release_firmware_map_entry+0x194/0x194 [ 896.553608][ C0] ? __cfi___futex_queue+0x10/0x10 [ 896.558815][ C0] ? futex_wait_setup+0x1b0/0x240 [ 896.563834][ C0] schedule+0xbd/0x170 [ 896.567897][ C0] futex_wait_queue+0xf5/0x230 [ 896.572660][ C0] futex_wait+0x1a3/0x750 [ 896.577073][ C0] ? wake_up_q+0x105/0x1b0 [ 896.581575][ C0] ? __cfi_futex_wait+0x10/0x10 [ 896.586519][ C0] ? __cfi_futex_wake+0x10/0x10 [ 896.591397][ C0] ? __kasan_check_write+0x14/0x20 [ 896.596608][ C0] ? bpf_prog_test_run+0x473/0x630 [ 896.601728][ C0] do_futex+0x2dc/0x420 [ 896.605879][ C0] ? selinux_bpf+0xce/0xf0 [ 896.610551][ C0] ? __cfi_do_futex+0x10/0x10 [ 896.615325][ C0] ? __sys_bpf+0x56d/0x780 [ 896.619832][ C0] __se_sys_futex+0x273/0x2e0 [ 896.624507][ C0] ? __x64_sys_futex+0x100/0x100 [ 896.629438][ C0] ? xfd_validate_state+0x70/0x150 [ 896.634550][ C0] ? __kasan_check_write+0x14/0x20 [ 896.639769][ C0] __x64_sys_futex+0xe5/0x100 [ 896.644445][ C0] x64_sys_call+0x7ec/0x9a0 [ 896.648962][ C0] do_syscall_64+0x4c/0xa0 [ 896.653394][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.658087][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.662952][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.668869][ C0] RIP: 0033:0x7fad69d8eba9 [ 896.673285][ C0] RSP: 002b:00007fad6ab8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 896.681788][ C0] RAX: ffffffffffffffda RBX: 00007fad69fd6278 RCX: 00007fad69d8eba9 [ 896.689854][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad69fd6278 [ 896.697908][ C0] RBP: 00007fad69fd6270 R08: 0000000000000000 R09: 0000000000000000 [ 896.705970][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.714033][ C0] R13: 00007fad69fd6308 R14: 00007fff03c8a4e0 R15: 00007fff03c8a5c8 [ 896.722026][ C0] [ 896.725053][ C0] task:syz.6.3778 state:R running task stack:26240 pid:13114 ppid:12973 flags:0x00004000 [ 896.735832][ C0] Call Trace: [ 896.739111][ C0] [ 896.742037][ C0] __schedule+0xb87/0x14e0 [ 896.746466][ C0] ? enqueue_task_rt+0x6e1/0xed0 [ 896.751403][ C0] ? release_firmware_map_entry+0x194/0x194 [ 896.757378][ C0] ? resched_curr+0x10e/0x380 [ 896.762054][ C0] ? __cfi_resched_curr+0x10/0x10 [ 896.767073][ C0] ? preempt_schedule+0xa7/0xb0 [ 896.772021][ C0] preempt_schedule_common+0x9b/0xf0 [ 896.777338][ C0] preempt_schedule+0xa7/0xb0 [ 896.782041][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 896.787632][ C0] ? ttwu_do_wakeup+0x1b4/0x490 [ 896.792502][ C0] preempt_schedule_thunk+0x16/0x18 [ 896.797803][ C0] try_to_wake_up+0x6b8/0x1220 [ 896.802576][ C0] wake_up_q+0xdc/0x1b0 [ 896.806731][ C0] futex_wake+0x5b0/0x890 [ 896.811063][ C0] ? __cfi_futex_wake+0x10/0x10 [ 896.816051][ C0] ? __schedule+0xb8f/0x14e0 [ 896.820664][ C0] do_futex+0x2b9/0x420 [ 896.824917][ C0] ? _copy_from_user+0x8f/0xc0 [ 896.829794][ C0] ? __cfi_do_futex+0x10/0x10 [ 896.834486][ C0] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 896.839714][ C0] __se_sys_futex+0x273/0x2e0 [ 896.844418][ C0] ? __x64_sys_futex+0x100/0x100 [ 896.849469][ C0] ? xfd_validate_state+0x70/0x150 [ 896.854618][ C0] __x64_sys_futex+0xe5/0x100 [ 896.859307][ C0] x64_sys_call+0x7ec/0x9a0 [ 896.863819][ C0] do_syscall_64+0x4c/0xa0 [ 896.868934][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.873616][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.878295][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.884189][ C0] RIP: 0033:0x7f7761f8eba9 [ 896.888612][ C0] RSP: 002b:00007ffcc2788038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 896.897038][ C0] RAX: ffffffffffffffda RBX: 00007f77621d5fa8 RCX: 00007f7761f8eba9 [ 896.905268][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f77621d5fa8 [ 896.913237][ C0] RBP: 0000000000000000 R08: 0000000000000008 R09: 0000000cc278832f [ 896.921206][ C0] R10: 00007f77621d5fa0 R11: 0000000000000246 R12: 00007f77621d5fac [ 896.929258][ C0] R13: 00007f77621d5fa0 R14: 000000000000160e R15: 0000000000000003 [ 896.937239][ C0] [ 896.940253][ C0] task:syz.6.3778 state:S stack:25696 pid:13115 ppid:12973 flags:0x00004000 [ 896.949472][ C0] Call Trace: [ 896.952787][ C0] [ 896.955712][ C0] __schedule+0xb87/0x14e0 [ 896.960124][ C0] ? plist_add+0x3e8/0x470 [ 896.964537][ C0] ? release_firmware_map_entry+0x194/0x194 [ 896.970424][ C0] ? __cfi___futex_queue+0x10/0x10 [ 896.975537][ C0] ? futex_wait_setup+0x1b0/0x240 [ 896.980560][ C0] schedule+0xbd/0x170 [ 896.984625][ C0] futex_wait_queue+0xf5/0x230 [ 896.989391][ C0] futex_wait+0x1a3/0x750 [ 896.993742][ C0] ? __cfi_futex_wait+0x10/0x10 [ 896.998591][ C0] ? __cfi_futex_wake+0x10/0x10 [ 897.003442][ C0] do_futex+0x2dc/0x420 [ 897.007593][ C0] ? __cfi_do_futex+0x10/0x10 [ 897.012276][ C0] __se_sys_futex+0x273/0x2e0 [ 897.016946][ C0] ? __x64_sys_futex+0x100/0x100 [ 897.021968][ C0] __x64_sys_futex+0xe5/0x100 [ 897.026664][ C0] x64_sys_call+0x7ec/0x9a0 [ 897.031170][ C0] do_syscall_64+0x4c/0xa0 [ 897.035582][ C0] ? clear_bhb_loop+0x30/0x80 [ 897.040264][ C0] ? clear_bhb_loop+0x30/0x80 [ 897.044945][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.050839][ C0] RIP: 0033:0x7f7761f8eba9 [ 897.055263][ C0] RSP: 002b:00007f7762dae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 897.063676][ C0] RAX: ffffffffffffffda RBX: 00007f77621d5fa8 RCX: 00007f7761f8eba9 [ 897.071645][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f77621d5fa8 [ 897.079699][ C0] RBP: 00007f77621d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 897.087669][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.095647][ C0] R13: 00007f77621d6038 R14: 00007ffcc2787df0 R15: 00007ffcc2787ed8 [ 897.103646][ C0] [ 897.106762][ C0] task:kmmpd-loop6 state:S stack:28512 pid:13116 ppid:2 flags:0x00004000 [ 897.116148][ C0] Call Trace: [ 897.119425][ C0] [ 897.122349][ C0] __schedule+0xb87/0x14e0 [ 897.126861][ C0] ? release_firmware_map_entry+0x194/0x194 [ 897.132748][ C0] ? __mod_timer+0x7ae/0xb30 [ 897.137335][ C0] schedule+0xbd/0x170 [ 897.141403][ C0] schedule_timeout+0x12c/0x2e0 [ 897.146252][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 897.151624][ C0] ? __cfi_process_timeout+0x10/0x10 [ 897.156912][ C0] schedule_timeout_interruptible+0x43/0x60 [ 897.162809][ C0] kmmpd+0x4a0/0x950 [ 897.166709][ C0] kthread+0x281/0x320 [ 897.170873][ C0] ? __cfi_kmmpd+0x10/0x10 [ 897.175287][ C0] ? __cfi_kthread+0x10/0x10 [ 897.179960][ C0] ret_from_fork+0x1f/0x30 [ 897.184398][ C0] [ 897.187416][ C0] task:ext4-rsv-conver state:I stack:30728 pid:13117 ppid:2 flags:0x00004000 [ 897.196707][ C0] Call Trace: [ 897.199977][ C0] [ 897.202909][ C0] __schedule+0xb87/0x14e0 [ 897.207325][ C0] ? release_firmware_map_entry+0x194/0x194 [ 897.213214][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 897.218757][ C0] ? kthread_data+0x50/0xc0 [ 897.223257][ C0] ? wq_worker_sleeping+0x64/0x280 [ 897.228363][ C0] schedule+0xbd/0x170 [ 897.232425][ C0] rescuer_thread+0xdd6/0xf10 [ 897.237095][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 897.242555][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 897.248447][ C0] ? release_firmware_map_entry+0x194/0x194 [ 897.254334][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 897.259524][ C0] ? __kasan_check_read+0x11/0x20 [ 897.264551][ C0] ? __kthread_parkme+0x142/0x180 [ 897.269579][ C0] kthread+0x281/0x320 [ 897.273644][ C0] ? __cfi_rescuer_thread+0x10/0x10 [ 897.278840][ C0] ? __cfi_kthread+0x10/0x10 [ 897.283439][ C0] ret_from_fork+0x1f/0x30 [ 897.287862][ C0] [ 897.290877][ C0] task:ext4lazyinit state:R running task stack:29168 pid:13118 ppid:2 flags:0x00004000 [ 897.301650][ C0] Call Trace: [ 897.304923][ C0] [ 897.307851][ C0] __schedule+0xb87/0x14e0 [ 897.312270][ C0] ? release_firmware_map_entry+0x194/0x194 [ 897.318245][ C0] ? __mod_timer+0x7ae/0xb30 [ 897.322836][ C0] schedule+0xbd/0x170 [ 897.326905][ C0] schedule_timeout+0x12c/0x2e0 [ 897.331756][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 897.337127][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 897.342145][ C0] ? __cfi_process_timeout+0x10/0x10 [ 897.347480][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 897.352597][ C0] schedule_timeout_interruptible+0x43/0x60 [ 897.358503][ C0] ext4_lazyinit_thread+0xd56/0x1500 [ 897.363790][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 897.369261][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 897.375167][ C0] ? release_firmware_map_entry+0x194/0x194 [ 897.381063][ C0] ? __cfi_ext4_lazyinit_thread+0x10/0x10 [ 897.386781][ C0] ? __kasan_check_read+0x11/0x20 [ 897.391806][ C0] ? __kthread_parkme+0x142/0x180 [ 897.396828][ C0] kthread+0x281/0x320 [ 897.400896][ C0] ? __cfi_ext4_lazyinit_thread+0x10/0x10 [ 897.406699][ C0] ? __cfi_kthread+0x10/0x10 [ 897.411299][ C0] ret_from_fork+0x1f/0x30 [ 897.415735][ C0] [ 897.418770][ C0] task:syz.0.3779 state:R running task stack:26240 pid:13122 ppid:10081 flags:0x00004000 [ 897.429570][ C0] Call Trace: [ 897.432853][ C0] [ 897.435792][ C0] __schedule+0xb87/0x14e0 [ 897.440391][ C0] ? release_firmware_map_entry+0x194/0x194 [ 897.446283][ C0] schedule+0xbd/0x170 [ 897.450351][ C0] futex_wait_queue+0xf5/0x230 [ 897.455148][ C0] futex_wait+0x1a3/0x750 [ 897.459489][ C0] ? wake_up_q+0x105/0x1b0 [ 897.463902][ C0] ? __cfi_futex_wait+0x10/0x10 [ 897.468779][ C0] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 897.473988][ C0] ? __cfi_futex_wake+0x10/0x10 [ 897.478853][ C0] ? handle_mm_fault+0x17be/0x2640 [ 897.484032][ C0] do_futex+0x2dc/0x420 [ 897.488199][ C0] ? _copy_from_user+0x8f/0xc0 [ 897.492974][ C0] ? __cfi_do_futex+0x10/0x10 [ 897.497658][ C0] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 897.502883][ C0] __se_sys_futex+0x273/0x2e0 [ 897.507564][ C0] ? __x64_sys_futex+0x100/0x100 [ 897.512504][ C0] ? xfd_validate_state+0x70/0x150 [ 897.517618][ C0] ? __kasan_check_write+0x14/0x20 [ 897.522764][ C0] __x64_sys_futex+0xe5/0x100 [ 897.527458][ C0] x64_sys_call+0x7ec/0x9a0 [ 897.531970][ C0] do_syscall_64+0x4c/0xa0 [ 897.536396][ C0] ? clear_bhb_loop+0x30/0x80 [ 897.541081][ C0] ? clear_bhb_loop+0x30/0x80 [ 897.545764][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.551669][ C0] RIP: 0033:0x7fe3cd98eba9 [ 897.556099][ C0] RSP: 002b:00007ffc045e3a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 897.564520][ C0] RAX: ffffffffffffffda RBX: 00000000000d5667 RCX: 00007fe3cd98eba9 [ 897.572500][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3cdbd5fac [ 897.580474][ C0] RBP: 0000000000000032 R08: 0004527c935eaa06 R09: 00000009045e3d7f [ 897.588449][ C0] R10: 00007ffc045e3b80 R11: 0000000000000246 R12: 00007fe3cdbd5fac [ 897.596421][ C0] R13: 00007ffc045e3b80 R14: 00000000000d5699 R15: 00007ffc045e3ba0 [ 897.604413][ C0] [ 897.607454][ C0] task:syz.0.3779 state:S stack:28192 pid:13123 ppid:10081 flags:0x00004000 [ 897.616680][ C0] Call Trace: [ 897.619972][ C0] [ 897.622918][ C0] __schedule+0xb87/0x14e0 [ 897.627412][ C0] ? release_firmware_map_entry+0x194/0x194 [ 897.633312][ C0] ? avc_has_perm+0x158/0x240 [ 897.637990][ C0] schedule+0xbd/0x170 [ 897.642052][ C0] schedule_timeout+0xa6/0x2e0 [ 897.646838][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 897.652240][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 897.658054][ C0] ? prepare_to_wait_exclusive+0x191/0x1d0 [ 897.663907][ C0] unix_wait_for_peer+0x1e5/0x2e0 [ 897.668944][ C0] ? unix_find_other+0x880/0x880 [ 897.673891][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 897.679985][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 897.685207][ C0] ? security_unix_may_send+0x8c/0xb0 [ 897.690603][ C0] unix_dgram_sendmsg+0xed4/0x16d0 [ 897.695731][ C0] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 897.701298][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 897.706762][ C0] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 897.712317][ C0] ____sys_sendmsg+0x5a9/0x990 [ 897.717087][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 897.722199][ C0] ? import_iovec+0x7c/0xb0 [ 897.726707][ C0] ___sys_sendmsg+0x21c/0x290 [ 897.731384][ C0] ? __sys_sendmsg+0x270/0x270 [ 897.736316][ C0] ? up_read+0x56/0x1d0 [ 897.740485][ C0] __sys_sendmmsg+0x274/0x460 [ 897.745176][ C0] ? __cfi___sys_sendmmsg+0x10/0x10 [ 897.750377][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 897.756007][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 897.760940][ C0] x64_sys_call+0x3f5/0x9a0 [ 897.765441][ C0] do_syscall_64+0x4c/0xa0 [ 897.769872][ C0] ? clear_bhb_loop+0x30/0x80 [ 897.774612][ C0] ? clear_bhb_loop+0x30/0x80 [ 897.779294][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.785357][ C0] RIP: 0033:0x7fe3cd98eba9 [ 897.789769][ C0] RSP: 002b:00007fe3ce7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 897.798187][ C0] RAX: ffffffffffffffda RBX: 00007fe3cdbd5fa0 RCX: 00007fe3cd98eba9 [ 897.806159][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 897.814146][ C0] RBP: 00007fe3cda11e19 R08: 0000000000000000 R09: 0000000000000000 [ 897.822141][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.830205][ C0] R13: 00007fe3cdbd6038 R14: 00007fe3cdbd5fa0 R15: 00007ffc045e3928 [ 897.838365][ C0] [ 897.844636][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 897.907582][ T28] audit: type=1326 audit(1757732129.135:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.1.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecbc38eba9 code=0x7fc00000 [ 897.938563][ T474] usb 2-1: USB disconnect, device number 30 [ 898.004475][T12973] EXT4-fs (loop6): unmounting filesystem. [ 898.546644][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.553723][T13140] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.561156][T13140] device bridge_slave_0 entered promiscuous mode [ 898.584694][T13140] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.591756][T13140] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.599315][T13140] device bridge_slave_1 entered promiscuous mode [ 898.636847][T13141] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.644020][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.651660][T13141] device bridge_slave_0 entered promiscuous mode [ 898.658986][T13141] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.666583][T13141] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.674226][T13141] device bridge_slave_1 entered promiscuous mode [ 898.746031][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.753090][T13143] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.760708][T13143] device bridge_slave_0 entered promiscuous mode [ 898.769468][T13143] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.776858][T13143] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.784347][T13143] device bridge_slave_1 entered promiscuous mode [ 898.796880][T13142] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.803936][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.811188][T13142] device bridge_slave_0 entered promiscuous mode [ 898.818128][T13142] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.825205][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.832693][T13142] device bridge_slave_1 entered promiscuous mode [ 898.909186][T13144] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.916354][T13144] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.923899][T13144] device bridge_slave_0 entered promiscuous mode [ 898.944408][T13144] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.951445][T13144] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.958900][T13144] device bridge_slave_1 entered promiscuous mode [ 899.035385][ T334] device veth1_macvtap left promiscuous mode [ 899.041393][ T334] device veth0_vlan left promiscuous mode [ 899.072476][T13140] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.079633][T13140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.086920][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.093944][T13140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.131990][T13142] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.139168][T13142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.146460][T13142] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.153488][T13142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.189346][T13143] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.196513][T13143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.203826][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.210851][T13143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.225588][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.232894][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.241204][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.248894][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.256387][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.263497][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.271455][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.326118][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.334243][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.342138][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.351227][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.359056][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.366653][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.374146][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.381491][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.389794][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.398090][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.405139][ T8866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.412697][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 899.421073][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.429235][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.436280][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.443858][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.452091][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.460328][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.467363][ T8866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.474905][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 899.483199][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.491477][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.498531][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.505942][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.514567][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.522804][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.529833][ T8866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.537357][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 899.545761][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.553969][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.560976][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.570512][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.591824][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.600563][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.623372][T13143] device veth0_vlan entered promiscuous mode [ 899.650115][T13143] device veth1_macvtap entered promiscuous mode [ 899.657343][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.665825][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 899.675652][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 899.683050][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 899.690620][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 899.698967][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.707157][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.715617][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.723028][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.730697][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.739094][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.747383][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.754418][ T8866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.761984][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 899.770352][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.778533][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.785569][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.793006][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 899.822701][T13142] device veth0_vlan entered promiscuous mode [ 899.832086][T13142] device veth1_macvtap entered promiscuous mode [ 899.842679][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.851222][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.859885][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 899.867992][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 899.875622][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 899.883118][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 899.891507][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.899730][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.907979][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.916376][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.924506][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.931968][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.939649][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.948134][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.956446][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.963470][ T8866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.970822][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 899.979129][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.987397][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.994432][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.002438][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 900.010833][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 900.029787][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 900.038350][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 900.062347][T13141] device veth0_vlan entered promiscuous mode [ 900.072146][T13141] device veth1_macvtap entered promiscuous mode [ 900.093055][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 900.101788][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 900.110225][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 900.119204][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 900.127706][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 900.136128][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 900.144291][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 900.152140][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.161126][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.169411][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 900.177824][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 900.186411][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 900.194707][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 900.202996][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 900.210934][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.219200][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 900.227464][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 900.239726][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.247234][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.254697][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.262104][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.272436][T13140] device veth0_vlan entered promiscuous mode [ 900.331110][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 900.340397][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 900.393342][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 900.402846][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 900.792910][T13140] device veth1_macvtap entered promiscuous mode [ 900.816744][T13144] device veth0_vlan entered promiscuous mode [ 900.823467][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 900.831149][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 900.839357][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.848239][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.855948][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.871407][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 900.879943][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 900.892182][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 900.900687][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 900.935515][T13144] device veth1_macvtap entered promiscuous mode [ 900.943169][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 900.952199][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 900.960714][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 901.639289][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 901.714284][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 901.753444][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 901.806754][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 902.979436][T13210] loop4: detected capacity change from 0 to 40427 [ 903.018310][T13210] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 903.343756][T13210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 903.355007][T13210] F2FS-fs (loop4): invalid crc value [ 903.375593][T13210] F2FS-fs (loop4): Found nat_bits in checkpoint [ 903.412602][T13210] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 903.419953][T13210] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 903.435984][ T7075] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 903.491140][T13209] netlink: 'syz.4.3784': attribute type 4 has an invalid length. [ 903.499306][T13209] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 903.499325][T13209] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 903.507468][T13209] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 903.515104][T13209] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 903.522668][T13209] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 903.530410][T13209] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 903.538735][T13209] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 903.771250][ T28] audit: type=1400 audit(1757732134.995:966): avc: denied { remount } for pid=13208 comm="syz.4.3784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 903.798918][ T7075] usb 4-1: Using ep0 maxpacket: 16 [ 903.868441][ T7075] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 903.889422][ T7075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.897870][ T7075] usb 4-1: Product: syz [ 903.902051][ T7075] usb 4-1: Manufacturer: syz [ 903.906832][ T7075] usb 4-1: SerialNumber: syz [ 903.925379][ T7075] usb 4-1: config 0 descriptor?? [ 903.931763][ T7075] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 903.945929][ T334] device bridge_slave_1 left promiscuous mode [ 903.956447][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.968406][ T7075] usb 4-1: Detected FT232H [ 904.055368][ T334] device bridge_slave_0 left promiscuous mode [ 904.068181][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.090889][ T334] device bridge_slave_1 left promiscuous mode [ 904.097790][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.109308][ T334] device bridge_slave_0 left promiscuous mode [ 904.116322][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.134993][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 904.143840][ T334] device bridge_slave_1 left promiscuous mode [ 904.152849][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.139256][ T7075] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 905.156556][ T334] device bridge_slave_0 left promiscuous mode [ 905.176591][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.197389][ T7075] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 905.208520][ T334] device bridge_slave_1 left promiscuous mode [ 905.214793][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.222430][ T334] device bridge_slave_0 left promiscuous mode [ 905.228768][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.238437][ T334] device veth1_macvtap left promiscuous mode [ 905.244670][ T334] device veth0_vlan left promiscuous mode [ 905.250900][ T334] device veth1_macvtap left promiscuous mode [ 905.265265][ T7075] usb 4-1: USB disconnect, device number 6 [ 905.287363][ T334] device veth0_vlan left promiscuous mode [ 905.294350][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 905.305330][ T7075] ftdi_sio 4-1:0.0: device disconnected [ 905.320867][ T334] device veth1_macvtap left promiscuous mode [ 905.334093][ T334] device veth0_vlan left promiscuous mode [ 905.340867][ T334] device veth1_macvtap left promiscuous mode [ 905.347340][ T334] device veth0_vlan left promiscuous mode [ 905.732885][T13270] loop9: detected capacity change from 0 to 2048 [ 905.789390][T13270] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 905.800435][T13270] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.825818][T13270] fs-verity: sha512 using implementation "sha512-avx2" [ 905.911123][ T28] audit: type=1400 audit(1757732137.055:967): avc: denied { ioctl } for pid=13269 comm="syz.9.3801" path="/6/file0/file0/file0" dev="loop9" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 906.989558][ T28] audit: type=1400 audit(1757732137.225:968): avc: denied { connect } for pid=13269 comm="syz.9.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 907.223197][T13143] EXT4-fs (loop9): unmounting filesystem. [ 907.686261][T13268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 907.734908][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3802'. [ 907.745309][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 907.755401][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 907.769630][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 907.783998][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 907.806384][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 907.820103][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 907.834801][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 907.848838][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 907.997765][T13296] tc_dump_action: action bad kind [ 908.155508][T13299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 908.371228][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 908.571960][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.581857][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 908.590730][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 908.599712][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 908.609309][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 908.618609][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 908.630095][ T489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 909.689257][T13301] loop7: detected capacity change from 0 to 40427 [ 909.783462][T13309] loop8: detected capacity change from 0 to 4096 [ 912.230231][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 912.324652][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 912.337489][T13301] F2FS-fs (loop7): fault_injection options not supported [ 912.345364][T13301] F2FS-fs (loop7): invalid crc value [ 912.368313][ T28] audit: type=1400 audit(1757732143.595:969): avc: denied { read write } for pid=13313 comm="syz.3.3812" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 912.391860][ T28] audit: type=1400 audit(1757732143.595:970): avc: denied { open } for pid=13313 comm="syz.3.3812" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 912.425783][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 912.435274][T13309] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 912.446874][T13301] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4) [ 912.456228][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 912.464549][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 912.473012][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.476504][T13309] EXT4-fs (loop8): shut down requested (0) [ 912.481289][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 912.495379][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 912.503730][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 912.508034][ T28] audit: type=1326 audit(1757732143.735:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13313 comm="syz.3.3812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcde898eba9 code=0x0 [ 912.806013][T13325] loop4: detected capacity change from 0 to 16 [ 912.938737][T13325] erofs: (device loop4): mounted with root inode @ nid 36. [ 912.985264][T13309] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3811'. [ 913.033061][ T28] audit: type=1400 audit(1757732144.235:972): avc: denied { write } for pid=13306 comm="syz.4.3810" path="socket:[71174]" dev="sockfs" ino=71174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 914.107282][T13140] EXT4-fs (loop8): unmounting filesystem. [ 914.165176][T13326] overlayfs: statfs failed on './file0' [ 914.257364][ T28] audit: type=1400 audit(1757732145.485:973): avc: denied { unmount } for pid=13142 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 914.551378][T13351] incfs: Backing dir is not set, filesystem can't be mounted. [ 914.559046][T13351] incfs: mount failed -2 [ 914.643730][T13303] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 914.913810][T13303] usb 8-1: Using ep0 maxpacket: 16 [ 914.921306][T13303] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 914.931883][T13303] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 914.943534][T13303] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.956114][T13303] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.966500][T13303] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.975281][T13303] usb 8-1: Product: syz [ 914.979975][T13303] usb 8-1: Manufacturer: syz [ 914.985616][T13303] usb 8-1: SerialNumber: syz [ 914.986977][ T1114] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 915.113029][T13359] loop8: detected capacity change from 0 to 40427 [ 915.123272][T13359] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 915.131266][T13359] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 915.140435][T13359] F2FS-fs (loop8): invalid crc_offset: 33558524 [ 915.148197][T13359] F2FS-fs (loop8): Found nat_bits in checkpoint [ 915.168247][T13359] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 915.175332][T13359] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 915.213695][ T1114] usb 5-1: Using ep0 maxpacket: 16 [ 915.221969][ T1114] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 915.231245][ T1114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.247409][ T1114] usb 5-1: Product: syz [ 915.251691][ T1114] usb 5-1: Manufacturer: syz [ 915.257510][ T1114] usb 5-1: SerialNumber: syz [ 915.264217][ T1114] usb 5-1: config 0 descriptor?? [ 915.270890][ T1114] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 915.279312][ T1114] usb 5-1: Detected FT232H [ 916.116818][T13367] loop7: detected capacity change from 0 to 1024 [ 916.125459][T13367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 916.151343][ T1114] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 916.163859][T13367] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 916.207826][ T28] audit: type=1400 audit(1757732147.435:974): avc: denied { lock } for pid=13346 comm="syz.7.3818" path="/6/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 923.076748][ T1114] ftdi_sio 5-1:0.0: GPIO initialisation failed: -110 [ 923.084061][ T1114] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 923.235120][ T967] usb 8-1: USB disconnect, device number 2 [ 923.239669][T13141] EXT4-fs (loop7): unmounting filesystem. [ 923.254234][T10104] usb 5-1: USB disconnect, device number 32 [ 923.263977][T10104] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 923.271477][T13376] loop9: detected capacity change from 0 to 4096 [ 923.273618][T10104] ftdi_sio 5-1:0.0: device disconnected [ 923.942342][T13388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 924.861308][T13390] loop8: detected capacity change from 0 to 8192 [ 925.069545][T13376] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 925.086608][T13376] overlayfs: missing 'lowerdir' [ 925.170886][T13399] 9pnet_fd: Insufficient options for proto=fd [ 925.471321][ T28] audit: type=1400 audit(1757732156.415:975): avc: denied { read } for pid=13392 comm="syz.4.3828" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 925.545069][ T28] audit: type=1400 audit(1757732156.415:976): avc: denied { open } for pid=13392 comm="syz.4.3828" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 925.576488][ T28] audit: type=1326 audit(1757732156.795:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.3.3829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcde898eba9 code=0x0 [ 925.920770][T13143] EXT4-fs (loop9): unmounting filesystem. [ 926.436635][T13416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42575 sclass=netlink_route_socket pid=13416 comm=syz.3.3829 [ 926.669451][T13413] loop7: detected capacity change from 0 to 40427 [ 926.678257][T13413] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 926.905059][T13413] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 927.151202][T13413] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 927.260037][T13413] F2FS-fs (loop7): Found nat_bits in checkpoint [ 927.281208][T13423] loop4: detected capacity change from 0 to 4096 [ 927.397047][T13413] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 927.400921][T13423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 927.404254][T13413] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 927.460492][T13423] overlayfs: missing 'lowerdir' [ 927.500112][T13436] loop9: detected capacity change from 0 to 4096 [ 930.984665][T13436] EXT4-fs: error -4 creating inode table initialization thread [ 931.001798][T13144] EXT4-fs (loop4): unmounting filesystem. [ 931.005203][T13436] EXT4-fs (loop9): mount failed [ 931.553796][ T28] audit: type=1400 audit(1757732162.755:978): avc: denied { getopt } for pid=13447 comm="syz.3.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 931.717121][T13455] loop8: detected capacity change from 0 to 4096 [ 932.213476][ T28] audit: type=1400 audit(1757732162.755:979): avc: denied { ioctl } for pid=13447 comm="syz.3.3840" path="socket:[71939]" dev="sockfs" ino=71939 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 932.259914][T13455] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 932.304990][T13466] loop4: detected capacity change from 0 to 512 [ 932.424537][T13455] EXT4-fs (loop8): shut down requested (0) [ 932.432208][T13466] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 932.455808][T13466] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 932.465239][T13466] EXT4-fs (loop4): 1 truncate cleaned up [ 932.470979][T13466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 933.423695][ T28] audit: type=1400 audit(1757732164.305:980): avc: denied { ioctl } for pid=13475 comm="syz.3.3849" path="socket:[71431]" dev="sockfs" ino=71431 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 933.452204][T13455] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3845'. [ 933.916290][T13144] EXT4-fs (loop4): unmounting filesystem. [ 933.936011][T13491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 935.421413][T13140] EXT4-fs (loop8): unmounting filesystem. [ 935.605396][T13509] loop4: detected capacity change from 0 to 512 [ 935.651893][T13513] loop9: detected capacity change from 0 to 2048 [ 935.658800][T13513] EXT4-fs: quotafile must be on filesystem root [ 935.731657][ T28] audit: type=1400 audit(1757732166.955:981): avc: denied { sqpoll } for pid=13510 comm="syz.8.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 935.783677][T13521] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3857'. [ 935.792024][T13513] loop9: detected capacity change from 0 to 128 [ 935.924696][T13509] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3856: invalid indirect mapped block 10 (level 1) [ 936.087412][T13509] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3856: invalid indirect mapped block 8 (level 1) [ 936.111641][T13509] EXT4-fs (loop4): 1 truncate cleaned up [ 936.119477][T13509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 936.154109][T13509] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.3856: unexpected EA_INODE flag [ 936.182658][T13509] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.3856: unexpected EA_INODE flag [ 936.432212][T13525] syz.4.3856[13525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.432296][T13525] syz.4.3856[13525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.457347][T13525] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.3856: unexpected EA_INODE flag [ 936.557667][ T334] bio_check_eod: 3942 callbacks suppressed [ 936.557685][ T334] kworker/u4:3: attempt to access beyond end of device [ 936.557685][ T334] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 936.581898][T13527] tipc: Started in network mode [ 936.604809][T13527] tipc: Node identity 9218c610bd7b, cluster identity 4711 [ 936.698496][T13527] tipc: Enabled bearer , priority 0 [ 936.749257][T13528] device syzkaller0 entered promiscuous mode [ 936.789516][T13527] tipc: Resetting bearer [ 936.810371][T13526] tipc: Resetting bearer [ 936.841533][T13526] tipc: Disabling bearer [ 938.223142][T13530] loop9: detected capacity change from 0 to 40427 [ 938.243661][T13530] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 938.251518][T13530] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 938.263009][T13547] loop8: detected capacity change from 0 to 4096 [ 938.274433][T13530] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 938.334007][T13547] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 938.345782][T13530] F2FS-fs (loop9): Found nat_bits in checkpoint [ 938.399747][T13547] EXT4-fs (loop8): shut down requested (0) [ 938.445137][T13530] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 938.452379][T13530] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 938.777268][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3864'. [ 940.063057][T13574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 940.742191][T13140] EXT4-fs (loop8): unmounting filesystem. [ 940.814838][T13144] EXT4-fs (loop4): unmounting filesystem. [ 940.953928][ T28] audit: type=1400 audit(1757732172.185:982): avc: denied { bind } for pid=13586 comm="syz.9.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 940.982667][ T28] audit: type=1400 audit(1757732172.205:983): avc: denied { listen } for pid=13586 comm="syz.9.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 941.009621][ T28] audit: type=1400 audit(1757732172.205:984): avc: denied { accept } for pid=13586 comm="syz.9.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 941.090679][ T28] audit: type=1400 audit(1757732172.315:985): avc: denied { read } for pid=13586 comm="syz.9.3870" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 941.334437][ T28] audit: type=1400 audit(1757732172.355:986): avc: denied { open } for pid=13586 comm="syz.9.3870" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 941.474256][T13585] loop8: detected capacity change from 0 to 40427 [ 941.481881][T13585] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 941.497066][T13585] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 941.511340][T13585] F2FS-fs (loop8): invalid crc_offset: 33558524 [ 941.548178][T13585] F2FS-fs (loop8): Found nat_bits in checkpoint [ 941.592890][ T28] audit: type=1400 audit(1757732172.815:987): avc: denied { accept } for pid=13604 comm="syz.7.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 941.612131][T13585] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 941.619913][T13585] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 942.673888][ T28] audit: type=1400 audit(1757732173.895:988): avc: denied { create } for pid=13628 comm="syz.7.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 942.935699][T13643] loop7: detected capacity change from 0 to 8192 [ 943.297590][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 945.591357][ T28] audit: type=1400 audit(1757732176.815:989): avc: denied { create } for pid=13664 comm="syz.7.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 945.615130][T13665] FAULT_INJECTION: forcing a failure. [ 945.615130][T13665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.643752][T13665] CPU: 0 PID: 13665 Comm: syz.8.3895 Not tainted syzkaller #0 [ 945.651254][T13665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.661555][T13665] Call Trace: [ 945.664843][T13665] [ 945.667779][T13665] __dump_stack+0x21/0x24 [ 945.672123][T13665] dump_stack_lvl+0xee/0x150 [ 945.676725][T13665] ? __cfi_dump_stack_lvl+0x8/0x8 [ 945.681776][T13665] dump_stack+0x15/0x24 [ 945.684638][ T28] audit: type=1400 audit(1757732176.815:990): avc: denied { ioctl } for pid=13664 comm="syz.7.3896" path="socket:[72778]" dev="sockfs" ino=72778 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 945.686030][T13665] should_fail_ex+0x3d4/0x520 [ 945.715616][T13665] should_fail+0xb/0x10 [ 945.719794][T13665] should_fail_usercopy+0x1a/0x20 [ 945.724932][T13665] _copy_from_user+0x1e/0xc0 [ 945.729546][T13665] __sys_bpf+0x277/0x780 [ 945.733807][T13665] ? bpf_link_show_fdinfo+0x320/0x320 [ 945.739202][T13665] ? __cfi_ksys_write+0x10/0x10 [ 945.744078][T13665] ? debug_smp_processor_id+0x17/0x20 [ 945.749527][T13665] __x64_sys_bpf+0x7c/0x90 [ 945.753982][T13665] x64_sys_call+0x488/0x9a0 [ 945.758501][T13665] do_syscall_64+0x4c/0xa0 [ 945.762935][T13665] ? clear_bhb_loop+0x30/0x80 [ 945.767634][T13665] ? clear_bhb_loop+0x30/0x80 [ 945.772345][T13665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.778254][T13665] RIP: 0033:0x7ff8d818eba9 [ 945.782768][T13665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.802390][T13665] RSP: 002b:00007ff8d8fe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 945.810830][T13665] RAX: ffffffffffffffda RBX: 00007ff8d83d5fa0 RCX: 00007ff8d818eba9 [ 945.818936][T13665] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 945.827023][T13665] RBP: 00007ff8d8fe8090 R08: 0000000000000000 R09: 0000000000000000 [ 945.835020][T13665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.843185][T13665] R13: 00007ff8d83d6038 R14: 00007ff8d83d5fa0 R15: 00007ffc77b69228 [ 945.851187][T13665] [ 945.891901][T13679] xt_hashlimit: max too large, truncated to 1048576 [ 945.913728][T13680] xt_hashlimit: max too large, truncated to 1048576 [ 945.928484][T13661] loop9: detected capacity change from 0 to 40427 [ 945.943336][T13661] F2FS-fs (loop9): fault_injection options not supported [ 945.952541][T13661] F2FS-fs (loop9): invalid crc value [ 946.015573][T13661] F2FS-fs (loop9): Found nat_bits in checkpoint [ 946.046830][T13684] loop7: detected capacity change from 0 to 8192 [ 946.109180][T13661] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 946.183667][ T28] audit: type=1400 audit(1757732177.405:991): avc: denied { setattr } for pid=13660 comm="syz.9.3893" path="/24/file1/file1" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 946.214385][T13143] syz-executor: attempt to access beyond end of device [ 946.214385][T13143] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 946.682840][T13702] tc_dump_action: action bad kind [ 946.755019][T13704] loop7: detected capacity change from 0 to 4096 [ 946.807437][T13704] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 946.830140][T13704] EXT4-fs (loop7): shut down requested (0) [ 946.966574][T13716] loop9: detected capacity change from 0 to 1024 [ 946.974334][T13716] EXT4-fs: Ignoring removed i_version option [ 946.982480][T13716] EXT4-fs (loop9): Test dummy encryption mode enabled [ 947.005291][T13716] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 947.169270][T13704] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 947.330244][T13704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3908'. [ 947.417061][ T28] audit: type=1400 audit(1757732178.645:992): avc: denied { ioctl } for pid=13724 comm="syz.3.3913" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=72923 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 947.788862][T13737] 9pnet_fd: Insufficient options for proto=fd [ 947.871243][T13143] EXT4-fs (loop9): unmounting filesystem. [ 947.881179][ T28] audit: type=1400 audit(1757732179.115:993): avc: denied { relabelfrom } for pid=13736 comm="syz.8.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 947.901373][ T28] audit: type=1400 audit(1757732179.115:994): avc: denied { relabelto } for pid=13736 comm="syz.8.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 948.058223][T13141] EXT4-fs (loop7): unmounting filesystem. [ 948.166770][T13747] loop9: detected capacity change from 0 to 512 [ 948.176293][T13747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 948.187918][T13747] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 948.253105][T13747] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.3920: corrupted in-inode xattr [ 948.265287][T13747] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.3920: couldn't read orphan inode 15 (err -117) [ 948.277910][T13747] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 948.281644][T13750] binder: 13749:13750 ioctl c018620c 200000000200 returned -1 [ 948.288970][ T28] audit: type=1400 audit(1757732179.515:995): avc: denied { ioctl } for pid=13749 comm="syz.7.3921" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 948.329476][ T28] audit: type=1400 audit(1757732179.515:996): avc: denied { set_context_mgr } for pid=13749 comm="syz.7.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 948.351627][T13143] EXT4-fs (loop9): unmounting filesystem. [ 950.009181][T13766] loop4: detected capacity change from 0 to 8192 [ 950.236814][T13779] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3927'. [ 950.640381][T13790] tc_dump_action: action bad kind [ 951.133405][ T28] audit: type=1400 audit(1757732182.355:997): avc: denied { write } for pid=13791 comm="syz.3.3933" path="socket:[73050]" dev="sockfs" ino=73050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 951.163694][ T7075] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 951.277329][T13785] loop4: detected capacity change from 0 to 40427 [ 951.284843][T13785] F2FS-fs (loop4): fault_injection options not supported [ 951.293446][T13785] F2FS-fs (loop4): invalid crc value [ 951.312976][T13785] F2FS-fs (loop4): Found nat_bits in checkpoint [ 951.363679][ T7075] usb 8-1: Using ep0 maxpacket: 32 [ 951.381910][ T7075] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 951.397763][T13785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 951.442405][T13144] syz-executor: attempt to access beyond end of device [ 951.442405][T13144] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 951.443387][T11052] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 951.518619][ T7075] usb 8-1: config 0 has no interface number 0 [ 951.527340][ T7075] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 951.536626][ T7075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.544793][ T7075] usb 8-1: Product: syz [ 951.549144][ T7075] usb 8-1: Manufacturer: syz [ 951.553781][ T7075] usb 8-1: SerialNumber: syz [ 951.559107][ T7075] usb 8-1: config 0 descriptor?? [ 951.564940][ T7075] smsc95xx v2.0.0 [ 952.677153][T13817] loop4: detected capacity change from 0 to 8192 [ 952.723660][T11052] usb 10-1: Using ep0 maxpacket: 16 [ 952.731618][T11052] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 952.741255][T11052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.749454][T11052] usb 10-1: Product: syz [ 952.753916][T11052] usb 10-1: Manufacturer: syz [ 952.758660][T11052] usb 10-1: SerialNumber: syz [ 952.768626][T11052] usb 10-1: config 0 descriptor?? [ 952.778796][T11052] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 952.788179][T11052] usb 10-1: Detected FT232H [ 953.307953][T11052] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 953.506515][T13833] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3944'. [ 953.673952][ T7075] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 953.814935][T13838] loop7: detected capacity change from 0 to 1024 [ 953.821792][T13838] EXT4-fs: Ignoring removed i_version option [ 953.830601][T11052] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 953.837681][ T7075] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 953.844859][T11052] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 953.854219][T13838] EXT4-fs (loop7): Test dummy encryption mode enabled [ 953.855078][ T7075] usb 8-1: USB disconnect, device number 3 [ 953.892719][T13838] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 953.920028][T11052] usb 10-1: USB disconnect, device number 2 [ 953.965756][T11052] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 953.979690][T11052] ftdi_sio 10-1:0.0: device disconnected [ 954.370934][T13850] loop9: detected capacity change from 0 to 512 [ 954.386568][T13850] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 954.402380][T13850] EXT4-fs (loop9): 1 truncate cleaned up [ 954.408339][T13850] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 954.420467][ T28] audit: type=1400 audit(1757732185.645:998): avc: denied { setopt } for pid=13849 comm="syz.9.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 954.448928][T13143] EXT4-fs (loop9): unmounting filesystem. [ 954.536949][T13856] loop9: detected capacity change from 0 to 4096 [ 954.560124][T13856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 954.596972][T13856] overlayfs: missing 'lowerdir' [ 954.681970][T13141] EXT4-fs (loop7): unmounting filesystem. [ 955.570960][T13863] loop4: detected capacity change from 0 to 4096 [ 955.588335][T13863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 955.618667][T13143] EXT4-fs (loop9): unmounting filesystem. [ 955.948924][T13863] EXT4-fs (loop4): shut down requested (0) [ 957.042400][T13863] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 957.057954][T13863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3952'. [ 957.094099][T13889] loop7: detected capacity change from 0 to 4096 [ 957.140130][T13889] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 957.142141][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 957.168420][T13889] overlayfs: missing 'lowerdir' [ 957.687411][ T28] audit: type=1400 audit(1757732188.565:999): avc: denied { create } for pid=13891 comm="syz.3.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 957.720785][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'. [ 957.960260][T13141] EXT4-fs (loop7): unmounting filesystem. [ 958.072543][T13144] EXT4-fs (loop4): unmounting filesystem. [ 958.175806][ T28] audit: type=1400 audit(1757732189.405:1000): avc: denied { ioctl } for pid=13902 comm="syz.3.3963" path="socket:[73362]" dev="sockfs" ino=73362 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 958.278371][T13909] loop4: detected capacity change from 0 to 16 [ 958.299011][T13909] erofs: (device loop4): mounted with root inode @ nid 36. [ 958.370657][T13901] loop9: detected capacity change from 0 to 40427 [ 958.390576][T13901] F2FS-fs (loop9): fault_injection options not supported [ 958.418720][T13901] F2FS-fs (loop9): invalid crc value [ 958.442453][T13901] F2FS-fs (loop9): Found nat_bits in checkpoint [ 958.521814][T13901] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 958.630717][T13143] syz-executor: attempt to access beyond end of device [ 958.630717][T13143] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 962.009919][T13947] loop4: detected capacity change from 0 to 8192 [ 962.054712][T13947] loop4: p2 p3 p4[EZD] [ 962.058973][ T28] audit: type=1400 audit(1757732193.285:1001): avc: denied { bind } for pid=13952 comm="syz.8.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 962.168137][T13947] loop4: p3 start 360447 is beyond EOD, truncated [ 962.183731][T13947] loop4: p4 size 264072 extends beyond EOD, truncated [ 962.271225][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3977'. [ 962.518737][T13950] loop9: detected capacity change from 0 to 40427 [ 962.540827][T13950] F2FS-fs (loop9): fault_injection options not supported [ 962.559129][T13950] F2FS-fs (loop9): invalid crc value [ 962.573172][T13950] F2FS-fs (loop9): Found nat_bits in checkpoint [ 962.650854][T13132] udevd[13132]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 962.652330][T13128] udevd[13128]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 962.675165][T13950] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 962.712643][T13968] loop4: detected capacity change from 0 to 8192 [ 962.730919][T13143] syz-executor: attempt to access beyond end of device [ 962.730919][T13143] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 962.858382][T13972] xt_hashlimit: size too large, truncated to 1048576 [ 962.992907][ T28] audit: type=1400 audit(1757732194.215:1002): avc: denied { setopt } for pid=13976 comm="syz.9.3980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 963.108539][T13981] loop8: detected capacity change from 0 to 8192 [ 963.636066][T13993] loop8: detected capacity change from 0 to 4096 [ 963.686803][T13993] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 963.742799][T13993] overlayfs: missing 'lowerdir' [ 963.833673][ T28] audit: type=1400 audit(1757732195.055:1003): avc: denied { map } for pid=13999 comm="syz.4.3989" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 964.992073][T14003] netlink: 'syz.7.3988': attribute type 50 has an invalid length. [ 965.227904][T13140] EXT4-fs (loop8): unmounting filesystem. [ 968.733950][T14034] futex_wake_op: syz.3.3999 tries to shift op by -1; fix this program [ 969.114373][T14030] loop8: detected capacity change from 0 to 1024 [ 969.229228][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 969.368376][T14030] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 969.910672][T14047] loop4: detected capacity change from 0 to 512 [ 969.923306][T14047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 969.949714][T14047] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4000: bad orphan inode 131083 [ 969.964279][T14047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 969.984627][T13140] EXT4-fs (loop8): unmounting filesystem. [ 970.034228][ T28] audit: type=1400 audit(1757732201.265:1004): avc: denied { link } for pid=14044 comm="syz.4.4000" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 970.212062][T13144] EXT4-fs (loop4): unmounting filesystem. [ 972.812555][T14078] proc: Unknown parameter '{' [ 972.869801][ T28] audit: type=1400 audit(1757732204.095:1005): avc: denied { create } for pid=14077 comm="syz.9.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 973.119048][T14089] loop9: detected capacity change from 0 to 2048 [ 973.127337][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 973.174945][ T28] audit: type=1326 audit(1757732204.405:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.4.4013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd089d8eba9 code=0x0 [ 973.397081][T14089] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 973.543049][ T28] audit: type=1400 audit(1757732204.765:1007): avc: denied { map } for pid=14088 comm="syz.9.4012" path="/47/file2/blkio.bfq.avg_queue_size" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 973.544900][T14089] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 973.653749][T14089] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1474 with error 28 [ 973.670729][T14089] EXT4-fs (loop9): This should not happen!! Data will be lost [ 973.670729][T14089] [ 973.692029][T14089] EXT4-fs (loop9): Total free blocks count 0 [ 973.708700][ T28] audit: type=1400 audit(1757732204.935:1008): avc: denied { read } for pid=14105 comm="syz.7.4014" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 973.745329][T14089] EXT4-fs (loop9): Free/Dirty block details [ 973.751361][T14089] EXT4-fs (loop9): free_blocks=2415919104 [ 973.763631][T14089] EXT4-fs (loop9): dirty_blocks=1488 [ 973.764992][ T28] audit: type=1400 audit(1757732204.935:1009): avc: denied { open } for pid=14105 comm="syz.7.4014" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 973.774138][T14089] EXT4-fs (loop9): Block reservation details [ 973.871020][T14089] EXT4-fs (loop9): i_reserved_data_blocks=93 [ 974.323147][ T335] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 975.179580][T14119] loop7: detected capacity change from 0 to 40427 [ 975.279791][T14119] F2FS-fs (loop7): fault_injection options not supported [ 975.410231][T14119] F2FS-fs (loop7): invalid crc value [ 975.484535][T14119] F2FS-fs (loop7): Found nat_bits in checkpoint [ 975.577730][T14119] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 975.589706][T14131] loop9: detected capacity change from 0 to 4096 [ 975.616548][T14131] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 975.627649][T14131] EXT4-fs (loop9): shut down requested (0) [ 975.662856][T13141] syz-executor: attempt to access beyond end of device [ 975.662856][T13141] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 975.846083][T14131] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 976.282869][T14147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 976.372365][T13143] EXT4-fs (loop9): unmounting filesystem. [ 976.383827][T10104] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 976.580343][T10104] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.596964][T10104] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.893676][T11820] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 978.995948][T10104] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.009264][T10104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.024122][T10104] usb 4-1: can't set config #1, error -71 [ 979.034136][T10104] usb 4-1: USB disconnect, device number 7 [ 979.093624][T11820] usb 8-1: Using ep0 maxpacket: 16 [ 979.102701][T11820] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 979.126672][T11820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.146858][T11820] usb 8-1: Product: syz [ 979.153308][T11820] usb 8-1: Manufacturer: syz [ 979.163086][T11820] usb 8-1: SerialNumber: syz [ 979.187408][T11820] usb 8-1: config 0 descriptor?? [ 979.208605][T11820] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 979.234275][T11820] usb 8-1: Detected FT232H [ 979.424696][T11820] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 979.436394][T11820] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 979.466384][T11820] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 979.483447][T11820] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 979.494961][T14177] netlink: 'syz.9.4033': attribute type 13 has an invalid length. [ 979.504859][T11820] usb 8-1: USB disconnect, device number 4 [ 979.523031][T11820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 979.546903][T11820] ftdi_sio 8-1:0.0: device disconnected [ 979.586639][ T28] audit: type=1326 audit(1757732210.815:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14178 comm="syz.9.4034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc582f8eba9 code=0x0 [ 979.681560][T14185] loop4: detected capacity change from 0 to 4096 [ 979.737718][T14185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 979.795523][T14185] EXT4-fs (loop4): shut down requested (0) [ 980.000220][T14196] loop7: detected capacity change from 0 to 4096 [ 980.010939][T14185] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 980.044734][T14196] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 980.098918][T14196] overlayfs: missing 'lowerdir' [ 980.180213][T11820] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 980.247434][ T28] audit: type=1400 audit(1757732211.475:1011): avc: denied { append } for pid=14178 comm="syz.9.4034" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 980.383655][T11820] usb 4-1: Using ep0 maxpacket: 16 [ 980.393330][T11820] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 980.416387][T11820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.425424][T11820] usb 4-1: Product: syz [ 980.429719][T11820] usb 4-1: Manufacturer: syz [ 980.435351][T11820] usb 4-1: SerialNumber: syz [ 980.470199][T11820] usb 4-1: config 0 descriptor?? [ 980.489374][T11820] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 980.504583][T11820] usb 4-1: Detected FT232H [ 980.583087][T13144] EXT4-fs (loop4): unmounting filesystem. [ 980.682819][T11820] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 980.835444][T13141] EXT4-fs (loop7): unmounting filesystem. [ 980.842305][T14207] loop9: detected capacity change from 0 to 40427 [ 980.861357][T14207] F2FS-fs (loop9): fault_injection options not supported [ 980.874836][T14207] F2FS-fs (loop9): invalid crc value [ 980.877768][T14209] loop4: detected capacity change from 0 to 40427 [ 980.895066][T11820] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 980.899554][T14209] F2FS-fs (loop4): fault_injection options not supported [ 980.902181][T11820] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 980.922215][T14207] F2FS-fs (loop9): Found nat_bits in checkpoint [ 980.928603][T14209] F2FS-fs (loop4): invalid crc value [ 980.979651][T14207] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 980.990074][T11820] usb 4-1: USB disconnect, device number 8 [ 981.005322][T14209] F2FS-fs (loop4): Found nat_bits in checkpoint [ 981.009115][T11820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 981.026865][T11820] ftdi_sio 4-1:0.0: device disconnected [ 981.080327][T14209] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 981.453796][T13144] syz-executor: attempt to access beyond end of device [ 981.453796][T13144] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 981.545492][ T28] audit: type=1400 audit(1757732212.775:1012): avc: denied { getopt } for pid=14221 comm="syz.8.4045" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 981.737083][T14235] loop4: detected capacity change from 0 to 8192 [ 982.112787][ T28] audit: type=1400 audit(1757732213.335:1013): avc: denied { ioctl } for pid=14238 comm="syz.7.4051" path="socket:[74957]" dev="sockfs" ino=74957 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 982.237032][T14241] loop7: detected capacity change from 0 to 4096 [ 982.274743][T14241] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 982.313026][T14241] EXT4-fs (loop7): shut down requested (0) [ 983.909448][T14256] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 984.031219][T14272] loop4: detected capacity change from 0 to 512 [ 984.038148][T14272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 984.045390][T14272] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 984.050754][ T28] audit: type=1400 audit(1757732215.275:1014): avc: denied { read } for pid=14268 comm="syz.3.4062" name="usbmon1" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 984.084688][T14272] EXT4-fs (loop4): 1 truncate cleaned up [ 984.086727][ T28] audit: type=1400 audit(1757732215.315:1015): avc: denied { open } for pid=14268 comm="syz.3.4062" path="/dev/usbmon1" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 984.093877][T14272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 984.498407][ T28] audit: type=1400 audit(1757732215.605:1016): avc: denied { ioctl } for pid=14268 comm="syz.3.4062" path="/dev/usbmon1" dev="devtmpfs" ino=160 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 984.527232][T13141] EXT4-fs (loop7): unmounting filesystem. [ 984.533062][ T28] audit: type=1400 audit(1757732215.615:1017): avc: denied { append } for pid=14268 comm="syz.3.4062" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 984.533865][T14272] xt_hashlimit: size too large, truncated to 1048576 [ 984.563273][T14272] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 984.570778][ T1114] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 984.639139][T14279] loop7: detected capacity change from 0 to 8192 [ 984.688472][ T28] audit: type=1400 audit(1757732215.915:1018): avc: denied { setattr } for pid=14268 comm="syz.3.4062" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 984.763651][ T1114] usb 10-1: Using ep0 maxpacket: 16 [ 984.772997][ T1114] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 984.792750][ T1114] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.812830][ T1114] usb 10-1: Product: syz [ 984.817324][ T1114] usb 10-1: Manufacturer: syz [ 984.822045][ T1114] usb 10-1: SerialNumber: syz [ 984.831099][ T1114] usb 10-1: config 0 descriptor?? [ 984.839093][ T1114] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 984.848420][ T1114] usb 10-1: Detected FT232H [ 985.013084][T10104] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 985.039617][ T1114] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 985.054088][ T1114] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 985.071530][ T1114] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 985.237083][T14291] loop8: detected capacity change from 0 to 40427 [ 985.437511][ T1114] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 985.446975][T14291] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 985.460801][ T1114] usb 10-1: USB disconnect, device number 3 [ 985.474493][ T1114] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 985.475328][T14291] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 985.484778][ T1114] ftdi_sio 10-1:0.0: device disconnected [ 985.508213][T14291] F2FS-fs (loop8): invalid crc_offset: 33558524 [ 985.517172][T14291] F2FS-fs (loop8): Found nat_bits in checkpoint [ 985.533614][T10104] usb 5-1: Using ep0 maxpacket: 16 [ 985.544336][T10104] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 985.552584][T10104] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.577529][T10104] usb 5-1: config 0 has no interface number 0 [ 985.578538][T14291] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 985.591886][T14291] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 985.603735][T10104] usb 5-1: New USB device found, idVendor=0421, idProduct=0009, bcdDevice= 0.00 [ 985.623172][T10104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.637484][T10104] usb 5-1: Product: syz [ 985.641744][T10104] usb 5-1: Manufacturer: syz [ 985.646482][T10104] usb 5-1: SerialNumber: syz [ 985.655612][T10104] usb 5-1: config 0 descriptor?? [ 985.670960][T10104] rndis_host 5-1:0.180: skipping garbage [ 985.684477][T10104] usb 5-1: bad CDC descriptors [ 985.959404][T13303] usb 5-1: USB disconnect, device number 33 [ 986.023744][ T967] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 986.038533][T14310] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 986.276993][ T967] usb 10-1: Using ep0 maxpacket: 16 [ 986.311248][ T967] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 986.320716][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.329066][ T967] usb 10-1: Product: syz [ 986.334135][ T967] usb 10-1: Manufacturer: syz [ 986.339042][ T967] usb 10-1: SerialNumber: syz [ 986.349789][ T967] usb 10-1: config 0 descriptor?? [ 986.369317][ T967] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 986.379679][ T967] usb 10-1: Detected FT232H [ 986.591098][ T967] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 986.598670][ T967] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 986.607127][ T967] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 986.614510][ T967] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 986.635920][ T967] usb 10-1: USB disconnect, device number 4 [ 986.644248][ T967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 986.654263][ T967] ftdi_sio 10-1:0.0: device disconnected [ 986.705163][T13144] EXT4-fs (loop4): unmounting filesystem. [ 986.755171][T14340] loop4: detected capacity change from 0 to 2048 [ 986.773780][T14340] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 986.875938][T14340] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 986.892847][T14340] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 986.908864][T14340] EXT4-fs (loop4): This should not happen!! Data will be lost [ 986.908864][T14340] [ 986.920715][T14340] EXT4-fs (loop4): Total free blocks count 0 [ 986.926956][T14340] EXT4-fs (loop4): Free/Dirty block details [ 986.933044][T14340] EXT4-fs (loop4): free_blocks=2415919104 [ 986.939054][T14340] EXT4-fs (loop4): dirty_blocks=3088 [ 986.944774][T14340] EXT4-fs (loop4): Block reservation details [ 986.950806][T14340] EXT4-fs (loop4): i_reserved_data_blocks=193 [ 987.035962][T14347] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28 [ 987.073620][T13303] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 987.253606][T13303] usb 8-1: Using ep0 maxpacket: 16 [ 987.261341][T13303] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 987.281494][T13303] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.289616][T13303] usb 8-1: Product: syz [ 987.298911][T13303] usb 8-1: Manufacturer: syz [ 987.303707][T13303] usb 8-1: SerialNumber: syz [ 987.326214][T13303] usb 8-1: config 0 descriptor?? [ 987.367194][T13303] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 987.519787][T13303] usb 8-1: Detected FT232H [ 987.616141][T13303] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 987.633541][T13303] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 987.641367][T13303] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 987.649406][T13303] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 987.674930][T13303] usb 8-1: USB disconnect, device number 5 [ 987.681736][T13303] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 987.696495][T13303] ftdi_sio 8-1:0.0: device disconnected [ 987.799362][T14375] device pim6reg1 entered promiscuous mode [ 988.093633][ T28] audit: type=1400 audit(1757732219.315:1019): avc: denied { read } for pid=14391 comm="syz.4.4101" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 988.167581][ T28] audit: type=1400 audit(1757732219.315:1020): avc: denied { open } for pid=14391 comm="syz.4.4101" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 988.176188][T14395] syz.7.4102[14395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.191487][T14395] syz.7.4102[14395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.222552][ T28] audit: type=1400 audit(1757732219.315:1021): avc: denied { ioctl } for pid=14391 comm="syz.4.4101" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 988.277877][ T28] audit: type=1400 audit(1757732219.435:1022): avc: denied { create } for pid=14394 comm="syz.7.4102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 988.496971][T14436] syz.7.4120[14436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.497075][T14436] syz.7.4120[14436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 988.590874][T14442] device pim6reg1 entered promiscuous mode [ 989.104285][T14478] device pim6reg1 entered promiscuous mode [ 989.120457][T14481] device bridge0 entered promiscuous mode [ 989.194841][T14488] device pim6reg1 entered promiscuous mode [ 989.284341][T14508] syz.7.4155[14508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.284426][T14508] syz.7.4155[14508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.487919][T14536] syz.9.4168[14536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.538396][T14536] syz.9.4168[14536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.883066][ T28] audit: type=1400 audit(1757732221.105:1023): avc: denied { write } for pid=14581 comm="syz.4.4190" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 989.932505][T14586] syz.7.4189[14586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.932608][T14586] syz.7.4189[14586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 990.017233][ T28] audit: type=1400 audit(1757732221.245:1024): avc: denied { create } for pid=14590 comm="syz.7.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 990.212468][T14612] device wg2 entered promiscuous mode [ 990.886646][T14715] device syzkaller0 entered promiscuous mode [ 991.055327][T14735] ÿÿÿÿÿÿ: renamed from vlan1 [ 991.658277][ T28] audit: type=1400 audit(1757732222.885:1025): avc: denied { attach_queue } for pid=14824 comm="syz.3.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 991.925512][T14861] device pim6reg1 entered promiscuous mode [ 991.939698][T14865] device pim6reg1 entered promiscuous mode [ 992.360460][T14930] device pim6reg1 entered promiscuous mode [ 992.439931][T14943] device wg2 entered promiscuous mode [ 992.691495][T14986] device pim6reg1 entered promiscuous mode [ 992.820619][T14994] device syzkaller0 entered promiscuous mode [ 992.840698][ T28] audit: type=1400 audit(1757732224.065:1026): avc: denied { create } for pid=15000 comm="syz.4.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 992.902874][T15006] device pim6reg1 entered promiscuous mode [ 993.000475][T15020] device pim6reg1 entered promiscuous mode [ 994.330706][T15059] device pim6reg1 entered promiscuous mode [ 994.356754][T15067] bpf_get_probe_write_proto: 6 callbacks suppressed [ 994.356772][T15067] syz.3.4411[15067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.363909][T15067] syz.3.4411[15067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.394636][T15067] syz.3.4411[15067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.423819][T15067] syz.3.4411[15067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.697495][T15102] device pim6reg1 entered promiscuous mode [ 994.729512][T15100] device pim6reg1 entered promiscuous mode [ 995.046771][T15149] device pim6reg1 entered promiscuous mode [ 995.280230][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.302109][T15190] syz.9.4465[15190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 995.302215][T15190] syz.9.4465[15190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 995.452405][T15211] syz.7.4475[15211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 995.473343][T15211] syz.7.4475[15211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 995.515418][T15219] loop8: detected capacity change from 0 to 8192 [ 995.686886][T15233] loop4: detected capacity change from 0 to 16 [ 995.820828][T15233] erofs: (device loop4): mounted with root inode @ nid 36. [ 996.209644][T15240] loop7: detected capacity change from 0 to 40427 [ 996.255955][T15240] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 996.281524][T15240] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 996.294067][T15240] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 996.306713][T15240] F2FS-fs (loop7): Found nat_bits in checkpoint [ 996.365550][T15240] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 996.377010][T15240] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 996.411265][T15274] loop8: detected capacity change from 0 to 8192 [ 996.927741][T15321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.981781][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.004555][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.011716][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.047356][T15336] loop4: detected capacity change from 0 to 2048 [ 997.124194][T15336] loop4: p1 < > p4 [ 997.132785][T15336] loop4: p4 size 8388608 extends beyond EOD, truncated [ 997.184755][T13128] udevd[13128]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 997.186600][T13127] udevd[13127]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 997.609157][T15361] loop9: detected capacity change from 0 to 40427 [ 997.623698][T15361] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 997.633405][T15361] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 997.646037][T15361] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 997.664503][T15361] F2FS-fs (loop9): Found nat_bits in checkpoint [ 997.705666][T15361] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 997.712842][T15361] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 997.863664][ T452] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 998.053640][ T452] usb 5-1: Using ep0 maxpacket: 16 [ 998.061464][ T452] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 998.081523][ T452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.103737][ T452] usb 5-1: Product: syz [ 998.118976][ T452] usb 5-1: Manufacturer: syz [ 998.126979][ T452] usb 5-1: SerialNumber: syz [ 998.146581][ T452] usb 5-1: config 0 descriptor?? [ 998.155915][ T452] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 998.182993][ T452] usb 5-1: Detected FT232H [ 998.358382][ T452] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 998.729674][T15426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 998.759198][T15426] device veth0_vlan left promiscuous mode [ 998.770810][T15426] device veth0_vlan entered promiscuous mode [ 998.829705][ T452] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 998.923130][ T452] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 998.973303][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 999.028404][ T452] usb 5-1: USB disconnect, device number 34 [ 999.042496][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 999.134039][ T452] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 999.168206][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 999.185027][ T452] ftdi_sio 5-1:0.0: device disconnected [ 999.703697][T11272] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 999.720785][T15440] tc_dump_action: action bad kind [ 999.883596][T11272] usb 8-1: Using ep0 maxpacket: 16 [ 999.890546][T11272] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.901975][T11272] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 999.987041][T11272] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.012062][T11272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.020470][T11272] usb 8-1: Product: syz [ 1000.024696][T11272] usb 8-1: Manufacturer: syz [ 1000.029356][T11272] usb 8-1: SerialNumber: syz [ 1000.368950][T15406] loop7: detected capacity change from 0 to 1024 [ 1000.385438][T15406] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1000.394144][T15406] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.411785][T11272] usb 8-1: 0:2 : does not exist [ 1000.461208][T11272] usb 8-1: USB disconnect, device number 6 [ 1001.221474][T13141] EXT4-fs (loop7): unmounting filesystem. [ 1001.351739][T15494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1001.434557][T15494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1001.465287][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1001.483915][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1001.495144][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1001.505758][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1001.516258][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1001.524982][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1001.533372][T15504] syz.4.4594[15504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1001.533483][T15504] syz.4.4594[15504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1001.545987][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1001.566752][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1001.821417][T15511] loop4: detected capacity change from 0 to 16 [ 1001.839895][T15511] erofs: (device loop4): mounted with root inode @ nid 36. [ 1002.050143][T15527] loop7: detected capacity change from 0 to 16 [ 1002.075320][T15527] erofs: (device loop7): mounted with root inode @ nid 36. [ 1002.699404][T15539] syz.9.4609[15539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1002.699498][T15539] syz.9.4609[15539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1003.067853][T15545] loop9: detected capacity change from 0 to 40427 [ 1003.139541][T15545] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1003.155857][T15545] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1003.167879][T15545] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 1003.175854][T15545] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1003.361979][T15545] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1003.374756][T15545] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1003.872440][T15598] loop4: detected capacity change from 0 to 4096 [ 1003.984570][T15598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1004.017103][T15598] EXT4-fs (loop4): shut down requested (0) [ 1004.213623][T11052] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1004.227041][T15598] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 1004.393628][T11052] usb 8-1: Using ep0 maxpacket: 16 [ 1004.413943][T11052] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1004.423202][T11052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.431487][T11052] usb 8-1: Product: syz [ 1004.436015][T11052] usb 8-1: Manufacturer: syz [ 1004.440824][T11052] usb 8-1: SerialNumber: syz [ 1004.448272][T11052] usb 8-1: config 0 descriptor?? [ 1004.454356][T11052] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1004.462362][T11052] usb 8-1: Detected FT232H [ 1004.494783][T15614] tc_dump_action: action bad kind [ 1004.656467][T11052] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1004.758737][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1005.068163][T11052] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1005.077745][T11052] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1005.095350][T11052] usb 8-1: USB disconnect, device number 7 [ 1005.105097][T11052] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1005.115428][T11052] ftdi_sio 8-1:0.0: device disconnected [ 1005.162864][T15668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1005.606941][T15678] loop7: detected capacity change from 0 to 2048 [ 1005.637992][T15680] device pim6reg1 entered promiscuous mode [ 1005.644961][T15678] loop7: p1 < > p4 [ 1005.652349][T15678] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1005.736119][T13127] udevd[13127]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1005.736394][T13128] udevd[13128]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1005.882760][T13127] udevd[13127]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1006.345449][T15706] loop4: detected capacity change from 0 to 2048 [ 1006.374870][T15706] loop4: p1 < > p4 [ 1006.379923][T15706] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1006.476462][T13127] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.518004][T13127] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.518373][T13128] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.533704][T13127] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.537295][T15706] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 1006.553811][T13127] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 1006.557188][T15706] loop4: detected capacity change from 0 to 128 [ 1006.569505][T13128] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.604221][T13128] Buffer I/O error on dev loop4p4, logical block 1, async page read [ 1007.288171][T15717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1007.356340][T13128] udevd[13128]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1007.356617][T13127] udevd[13127]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1007.381448][T13132] udevd[13132]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1007.392693][T13127] udevd[13127]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1007.423985][T15730] device pim6reg1 entered promiscuous mode [ 1007.515348][T15743] loop9: detected capacity change from 0 to 2048 [ 1007.549378][T15743] loop9: p1 < > p4 [ 1007.562813][T15743] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1007.615002][T13127] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1007.636189][T15743] loop9: detected capacity change from 0 to 128 [ 1007.641363][T13127] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1007.686511][T13128] udevd[13128]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1007.697713][T13127] udevd[13127]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1007.837160][T15773] device pim6reg1 entered promiscuous mode [ 1007.870215][T15774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1008.141729][T15798] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4709'. [ 1008.934652][T15857] tc_dump_action: action bad kind [ 1009.276088][T15873] loop8: detected capacity change from 0 to 8192 [ 1010.797632][T15894] loop4: detected capacity change from 0 to 2048 [ 1010.834384][T15894] loop4: p1 < > p4 [ 1010.839311][T15894] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1010.901278][T13127] udevd[13127]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1010.925194][T13128] udevd[13128]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1011.283254][T15921] loop9: detected capacity change from 0 to 8192 [ 1012.508384][T15969] loop8: detected capacity change from 0 to 8192 [ 1013.143069][T16000] device pim6reg1 entered promiscuous mode [ 1013.400519][T16018] loop7: detected capacity change from 0 to 8192 [ 1013.431642][T16018] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4805'. [ 1013.541809][T16037] device pim6reg1 entered promiscuous mode [ 1014.036709][T16058] loop7: detected capacity change from 0 to 8192 [ 1014.062559][T16058] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4824'. [ 1014.096566][T16064] device pim6reg1 entered promiscuous mode [ 1014.207045][T16080] device pim6reg1 entered promiscuous mode [ 1014.371376][T16098] device pim6reg1 entered promiscuous mode [ 1014.703834][T16113] loop4: detected capacity change from 0 to 16 [ 1014.741866][T16113] erofs: (device loop4): mounted with root inode @ nid 36. [ 1015.007686][T16136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1015.032593][T16144] device pim6reg1 entered promiscuous mode [ 1015.726558][T16169] loop8: detected capacity change from 0 to 8192 [ 1015.783284][T16169] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4873'. [ 1015.980471][T16195] device pim6reg1 entered promiscuous mode [ 1016.403083][T16204] loop8: detected capacity change from 0 to 4096 [ 1016.434688][T16204] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1016.444873][T16204] overlayfs: missing 'lowerdir' [ 1016.611546][T16200] loop4: detected capacity change from 0 to 16 [ 1016.639552][T16200] erofs: (device loop4): mounted with root inode @ nid 36. [ 1016.666060][T16215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1017.594629][T16243] tc_dump_action: action bad kind [ 1017.683324][T16249] device pim6reg1 entered promiscuous mode [ 1017.741815][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1017.918794][T16268] tc_dump_action: action bad kind [ 1017.980885][T16275] device pim6reg1 entered promiscuous mode [ 1018.140163][T16284] device pim6reg1 entered promiscuous mode [ 1018.553664][T11052] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1018.803673][T11052] usb 10-1: Using ep0 maxpacket: 16 [ 1018.812799][T11052] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1018.987466][T11052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.072573][T11052] usb 10-1: Product: syz [ 1019.101977][T11052] usb 10-1: Manufacturer: syz [ 1019.117984][T11052] usb 10-1: SerialNumber: syz [ 1019.144278][T11052] usb 10-1: config 0 descriptor?? [ 1019.155412][T11052] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1019.164844][T11052] usb 10-1: Detected FT232H [ 1019.208144][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1019.271534][T16329] device pim6reg1 entered promiscuous mode [ 1019.353032][T11052] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1019.365773][T11052] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1019.390042][T11052] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1019.400152][T11052] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1019.425308][T11052] usb 10-1: USB disconnect, device number 5 [ 1019.437772][T11052] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1019.450712][T11052] ftdi_sio 10-1:0.0: device disconnected [ 1019.485534][T16344] loop4: detected capacity change from 0 to 4096 [ 1019.515662][T16344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1019.528751][T16344] overlayfs: missing 'lowerdir' [ 1020.120142][T16367] device pim6reg1 entered promiscuous mode [ 1020.840217][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1020.910273][T16402] device pim6reg1 entered promiscuous mode [ 1020.958070][T16400] loop4: detected capacity change from 0 to 4096 [ 1020.997662][T16400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1021.034554][T16400] EXT4-fs (loop4): shut down requested (0) [ 1021.362630][T16400] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 1021.424747][T16421] device pim6reg1 entered promiscuous mode [ 1021.475512][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4961'. [ 1021.484769][T16418] loop9: detected capacity change from 0 to 8192 [ 1021.513527][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4969'. [ 1021.749399][T16454] device pim6reg1 entered promiscuous mode [ 1021.756476][T16450] loop8: detected capacity change from 0 to 8192 [ 1021.789211][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4983'. [ 1022.010653][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1022.427186][T16496] device pim6reg1 entered promiscuous mode [ 1022.476701][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5000'. [ 1022.507271][T16497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1023.309821][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5016'. [ 1023.453956][T16543] device pim6reg1 entered promiscuous mode [ 1024.124042][T16564] device pim6reg1 entered promiscuous mode [ 1024.192107][T16570] loop7: detected capacity change from 0 to 4096 [ 1024.204762][T16570] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1024.217668][T16570] EXT4-fs (loop7): shut down requested (0) [ 1024.278593][T16585] tc_dump_action: action bad kind [ 1024.446259][T16570] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1024.454066][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5031'. [ 1024.707840][T16615] tc_dump_action: action bad kind [ 1024.799294][T16619] loop8: detected capacity change from 0 to 8192 [ 1024.829591][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5050'. [ 1024.977859][T13141] EXT4-fs (loop7): unmounting filesystem. [ 1025.104351][T16638] tc_dump_action: action bad kind [ 1025.248752][T16655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1025.416415][T16669] tc_dump_action: action bad kind [ 1025.466961][T16652] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1025.478683][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5065'. [ 1025.640123][T16686] device pim6reg1 entered promiscuous mode [ 1025.849449][T16685] loop4: detected capacity change from 0 to 40427 [ 1025.869109][T16685] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1025.879825][T16685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1025.906572][T16696] tc_dump_action: action bad kind [ 1025.911804][T16685] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1026.004149][T16685] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1026.047199][T16685] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1026.163904][T16685] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1026.555892][ T452] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1027.024928][T16720] device pim6reg1 entered promiscuous mode [ 1027.073594][ T452] usb 4-1: Using ep0 maxpacket: 16 [ 1027.082916][ T452] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1027.103278][ T452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.143946][ T452] usb 4-1: Product: syz [ 1027.150030][ T452] usb 4-1: Manufacturer: syz [ 1027.154910][ T452] usb 4-1: SerialNumber: syz [ 1027.166117][ T452] usb 4-1: config 0 descriptor?? [ 1027.184296][ T452] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1027.201846][ T452] usb 4-1: Detected FT232H [ 1027.695621][ T452] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1027.703838][ T452] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1027.723754][ T452] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1027.735224][ T452] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1027.756269][ T452] usb 4-1: USB disconnect, device number 9 [ 1027.768015][ T452] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1027.778186][ T452] ftdi_sio 4-1:0.0: device disconnected [ 1027.854893][T16750] loop7: detected capacity change from 0 to 40427 [ 1027.870369][T16750] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1027.881572][T16750] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1027.913051][T16750] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 1027.934279][T16750] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1027.956415][T16774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1027.977149][T16774] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.995699][T16750] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1028.002777][T16750] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1028.117023][T16782] tc_dump_action: action bad kind [ 1028.236832][T16792] loop8: detected capacity change from 0 to 4096 [ 1028.287487][T16792] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1028.312622][T16792] overlayfs: missing 'lowerdir' [ 1028.710978][T16804] device pim6reg1 entered promiscuous mode [ 1029.050416][T16820] tc_dump_action: action bad kind [ 1029.521436][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1029.800404][T16847] tc_dump_action: action bad kind [ 1030.736155][T16887] device pim6reg1 entered promiscuous mode [ 1031.394827][T16922] device pim6reg1 entered promiscuous mode [ 1032.872675][T16949] loop4: detected capacity change from 0 to 40427 [ 1032.884421][T16949] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1032.907454][T16949] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1032.918297][T16949] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1032.948396][T16949] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1033.030370][T16949] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1033.037779][T16949] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1035.851484][T17003] loop4: detected capacity change from 0 to 4096 [ 1035.912566][T17003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1035.923993][T17003] overlayfs: missing 'lowerdir' [ 1037.106686][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1038.397693][T17052] loop8: detected capacity change from 0 to 8192 [ 1038.654778][T17082] device pim6reg1 entered promiscuous mode [ 1038.663770][T17091] tc_dump_action: action bad kind [ 1038.923694][T11052] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1039.127951][T17103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5241'. [ 1039.137492][T11052] usb 10-1: Using ep0 maxpacket: 16 [ 1039.156199][T11052] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1039.171248][T11052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.185244][T11052] usb 10-1: Product: syz [ 1039.189616][T11052] usb 10-1: Manufacturer: syz [ 1039.204042][T11052] usb 10-1: SerialNumber: syz [ 1039.217632][T11052] usb 10-1: config 0 descriptor?? [ 1039.231249][T11052] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1039.248818][T11052] usb 10-1: Detected FT232H [ 1039.280227][T17126] device pim6reg1 entered promiscuous mode [ 1039.733677][T11052] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1039.743016][T11052] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1039.763816][T11052] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1039.780027][T11052] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1039.799558][T11052] usb 10-1: USB disconnect, device number 6 [ 1039.810077][T17143] loop4: detected capacity change from 0 to 8192 [ 1039.817387][T11052] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1039.828107][T11052] ftdi_sio 10-1:0.0: device disconnected [ 1039.852297][T17143] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5258'. [ 1039.926560][T17159] device pim6reg1 entered promiscuous mode [ 1039.988809][T17162] loop4: detected capacity change from 0 to 16 [ 1039.998503][T17162] erofs: (device loop4): mounted with root inode @ nid 36. [ 1040.021313][T17163] 9pnet_fd: Insufficient options for proto=fd [ 1040.395719][T17188] tc_dump_action: action bad kind [ 1040.826080][T17196] loop4: detected capacity change from 0 to 4096 [ 1040.846360][T17196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1041.354331][T17208] device pim6reg1 entered promiscuous mode [ 1041.374749][T17205] loop8: detected capacity change from 0 to 8192 [ 1041.392350][T17205] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5281'. [ 1041.498915][T17227] tc_dump_action: action bad kind [ 1041.665666][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1041.723384][T17245] device pim6reg1 entered promiscuous mode [ 1042.184761][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1042.463001][T17276] device pim6reg1 entered promiscuous mode [ 1042.618210][T17290] tc_dump_action: action bad kind [ 1042.770296][T17304] device pim6reg1 entered promiscuous mode [ 1043.021932][T17320] 9pnet_fd: Insufficient options for proto=fd [ 1043.853669][ T7075] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1044.063588][ T7075] usb 5-1: Using ep0 maxpacket: 16 [ 1044.072607][ T7075] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1044.096680][ T7075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.120867][ T7075] usb 5-1: Product: syz [ 1044.140671][ T7075] usb 5-1: Manufacturer: syz [ 1044.393699][ T7075] usb 5-1: SerialNumber: syz [ 1044.408817][ T7075] usb 5-1: config 0 descriptor?? [ 1044.418107][ T7075] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1044.439827][ T7075] usb 5-1: Detected FT232H [ 1044.616072][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1045.059368][ T7075] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1045.067729][ T7075] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1045.106817][ T7075] usb 5-1: USB disconnect, device number 35 [ 1045.138236][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1045.173069][ T7075] ftdi_sio 5-1:0.0: device disconnected [ 1045.318536][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1045.434930][T17403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1045.577708][T17406] loop8: detected capacity change from 0 to 8192 [ 1045.601339][T17406] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5364'. [ 1045.730312][T17412] device pim6reg1 entered promiscuous mode [ 1046.001187][T17430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5376'. [ 1046.076136][T17449] 9pnet_fd: Insufficient options for proto=fd [ 1046.162391][T17461] device pim6reg1 entered promiscuous mode [ 1046.707780][T17467] loop4: detected capacity change from 0 to 8192 [ 1046.745676][T17467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5391'. [ 1047.134699][T17479] 9pnet_fd: Insufficient options for proto=fd [ 1047.228488][T17491] device pim6reg1 entered promiscuous mode [ 1048.340953][T17532] device pim6reg1 entered promiscuous mode [ 1048.503932][T17546] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1048.519376][T17546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1049.193645][ T7075] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1049.383622][ T7075] usb 8-1: Using ep0 maxpacket: 16 [ 1049.392895][ T7075] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1049.412590][ T7075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.443019][ T7075] usb 8-1: Product: syz [ 1049.447768][ T7075] usb 8-1: Manufacturer: syz [ 1049.452438][ T7075] usb 8-1: SerialNumber: syz [ 1049.465892][ T7075] usb 8-1: config 0 descriptor?? [ 1049.484678][ T7075] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1049.493490][ T7075] usb 8-1: Detected FT232H [ 1049.689038][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1050.267674][ T7075] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1050.280885][ T7075] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1050.359900][ T7075] usb 8-1: USB disconnect, device number 8 [ 1050.467464][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1050.622242][ T7075] ftdi_sio 8-1:0.0: device disconnected [ 1050.649932][T17608] 9pnet_fd: Insufficient options for proto=fd [ 1050.731656][T17617] device pim6reg1 entered promiscuous mode [ 1050.991804][T17622] loop9: detected capacity change from 0 to 40427 [ 1051.001374][T17622] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1051.009332][T17622] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1051.029674][T17622] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 1051.582717][T17622] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1051.650856][T17647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1051.679955][T17622] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1051.687234][T17622] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1053.217891][T17689] device pim6reg1 entered promiscuous mode [ 1053.228948][T17684] loop9: detected capacity change from 0 to 4096 [ 1053.260350][T17684] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1053.297426][T17684] overlayfs: missing 'lowerdir' [ 1054.330329][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1054.388645][T17721] loop4: detected capacity change from 0 to 4096 [ 1054.403133][T17721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1054.416866][T17721] overlayfs: missing 'lowerdir' [ 1055.153222][T17751] loop9: detected capacity change from 0 to 40427 [ 1055.170414][T17751] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1055.179066][T17751] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1055.189391][T17751] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 1055.222687][T17751] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1055.308210][T17751] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1055.317480][T17751] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1055.380659][T17772] tc_dump_action: action bad kind [ 1055.562802][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1056.718820][T17797] loop4: detected capacity change from 0 to 4096 [ 1056.760530][T17797] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1056.822669][T17797] EXT4-fs (loop4): shut down requested (0) [ 1056.872488][T17807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1057.067998][T17797] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 1057.103165][T17797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5514'. [ 1057.628607][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1058.253606][T10104] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1058.413747][T10104] usb 8-1: device descriptor read/64, error -71 [ 1058.703588][T10104] usb 8-1: device descriptor read/64, error -71 [ 1058.721655][T17919] loop4: detected capacity change from 0 to 4096 [ 1058.806823][T17919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1058.822788][T17919] overlayfs: missing 'lowerdir' [ 1059.097058][T17935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1059.186704][T17935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1059.233581][T10104] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1059.383645][T10104] usb 8-1: device descriptor read/64, error -71 [ 1059.651626][T17943] device pim6reg1 entered promiscuous mode [ 1059.657670][T10104] usb 8-1: device descriptor read/64, error -71 [ 1059.794983][T10104] usb usb8-port1: attempt power cycle [ 1059.876326][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1060.016814][T17955] 9pnet_fd: Insufficient options for proto=fd [ 1060.134470][T17964] device pim6reg1 entered promiscuous mode [ 1060.167748][T17968] device pim6reg1 entered promiscuous mode [ 1060.203595][T10104] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1060.234939][T10104] usb 8-1: device descriptor read/8, error -71 [ 1060.310979][T17979] 9pnet_fd: Insufficient options for proto=fd [ 1060.355789][T17981] loop9: detected capacity change from 0 to 4096 [ 1060.381803][T17986] tc_dump_action: action bad kind [ 1060.384533][T17981] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1060.388041][T10104] usb 8-1: device descriptor read/8, error -71 [ 1060.399014][T17981] EXT4-fs (loop9): shut down requested (0) [ 1060.617702][T17981] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1060.625706][T17981] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5589'. [ 1060.642671][T17999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1060.673947][T10104] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1060.715355][T18004] device pim6reg1 entered promiscuous mode [ 1060.919460][T18001] loop7: detected capacity change from 0 to 40427 [ 1060.929480][T18001] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1060.937608][T18001] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1060.946909][T18001] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 1060.966089][T18001] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1061.009104][T18013] 9pnet_fd: Insufficient options for proto=fd [ 1061.019772][T18001] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1061.033619][T18001] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1061.148290][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1061.163684][T10104] usb 8-1: device not accepting address 12, error -71 [ 1061.178018][T10104] usb usb8-port1: unable to enumerate USB device [ 1061.778323][T18042] device pim6reg1 entered promiscuous mode [ 1062.312189][T18049] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1062.333996][T18049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1062.379706][T18055] tc_dump_action: action bad kind [ 1062.405831][T18060] device pim6reg1 entered promiscuous mode [ 1063.006440][T18073] device pim6reg1 entered promiscuous mode [ 1063.226676][T18089] device pim6reg1 entered promiscuous mode [ 1063.420534][T18111] device pim6reg1 entered promiscuous mode [ 1063.521024][T18120] loop4: detected capacity change from 0 to 4096 [ 1063.541989][T18120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1063.552830][T18120] EXT4-fs (loop4): shut down requested (0) [ 1063.769671][T18120] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 1063.783335][T18120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5640'. [ 1064.205224][T18158] 9pnet_fd: Insufficient options for proto=fd [ 1064.318089][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1064.895282][T18198] loop9: detected capacity change from 0 to 4096 [ 1064.907110][T18198] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1064.916629][T11820] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1064.927228][T18198] EXT4-fs (loop9): shut down requested (0) [ 1065.103634][T11820] usb 5-1: Using ep0 maxpacket: 16 [ 1065.111429][T11820] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1065.120979][T11820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.129290][T11820] usb 5-1: Product: syz [ 1065.133476][T11820] usb 5-1: Manufacturer: syz [ 1065.139550][T18198] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1065.147051][T11820] usb 5-1: SerialNumber: syz [ 1065.152200][T18198] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5670'. [ 1065.162520][T11820] usb 5-1: config 0 descriptor?? [ 1065.169966][T11820] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1065.178118][T11820] usb 5-1: Detected FT232H [ 1065.384854][T11820] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1065.395048][T11820] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1065.402813][T11820] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1065.410810][T11820] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1065.423883][T11820] usb 5-1: USB disconnect, device number 36 [ 1065.447150][T11820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1065.463331][T11820] ftdi_sio 5-1:0.0: device disconnected [ 1065.685589][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1065.700382][T18253] device pim6reg1 entered promiscuous mode [ 1065.710930][T18255] device pim6reg1 entered promiscuous mode [ 1066.103160][T18270] device pim6reg1 entered promiscuous mode [ 1066.245750][T18286] device pim6reg1 entered promiscuous mode [ 1066.291251][T18293] device pim6reg1 entered promiscuous mode [ 1066.323425][T18298] tc_dump_action: action bad kind [ 1066.473927][T18309] device pim6reg1 entered promiscuous mode [ 1066.586487][ T7075] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1066.627121][T18321] device pim6reg1 entered promiscuous mode [ 1066.793601][ T7075] usb 10-1: Using ep0 maxpacket: 16 [ 1066.803165][ T7075] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1066.812875][ T7075] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.821107][ T7075] usb 10-1: Product: syz [ 1066.825935][ T7075] usb 10-1: Manufacturer: syz [ 1066.830801][ T7075] usb 10-1: SerialNumber: syz [ 1066.977892][ T7075] usb 10-1: config 0 descriptor?? [ 1066.987402][ T7075] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1067.006900][ T7075] usb 10-1: Detected FT232H [ 1067.092703][T18344] 9pnet_fd: Insufficient options for proto=fd [ 1067.192422][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1067.202707][ T7075] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1067.222932][ T7075] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1067.232781][ T7075] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1067.319062][ T7075] usb 10-1: USB disconnect, device number 7 [ 1067.504443][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1067.514970][ T7075] ftdi_sio 10-1:0.0: device disconnected [ 1067.624828][T18358] device pim6reg1 entered promiscuous mode [ 1068.136533][T18375] 9pnet_fd: Insufficient options for proto=fd [ 1069.939081][T18403] loop8: detected capacity change from 0 to 4096 [ 1070.097462][T18403] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1070.296866][T18403] overlayfs: missing 'lowerdir' [ 1070.387328][T18424] 9pnet_fd: Insufficient options for proto=fd [ 1071.620242][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1071.691103][T18444] device pim6reg1 entered promiscuous mode [ 1071.760413][T18457] device pim6reg1 entered promiscuous mode [ 1072.431293][T18475] loop4: detected capacity change from 0 to 16 [ 1072.450221][T18475] erofs: (device loop4): mounted with root inode @ nid 36. [ 1072.534827][T18497] 9pnet_fd: Insufficient options for proto=fd [ 1072.876664][T18528] loop7: detected capacity change from 0 to 16 [ 1072.893714][T18528] erofs: (device loop7): mounted with root inode @ nid 36. [ 1072.948926][T18537] device pim6reg1 entered promiscuous mode [ 1073.047644][T18549] tc_dump_action: action bad kind [ 1074.753930][T12737] tipc: Left network mode [ 1075.270808][T18593] loop4: detected capacity change from 0 to 4096 [ 1075.293027][T18593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1075.297945][T18599] device pim6reg1 entered promiscuous mode [ 1075.315977][T18593] overlayfs: missing 'lowerdir' [ 1075.389895][T18602] device pim6reg1 entered promiscuous mode [ 1076.126242][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1076.463645][ T7075] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1076.568557][T18659] device pim6reg1 entered promiscuous mode [ 1076.615457][T12737] device veth1_macvtap left promiscuous mode [ 1076.621664][T12737] device veth0_vlan left promiscuous mode [ 1076.653617][ T7075] usb 8-1: Using ep0 maxpacket: 16 [ 1076.663288][ T7075] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1076.673717][ T7075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.682181][ T7075] usb 8-1: Product: syz [ 1076.687595][ T7075] usb 8-1: Manufacturer: syz [ 1076.692462][ T7075] usb 8-1: SerialNumber: syz [ 1076.778528][ T7075] usb 8-1: config 0 descriptor?? [ 1076.840280][ T7075] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1076.990049][ T7075] usb 8-1: Detected FT232H [ 1077.029206][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1077.036450][ T7075] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1077.043719][ T7075] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1077.064489][ T7075] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1077.171087][ T7075] usb 8-1: USB disconnect, device number 13 [ 1077.301134][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1077.367507][ T7075] ftdi_sio 8-1:0.0: device disconnected [ 1077.574249][T18693] syz.4.5858[18693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1077.575096][T18693] syz.4.5858[18693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1077.587099][T18696] 9pnet_fd: Insufficient options for proto=fd [ 1077.609003][T18697] tc_dump_action: action bad kind [ 1077.654349][T18704] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1077.923978][T18727] 9pnet_fd: Insufficient options for proto=fd [ 1078.291591][T18741] syz.4.5874[18741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1078.291647][T18741] syz.4.5874[18741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1078.329056][T18743] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1078.533750][T11820] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1078.813659][T11820] usb 8-1: Using ep0 maxpacket: 16 [ 1078.825880][T11820] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1078.835110][T11820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.843840][T11820] usb 8-1: Product: syz [ 1078.848830][T11820] usb 8-1: Manufacturer: syz [ 1078.854145][T11820] usb 8-1: SerialNumber: syz [ 1078.861098][T11820] usb 8-1: config 0 descriptor?? [ 1078.867339][T11820] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1078.875578][T11820] usb 8-1: Detected FT232H [ 1078.915425][T18767] tc_dump_action: action bad kind [ 1079.069528][T11820] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1079.077073][T11820] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1079.084462][T11820] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1079.091708][T11820] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1079.101227][T11820] usb 8-1: USB disconnect, device number 14 [ 1079.109786][T11820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1079.119904][T11820] ftdi_sio 8-1:0.0: device disconnected [ 1079.374977][T18779] 9pnet: Could not find request transport: fd0x0000000000000006 [ 1079.759387][T18797] device pim6reg1 entered promiscuous mode [ 1080.248188][T18811] 9pnet_fd: Insufficient options for proto=fd [ 1080.401947][T18823] loop4: detected capacity change from 0 to 8192 [ 1080.524142][T18840] 9pnet_fd: Insufficient options for proto=fd [ 1080.825051][T18870] 9pnet_fd: Insufficient options for proto=fd [ 1081.665291][T18901] 9pnet_fd: Insufficient options for proto=fd [ 1081.695611][T18907] device pim6reg1 entered promiscuous mode [ 1081.805736][T18920] 9pnet_fd: Insufficient options for proto=fd [ 1081.892085][T18923] loop7: detected capacity change from 0 to 16 [ 1081.938019][T18923] erofs: (device loop7): mounted with root inode @ nid 36. [ 1081.957806][T18936] 9pnet_fd: Insufficient options for proto=fd [ 1082.108661][T18950] device pim6reg1 entered promiscuous mode [ 1082.165444][T18951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1082.253584][ T452] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1082.443573][ T452] usb 10-1: Using ep0 maxpacket: 16 [ 1082.454781][ T452] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1082.469897][ T452] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.481059][ T452] usb 10-1: Product: syz [ 1082.487215][ T452] usb 10-1: Manufacturer: syz [ 1082.492057][ T452] usb 10-1: SerialNumber: syz [ 1082.498849][ T452] usb 10-1: config 0 descriptor?? [ 1082.506558][ T452] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1082.517041][ T452] usb 10-1: Detected FT232H [ 1082.615509][T18967] 9pnet_fd: Insufficient options for proto=fd [ 1082.709811][ T452] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1082.730862][T18972] 9pnet_fd: Insufficient options for proto=fd [ 1083.113658][ T7075] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1083.127323][ T452] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1083.146353][ T452] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1083.156349][ T452] usb 10-1: USB disconnect, device number 8 [ 1083.165969][ T452] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1083.176476][ T452] ftdi_sio 10-1:0.0: device disconnected [ 1083.293601][ T7075] usb 8-1: Using ep0 maxpacket: 16 [ 1083.302087][ T7075] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1083.311365][ T7075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.319512][ T7075] usb 8-1: Product: syz [ 1083.324026][ T7075] usb 8-1: Manufacturer: syz [ 1083.328614][ T7075] usb 8-1: SerialNumber: syz [ 1083.334058][ T7075] usb 8-1: config 0 descriptor?? [ 1083.339913][ T7075] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1083.347824][ T7075] usb 8-1: Detected FT232H [ 1083.541432][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1083.548840][ T7075] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1083.556134][ T7075] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1083.563039][ T7075] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1083.572416][ T7075] usb 8-1: USB disconnect, device number 15 [ 1083.579261][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1083.591153][ T7075] ftdi_sio 8-1:0.0: device disconnected [ 1083.836863][T19023] tc_dump_action: action bad kind [ 1085.556558][T19093] syz.8.6010[19093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.556779][T19093] syz.8.6010[19093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.615090][T19099] tc_dump_action: action bad kind [ 1085.699869][T19109] device pim6reg1 entered promiscuous mode [ 1086.796797][T19125] 9pnet_fd: Insufficient options for proto=fd [ 1086.856316][T19130] syz.4.6025[19130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1086.856433][T19130] syz.4.6025[19130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1087.378085][T19148] tc_dump_action: action bad kind [ 1087.481204][T19140] loop4: detected capacity change from 0 to 40427 [ 1087.490926][T19140] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1087.505530][T19140] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1087.515063][T19140] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1087.524023][T19140] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1087.566450][T19140] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1087.574345][T19140] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1087.612860][T19165] loop7: detected capacity change from 0 to 4096 [ 1087.626357][T19165] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1087.637297][T19165] overlayfs: missing 'lowerdir' [ 1087.761816][T19171] device pim6reg1 entered promiscuous mode [ 1088.820762][T19175] syz.9.6039[19175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.820817][T19175] syz.9.6039[19175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1089.449119][T13141] EXT4-fs (loop7): unmounting filesystem. [ 1089.684917][T19192] 9pnet_fd: Insufficient options for proto=fd [ 1089.752676][T19200] device pim6reg1 entered promiscuous mode [ 1090.198977][T19211] syz.3.6053[19211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.199077][T19211] syz.3.6053[19211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1091.973050][T19226] 9pnet_fd: Insufficient options for proto=fd [ 1092.273688][ T7075] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1092.479576][T19248] device pim6reg1 entered promiscuous mode [ 1092.573850][ T7075] usb 5-1: Using ep0 maxpacket: 16 [ 1092.584839][ T7075] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1092.686622][ T7075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.696136][ T7075] usb 5-1: Product: syz [ 1092.700447][ T7075] usb 5-1: Manufacturer: syz [ 1092.706293][ T7075] usb 5-1: SerialNumber: syz [ 1092.714510][ T7075] usb 5-1: config 0 descriptor?? [ 1092.724785][ T7075] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1092.734449][ T7075] usb 5-1: Detected FT232H [ 1092.973395][T19264] syz.3.6070[19264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.973503][T19264] syz.3.6070[19264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.996648][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1093.015703][ T7075] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1093.022844][ T7075] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1093.030418][ T7075] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1093.044079][ T7075] usb 5-1: USB disconnect, device number 37 [ 1093.050795][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1093.051862][T13127] udevd[13127]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1093.060579][ T7075] ftdi_sio 5-1:0.0: device disconnected [ 1093.093696][T11820] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1093.283572][T11820] usb 10-1: Using ep0 maxpacket: 16 [ 1093.291785][T11820] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1093.301113][T11820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.309363][T11820] usb 10-1: Product: syz [ 1093.313947][T11820] usb 10-1: Manufacturer: syz [ 1093.318680][T11820] usb 10-1: SerialNumber: syz [ 1093.327248][T11820] usb 10-1: config 0 descriptor?? [ 1093.333812][T11820] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1093.342267][T11820] usb 10-1: Detected FT232H [ 1093.489457][T19285] loop4: detected capacity change from 0 to 4096 [ 1093.504605][T19285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1093.580258][T11820] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1094.016798][T19302] syz.3.6081[19302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1094.016926][T19302] syz.3.6081[19302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1094.077023][T11820] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1094.114432][T11820] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1094.224780][T19314] device pim6reg1 entered promiscuous mode [ 1094.239453][T11820] usb 10-1: USB disconnect, device number 9 [ 1094.247548][T11820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1094.257513][T11820] ftdi_sio 10-1:0.0: device disconnected [ 1094.696502][T19318] device pim6reg1 entered promiscuous mode [ 1094.877439][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1095.100826][T19340] syz.7.6096[19340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.100911][T19340] syz.7.6096[19340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.288762][T19353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1096.200117][T19370] loop7: detected capacity change from 0 to 4096 [ 1096.259626][T19370] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1096.278125][T19370] overlayfs: missing 'lowerdir' [ 1097.135032][T13141] EXT4-fs (loop7): unmounting filesystem. [ 1097.214475][T19392] syz.7.6108[19392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.214571][T19392] syz.7.6108[19392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.635901][T19431] syz.3.6125[19431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.647570][T19431] syz.3.6125[19431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.858721][T19425] 9pnet_fd: Insufficient options for proto=fd [ 1098.015985][ T1114] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1098.444942][ T1114] usb 8-1: Using ep0 maxpacket: 16 [ 1098.452904][ T1114] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1098.463698][ T1114] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.472077][ T1114] usb 8-1: Product: syz [ 1098.476886][ T1114] usb 8-1: Manufacturer: syz [ 1098.481555][ T1114] usb 8-1: SerialNumber: syz [ 1098.493886][ T1114] usb 8-1: config 0 descriptor?? [ 1098.500048][ T1114] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1098.507850][ T1114] usb 8-1: Detected FT232H [ 1098.566213][T19456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19456 comm=syz.3.6129 [ 1098.704942][ T1114] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1099.038297][T19471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1099.086624][T19471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1099.116648][ T1114] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1099.134362][ T1114] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1099.150332][ T1114] usb 8-1: USB disconnect, device number 16 [ 1099.177442][ T1114] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1099.196901][ T1114] ftdi_sio 8-1:0.0: device disconnected [ 1099.406327][T19479] syz.4.6136[19479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.406435][T19479] syz.4.6136[19479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.760405][T19483] loop4: detected capacity change from 0 to 40427 [ 1099.834220][T19483] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1099.842635][T19483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1099.877332][T19483] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1100.048989][T19483] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1100.245311][T19483] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1100.252990][T19483] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1100.554065][T19511] syz.7.6147[19511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.554217][T19511] syz.7.6147[19511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1103.242150][T19549] syz.8.6161[19549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1103.259668][T19549] syz.8.6161[19549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1103.747743][T19565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19565 comm=syz.3.6166 [ 1103.799659][T19564] device pim6reg1 entered promiscuous mode [ 1104.086906][T19586] syz.9.6175[19586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1104.087008][T19586] syz.9.6175[19586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1104.773423][T19595] loop9: detected capacity change from 0 to 4096 [ 1104.825080][T19597] device pim6reg1 entered promiscuous mode [ 1104.836658][T19595] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1104.854234][T19595] overlayfs: missing 'lowerdir' [ 1104.992612][T19601] device pim6reg1 entered promiscuous mode [ 1105.140681][T19621] device pim6reg1 entered promiscuous mode [ 1105.168137][T19619] loop4: detected capacity change from 0 to 4096 [ 1105.217960][T19619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1105.312418][T19626] tc_dump_action: action bad kind [ 1105.337005][T19619] overlayfs: missing 'lowerdir' [ 1105.693299][T19616] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1105.815914][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1106.204663][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1106.206062][T19644] device pim6reg1 entered promiscuous mode [ 1106.234760][T19636] 9pnet_fd: Insufficient options for proto=fd [ 1106.272905][T19648] loop7: detected capacity change from 0 to 4096 [ 1106.284595][T19648] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1106.301459][T19648] EXT4-fs (loop7): shut down requested (0) [ 1106.608685][T19648] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1107.483966][T13141] EXT4-fs (loop7): unmounting filesystem. [ 1107.898980][T19701] 9pnet_fd: Insufficient options for proto=fd [ 1108.226789][T19709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1108.260509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1108.272485][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1108.288000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1108.297191][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1108.306151][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1108.316104][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1108.325492][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1108.334798][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1108.920430][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6227'. [ 1109.021670][T19752] tc_dump_action: action bad kind [ 1109.243639][T11272] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1109.433553][T11272] usb 8-1: Using ep0 maxpacket: 16 [ 1109.442389][T11272] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1109.468429][T11272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.492513][T11272] usb 8-1: Product: syz [ 1109.496904][T11272] usb 8-1: Manufacturer: syz [ 1109.501676][T11272] usb 8-1: SerialNumber: syz [ 1109.509712][T11272] usb 8-1: config 0 descriptor?? [ 1109.527631][T11272] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1109.552338][T11272] usb 8-1: Detected FT232H [ 1109.716860][T11272] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1110.125796][T11272] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1110.132736][T11272] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1110.142236][T11272] usb 8-1: USB disconnect, device number 17 [ 1110.149210][T11272] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1110.159029][T11272] ftdi_sio 8-1:0.0: device disconnected [ 1110.726899][T19780] 9pnet_fd: Insufficient options for proto=fd [ 1111.123026][T19804] device pim6reg1 entered promiscuous mode [ 1111.188614][T19805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1111.265124][T19805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1112.279788][T19852] loop4: detected capacity change from 0 to 4096 [ 1112.322729][T19852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1112.404166][T19852] overlayfs: missing 'lowerdir' [ 1113.222868][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1113.249086][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6270'. [ 1115.118442][T19925] device pim6reg1 entered promiscuous mode [ 1115.562453][T19956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6294'. [ 1115.883619][ T1114] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1115.891509][ T452] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1116.110956][ T1114] usb 8-1: Using ep0 maxpacket: 16 [ 1116.116193][ T452] usb 5-1: Using ep0 maxpacket: 16 [ 1116.131948][ T452] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1116.141244][ T1114] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1116.157077][ T1114] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.165168][ T452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.173268][ T452] usb 5-1: Product: syz [ 1116.177530][ T1114] usb 8-1: Product: syz [ 1116.181727][ T1114] usb 8-1: Manufacturer: syz [ 1116.218410][ T452] usb 5-1: Manufacturer: syz [ 1116.223138][ T452] usb 5-1: SerialNumber: syz [ 1116.228017][ T1114] usb 8-1: SerialNumber: syz [ 1116.234080][ T1114] usb 8-1: config 0 descriptor?? [ 1116.241731][ T452] usb 5-1: config 0 descriptor?? [ 1116.247732][ T1114] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1116.256991][ T452] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1116.266396][ T1114] usb 8-1: Detected FT232H [ 1116.271400][ T452] usb 5-1: Detected FT232H [ 1116.444388][ T1114] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1116.451383][ T452] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 1116.833437][T19989] loop8: detected capacity change from 0 to 40427 [ 1116.841723][T19989] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1116.843552][T11052] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1116.849650][T19989] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1116.866756][ T452] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1116.871281][T19989] F2FS-fs (loop8): invalid crc_offset: 33558524 [ 1116.874881][ T1114] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1116.892015][ T452] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1116.892398][T19989] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1116.903912][ T1114] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1116.917429][ T452] usb 5-1: USB disconnect, device number 38 [ 1116.926391][ T452] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1116.949261][ T1114] usb 8-1: USB disconnect, device number 18 [ 1116.955639][T19989] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1116.957423][ T452] ftdi_sio 5-1:0.0: device disconnected [ 1116.962938][T19989] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1116.968624][ T1114] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1117.011481][ T1114] ftdi_sio 8-1:0.0: device disconnected [ 1117.083610][T11052] usb 4-1: Using ep0 maxpacket: 16 [ 1117.097083][T11052] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1117.106670][T11052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.117602][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6309'. [ 1117.149673][T11052] usb 4-1: Product: syz [ 1117.154440][T11052] usb 4-1: Manufacturer: syz [ 1117.159063][T11052] usb 4-1: SerialNumber: syz [ 1117.202783][T11052] usb 4-1: config 0 descriptor?? [ 1117.208935][T11052] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1117.217130][T11052] usb 4-1: Detected FT232H [ 1117.537059][T11052] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1117.550089][T11052] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1117.567490][T11052] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1117.577002][T11052] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1117.619728][T11052] usb 4-1: USB disconnect, device number 10 [ 1117.651930][T11052] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1117.663567][T11052] ftdi_sio 4-1:0.0: device disconnected [ 1120.698205][T20052] device pim6reg1 entered promiscuous mode [ 1120.804074][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6330'. [ 1120.906750][T20077] loop9: detected capacity change from 0 to 4096 [ 1120.934609][T20077] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1121.043891][T20077] overlayfs: missing 'lowerdir' [ 1121.197440][T20090] loop4: detected capacity change from 0 to 4096 [ 1121.284641][T20090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1121.325128][T20090] overlayfs: missing 'lowerdir' [ 1121.500974][T20099] device pim6reg1 entered promiscuous mode [ 1121.827324][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1121.922346][T20124] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1122.162208][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1122.184960][T20139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1122.233345][T20134] loop7: detected capacity change from 0 to 16 [ 1122.239923][ T1114] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1122.240824][T20134] erofs: (device loop7): mounted with root inode @ nid 36. [ 1122.434293][ T1114] usb 10-1: Using ep0 maxpacket: 16 [ 1122.451578][ T1114] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1122.466761][ T1114] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.475303][ T1114] usb 10-1: Product: syz [ 1122.479577][ T1114] usb 10-1: Manufacturer: syz [ 1122.489835][ T1114] usb 10-1: SerialNumber: syz [ 1122.502150][ T1114] usb 10-1: config 0 descriptor?? [ 1122.511139][ T1114] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1122.520801][ T1114] usb 10-1: Detected FT232H [ 1122.705144][T20167] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1122.715002][ T1114] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1122.722560][ T1114] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1122.731122][ T1114] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1122.748940][ T1114] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1122.771788][ T1114] usb 10-1: USB disconnect, device number 10 [ 1122.782932][ T1114] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1122.793253][ T1114] ftdi_sio 10-1:0.0: device disconnected [ 1122.935441][T20175] loop7: detected capacity change from 0 to 4096 [ 1122.976126][T20175] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1122.991499][T20175] overlayfs: missing 'lowerdir' [ 1124.225422][T13141] EXT4-fs (loop7): unmounting filesystem. [ 1125.233408][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6380'. [ 1125.362932][T20240] loop4: detected capacity change from 0 to 4096 [ 1125.375100][T20240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1125.396561][T20240] overlayfs: missing 'lowerdir' [ 1126.153602][ T1114] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1126.158350][T20261] device pim6reg1 entered promiscuous mode [ 1126.228139][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1126.610630][ T1114] usb 10-1: Using ep0 maxpacket: 16 [ 1126.909943][ T1114] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1126.919531][ T1114] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.927835][ T1114] usb 10-1: Product: syz [ 1126.932314][ T1114] usb 10-1: Manufacturer: syz [ 1126.944420][ T1114] usb 10-1: SerialNumber: syz [ 1126.960761][ T1114] usb 10-1: config 0 descriptor?? [ 1126.969755][ T1114] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1126.978533][ T1114] usb 10-1: Detected FT232H [ 1127.576676][ T1114] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1127.584275][ T1114] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1127.591616][ T1114] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1127.607069][ T1114] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1127.629858][ T1114] usb 10-1: USB disconnect, device number 11 [ 1127.644242][ T1114] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1127.655164][ T1114] ftdi_sio 10-1:0.0: device disconnected [ 1127.764878][T20292] loop4: detected capacity change from 0 to 40427 [ 1127.781059][T20292] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1127.794367][T20304] device pim6reg1 entered promiscuous mode [ 1127.799418][T20292] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1127.835437][T20292] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1127.847775][T20292] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1127.937766][T20292] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1127.980669][T20292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1128.033988][T20312] loop8: detected capacity change from 0 to 4096 [ 1128.137493][T20312] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1128.179941][T20312] overlayfs: missing 'lowerdir' [ 1129.175125][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1130.310470][T20350] loop4: detected capacity change from 0 to 4096 [ 1130.596233][T20350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1130.627591][T20350] overlayfs: missing 'lowerdir' [ 1132.957337][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1133.009658][T20375] loop9: detected capacity change from 0 to 4096 [ 1133.021979][T20375] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1133.032897][T20375] overlayfs: missing 'lowerdir' [ 1133.109609][T20382] device pim6reg1 entered promiscuous mode [ 1133.442406][T20391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1133.567405][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1133.973327][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1134.636568][T20409] loop9: detected capacity change from 0 to 40427 [ 1134.652924][T20409] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1134.663583][T20409] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1134.685333][T20409] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 1134.693205][T20409] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1134.731051][T20409] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1134.738314][T20409] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1134.984212][ T7075] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1135.173625][ T7075] usb 8-1: Using ep0 maxpacket: 16 [ 1135.182781][ T7075] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1135.449545][ T7075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.457840][ T7075] usb 8-1: Product: syz [ 1135.462085][ T7075] usb 8-1: Manufacturer: syz [ 1135.466973][ T7075] usb 8-1: SerialNumber: syz [ 1135.472811][ T7075] usb 8-1: config 0 descriptor?? [ 1135.486692][ T7075] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1135.495270][ T7075] usb 8-1: Detected FT232H [ 1135.557021][T20442] device pim6reg1 entered promiscuous mode [ 1135.695542][ T7075] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1135.911109][T20447] loop9: detected capacity change from 0 to 4096 [ 1135.925606][T20440] 9pnet_fd: Insufficient options for proto=fd [ 1135.946411][T20447] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1135.960820][T20447] overlayfs: missing 'lowerdir' [ 1136.136374][ T7075] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1136.447040][ T7075] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1136.460872][ T7075] usb 8-1: USB disconnect, device number 19 [ 1136.471400][ T7075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1136.517648][ T7075] ftdi_sio 8-1:0.0: device disconnected [ 1136.727296][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1137.105119][T20486] device pim6reg1 entered promiscuous mode [ 1137.484277][ T452] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1141.618835][T20523] loop4: detected capacity change from 0 to 4096 [ 1141.670122][T20528] device pim6reg1 entered promiscuous mode [ 1141.670163][T20523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1141.726740][T20523] overlayfs: missing 'lowerdir' [ 1141.753663][ T452] usb 10-1: device not accepting address 12, error -71 [ 1143.345661][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1143.853572][T11820] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1144.043554][T11820] usb 4-1: Using ep0 maxpacket: 16 [ 1144.065496][T11820] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1144.074664][T11820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.082997][T11820] usb 4-1: Product: syz [ 1144.083015][T20563] loop7: detected capacity change from 0 to 40427 [ 1144.087614][T11820] usb 4-1: Manufacturer: syz [ 1144.094490][T20563] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1144.102702][T11820] usb 4-1: SerialNumber: syz [ 1144.115526][T11820] usb 4-1: config 0 descriptor?? [ 1144.119841][T20563] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1144.130194][T20563] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 1144.130200][T11820] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1144.130552][T11820] usb 4-1: Detected FT232H [ 1144.144171][T20563] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1144.167537][T20563] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1144.174884][T20563] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1144.339886][T11820] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1144.354994][T11820] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1144.423079][T11820] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1144.430618][T11820] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1144.441040][T11820] usb 4-1: USB disconnect, device number 11 [ 1144.475558][T11820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1144.485841][T11820] ftdi_sio 4-1:0.0: device disconnected [ 1144.504149][T20577] device pim6reg1 entered promiscuous mode [ 1144.941124][T20581] loop4: detected capacity change from 0 to 4096 [ 1144.999989][T20581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1145.042029][T20581] EXT4-fs (loop4): shut down requested (0) [ 1145.273275][T20581] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 1145.837933][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1145.871777][T20617] device pim6reg1 entered promiscuous mode [ 1146.801985][T20625] loop7: detected capacity change from 0 to 4096 [ 1147.007249][T20625] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1147.182735][T20625] EXT4-fs (loop7): shut down requested (0) [ 1147.306049][T20642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1147.397464][T20625] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1147.869326][T20646] loop8: detected capacity change from 0 to 4096 [ 1147.898649][T20646] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1147.959926][T20646] EXT4-fs (loop8): shut down requested (0) [ 1148.032976][T13141] EXT4-fs (loop7): unmounting filesystem. [ 1148.186458][T20646] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1148.337845][T20655] loop7: detected capacity change from 0 to 40427 [ 1148.352416][T20655] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1148.363605][T13948] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1148.368396][T20655] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1148.380870][T20655] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 1148.388752][T20655] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1148.433952][T20655] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1148.451289][T20655] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1148.553570][T13948] usb 10-1: Using ep0 maxpacket: 16 [ 1148.561369][T13948] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1148.580782][T13948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.596710][T20659] loop4: detected capacity change from 0 to 40427 [ 1148.599226][T13948] usb 10-1: Product: syz [ 1148.613836][T13948] usb 10-1: Manufacturer: syz [ 1148.626718][T13948] usb 10-1: SerialNumber: syz [ 1148.633717][T20659] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1148.642590][T13948] usb 10-1: config 0 descriptor?? [ 1148.652985][T13948] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1148.665515][T20659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1148.672629][T13948] usb 10-1: Detected FT232H [ 1148.695919][T20659] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1148.715226][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1148.818094][T20659] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1148.854237][T13948] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1149.233784][T13948] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1149.250150][T13948] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1149.275875][T13948] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1149.307905][T13948] usb 10-1: USB disconnect, device number 14 [ 1149.317048][T20659] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1149.325199][T20659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1149.356002][T13948] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1149.379754][T13948] ftdi_sio 10-1:0.0: device disconnected [ 1149.620030][T20683] 9pnet_fd: Insufficient options for proto=fd [ 1149.925883][T10104] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1150.109251][T20694] 9pnet_fd: Insufficient options for proto=fd [ 1150.123693][T10104] usb 4-1: Using ep0 maxpacket: 16 [ 1150.141650][T10104] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1150.151153][T10104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.159324][T10104] usb 4-1: Product: syz [ 1150.164013][T10104] usb 4-1: Manufacturer: syz [ 1150.168748][T10104] usb 4-1: SerialNumber: syz [ 1150.183648][T10104] usb 4-1: config 0 descriptor?? [ 1150.197850][T10104] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1150.206780][T10104] usb 4-1: Detected FT232H [ 1150.307079][T20707] loop7: detected capacity change from 0 to 256 [ 1151.962377][ T28] audit: type=1400 audit(1757732383.185:1027): avc: denied { unmount } for pid=13144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1151.986065][T10104] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1152.224324][T20718] loop9: detected capacity change from 0 to 40427 [ 1152.238012][T20718] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1152.246168][T20718] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1152.255970][T20718] F2FS-fs (loop9): invalid crc_offset: 33558524 [ 1152.267049][T20718] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1152.315505][T20718] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1152.322713][T20718] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1152.415085][T10104] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1152.445642][T10104] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1152.482285][T10104] usb 4-1: USB disconnect, device number 12 [ 1152.574549][T10104] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1152.584435][T10104] ftdi_sio 4-1:0.0: device disconnected [ 1153.078724][T20764] loop4: detected capacity change from 0 to 4096 [ 1153.105441][T20764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1153.130254][T20764] overlayfs: missing 'lowerdir' [ 1153.168528][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.179191][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.190134][T20771] tc_dump_action: action bad kind [ 1153.207315][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.241876][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.572683][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.580882][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.588735][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.596235][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.604019][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.611682][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.619518][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.627615][T10104] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 1153.635722][T10104] hid-generic 0006:0004:0009.0012: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1155.214135][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1155.387448][T20814] tc_dump_action: action bad kind [ 1155.662439][T20825] syz.9.6543 uses obsolete (PF_INET,SOCK_PACKET) [ 1155.897204][ T28] audit: type=1400 audit(1757732386.875:1028): avc: denied { write } for pid=20815 comm="syz.9.6543" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1156.433618][T11820] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1156.452584][T20861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1156.483793][T20851] 9pnet_fd: Insufficient options for proto=fd [ 1156.623604][T11820] usb 8-1: Using ep0 maxpacket: 16 [ 1156.631316][T11820] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1156.640597][T11820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.648819][T11820] usb 8-1: Product: syz [ 1156.648872][T11820] usb 8-1: Manufacturer: syz [ 1156.648887][T11820] usb 8-1: SerialNumber: syz [ 1156.649790][T11820] usb 8-1: config 0 descriptor?? [ 1156.665485][T11820] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1156.666392][T11820] usb 8-1: Detected FT232H [ 1156.886612][T11820] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1157.145418][T11820] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1157.164395][T20880] 9pnet_fd: Insufficient options for proto=fd [ 1157.173672][T11820] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1157.308404][T11820] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1157.666224][T11820] usb 8-1: USB disconnect, device number 20 [ 1157.672902][T11820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1157.682597][T11820] ftdi_sio 8-1:0.0: device disconnected [ 1157.803330][T20896] loop9: detected capacity change from 0 to 4096 [ 1158.047397][T20898] FAULT_INJECTION: forcing a failure. [ 1158.047397][T20898] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.060286][T20898] CPU: 1 PID: 20898 Comm: syz.7.6564 Not tainted syzkaller #0 [ 1158.067760][T20898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1158.077904][T20898] Call Trace: [ 1158.081180][T20898] [ 1158.084105][T20898] __dump_stack+0x21/0x24 [ 1158.088439][T20898] dump_stack_lvl+0xee/0x150 [ 1158.093028][T20898] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1158.098048][T20898] ? __cfi_vfs_write+0x10/0x10 [ 1158.102811][T20898] dump_stack+0x15/0x24 [ 1158.107046][T20898] should_fail_ex+0x3d4/0x520 [ 1158.111927][T20898] __should_failslab+0xac/0xf0 [ 1158.117046][T20898] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1158.122436][T20898] should_failslab+0x9/0x20 [ 1158.127025][T20898] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1158.132398][T20898] ? ksys_write+0x1eb/0x240 [ 1158.136989][T20898] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1158.142361][T20898] __kmalloc+0xa1/0x1e0 [ 1158.146515][T20898] ? strnlen_user+0x10d/0x190 [ 1158.151454][T20898] __se_sys_memfd_create+0xf2/0x3b0 [ 1158.156661][T20898] __x64_sys_memfd_create+0x5b/0x70 [ 1158.161860][T20898] x64_sys_call+0x235/0x9a0 [ 1158.166369][T20898] do_syscall_64+0x4c/0xa0 [ 1158.170777][T20898] ? clear_bhb_loop+0x30/0x80 [ 1158.175710][T20898] ? clear_bhb_loop+0x30/0x80 [ 1158.180479][T20898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1158.186459][T20898] RIP: 0033:0x7f51a858eba9 [ 1158.190974][T20898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.210941][T20898] RSP: 002b:00007f51a942de18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1158.219356][T20898] RAX: ffffffffffffffda RBX: 00000000000005fd RCX: 00007f51a858eba9 [ 1158.227407][T20898] RDX: 00007f51a942def0 RSI: 0000000000000000 RDI: 00007f51a86127e8 [ 1158.235462][T20898] RBP: 0000200000000c00 R08: 00007f51a942dbb7 R09: 00007f51a942de40 [ 1158.243460][T20898] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 1158.251535][T20898] R13: 00007f51a942def0 R14: 00007f51a942deb0 R15: 00002000000002c0 [ 1158.259596][T20898] [ 1158.440282][T20896] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1158.576885][T20896] overlayfs: missing 'lowerdir' [ 1159.076865][T20903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.103610][T20903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.111224][T20903] device bridge_slave_0 entered promiscuous mode [ 1159.144555][T20903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.151788][T20903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.160128][T20903] device bridge_slave_1 entered promiscuous mode [ 1159.176832][T13143] EXT4-fs (loop9): unmounting filesystem. [ 1159.823377][T20903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.830668][T20903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.838428][T20903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.845846][T20903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.898219][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.908609][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.925536][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1159.940641][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1159.958411][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1159.973985][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.981144][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.008729][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.022260][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.029422][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.109308][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1160.123898][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1160.143707][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1160.154568][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1160.183706][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1160.192161][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1160.252583][ T2213] device bridge_slave_1 left promiscuous mode [ 1160.258955][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.267160][ T2213] device bridge_slave_0 left promiscuous mode [ 1160.273470][ T2213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.283052][ T2213] device veth0_vlan left promiscuous mode [ 1160.356967][T20929] 9pnet_fd: Insufficient options for proto=fd [ 1160.450126][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1160.458336][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1160.467314][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1160.475127][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1160.483396][T20903] device veth0_vlan entered promiscuous mode [ 1160.496432][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1160.628897][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1160.721143][T20949] netlink: 'syz.7.6576': attribute type 30 has an invalid length. [ 1160.737467][T20903] device veth1_macvtap entered promiscuous mode [ 1160.772999][T10104] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1160.824897][ T28] audit: type=1326 audit(1757732392.055:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc582f8eba9 code=0x7ffc0000 [ 1160.854756][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1160.858568][ T28] audit: type=1326 audit(1757732392.055:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc582f8eba9 code=0x7ffc0000 [ 1160.872892][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1160.894125][ T28] audit: type=1326 audit(1757732392.055:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc582f8eba9 code=0x7ffc0000 [ 1160.913858][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1160.920110][ T28] audit: type=1326 audit(1757732392.055:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc582f8ebe3 code=0x7ffc0000 [ 1160.926993][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1160.951503][T20952] syz.7.6576[20952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.958232][T20952] syz.7.6576[20952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.970989][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1160.991277][ T28] audit: type=1326 audit(1757732392.215:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc582f8d65f code=0x7ffc0000 [ 1161.003576][T10104] usb 5-1: Using ep0 maxpacket: 16 [ 1161.033788][T10104] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1161.043683][T10104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.051916][T10104] usb 5-1: Product: syz [ 1161.056542][T10104] usb 5-1: Manufacturer: syz [ 1161.061308][T10104] usb 5-1: SerialNumber: syz [ 1161.067885][ T28] audit: type=1326 audit(1757732392.305:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc582f8ec37 code=0x7ffc0000 [ 1161.071074][T10104] usb 5-1: config 0 descriptor?? [ 1161.094172][T20951] loop9: detected capacity change from 0 to 40427 [ 1161.100096][T10104] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1161.104562][ T28] audit: type=1326 audit(1757732392.325:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc582f8d510 code=0x7ffc0000 [ 1161.116097][T10104] usb 5-1: Detected FT232H [ 1161.134920][ T28] audit: type=1326 audit(1757732392.325:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc582f8e7ab code=0x7ffc0000 [ 1161.167374][ T28] audit: type=1326 audit(1757732392.335:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc582f8d80a code=0x7ffc0000 [ 1161.202291][T20951] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1161.238117][ T28] audit: type=1326 audit(1757732392.335:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20950 comm="syz.9.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc582f8d80a code=0x7ffc0000 [ 1161.257319][T20951] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1161.273859][T20951] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1161.299718][T10104] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1161.310459][T13143] syz-executor: attempt to access beyond end of device [ 1161.310459][T13143] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1161.324992][T13143] syz-executor: attempt to access beyond end of device [ 1161.324992][T13143] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1161.373772][ T7075] kworker/1:1: attempt to access beyond end of device [ 1161.373772][ T7075] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1161.649150][T20975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.656391][T20975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.664164][T20975] device bridge_slave_0 entered promiscuous mode [ 1161.672165][T20975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.682390][T20975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.690075][T20975] device bridge_slave_1 entered promiscuous mode [ 1161.710051][T10104] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1161.717690][T10104] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1161.732990][T10104] usb 5-1: USB disconnect, device number 39 [ 1161.741908][T10104] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1161.751969][T10104] ftdi_sio 5-1:0.0: device disconnected [ 1161.805030][T20985] tc_dump_action: action bad kind [ 1161.925541][T20975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.932761][T20975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.940417][T20975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.947621][T20975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.975816][ T2213] device bridge_slave_1 left promiscuous mode [ 1161.982050][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.991069][ T2213] device bridge_slave_0 left promiscuous mode [ 1161.997742][ T2213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.014524][ T2213] device veth1_macvtap left promiscuous mode [ 1162.024997][ T2213] device veth0_vlan left promiscuous mode [ 1162.243063][T21002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1162.326684][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.336302][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.358239][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1162.414057][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1162.426180][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1162.438062][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1162.447592][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1162.456760][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1162.465557][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1162.474557][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1162.487012][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1162.495570][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1162.523112][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1162.531891][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1162.541066][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.548435][T12737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.556531][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1162.565319][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1162.574416][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.581473][T12737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.604868][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1162.613465][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1162.622035][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1162.642902][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1162.672153][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1162.686229][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1162.717150][T20975] device veth0_vlan entered promiscuous mode [ 1162.733813][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1162.748641][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1162.797927][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1162.805684][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1162.813423][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1162.823342][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1162.839809][T20975] device veth1_macvtap entered promiscuous mode [ 1163.637466][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1163.646926][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1163.655613][T21040] fuse: Bad value for 'fd' [ 1163.663160][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1163.693277][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1163.716627][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1163.729235][T21047] loop4: detected capacity change from 0 to 512 [ 1163.754959][T21047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1163.770355][T21047] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.6603: corrupted in-inode xattr [ 1163.782710][T21047] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.6603: couldn't read orphan inode 15 (err -117) [ 1163.796486][T21047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1164.613899][T13144] EXT4-fs (loop4): unmounting filesystem. [ 1164.895349][T21063] loop7: detected capacity change from 0 to 40427 [ 1164.991569][T21063] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1165.016834][T21063] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1165.028385][T21063] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 1165.074261][T21063] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1165.121628][T21063] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1165.129311][T21063] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1167.454661][T21121] SELinux: failed to load policy [ 1167.459886][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 1167.459906][ T28] audit: type=1400 audit(1757732398.685:1077): avc: denied { load_policy } for pid=21120 comm="syz.3.6625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1169.213997][T21138] loop4: detected capacity change from 0 to 512 [ 1169.845029][T21150] xt_socket: unknown flags 0x58 [ 1171.429644][T21138] EXT4-fs: failed to create workqueue [ 1171.435306][T21138] EXT4-fs (loop4): mount failed [ 1172.173215][T21164] xt_TCPMSS: Only works on TCP SYN packets [ 1173.422214][T21173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1173.521173][T21157] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1173.901434][T21193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1174.698999][T21204] xt_socket: unknown flags 0x58 [ 1175.285128][ T28] audit: type=1400 audit(1757732405.895:1078): avc: denied { getopt } for pid=21199 comm="syz.4.6643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1175.434697][T21208] loop4: detected capacity change from 0 to 128 [ 1175.530231][T21209] netlink: 296 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1175.545281][T21208] syz.4.6645: attempt to access beyond end of device [ 1175.545281][T21208] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1175.619747][T21210] syz.4.6645: attempt to access beyond end of device [ 1175.619747][T21210] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 1175.633827][T21210] syz.4.6645: attempt to access beyond end of device [ 1175.633827][T21210] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1175.681025][T21208] syz.4.6645: attempt to access beyond end of device [ 1175.681025][T21208] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1175.694629][T21208] syz.4.6645: attempt to access beyond end of device [ 1175.694629][T21208] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1175.707966][T21210] syz.4.6645: attempt to access beyond end of device [ 1175.707966][T21210] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1175.762535][T21210] syz.4.6645: attempt to access beyond end of device [ 1175.762535][T21210] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1175.776647][T21210] syz.4.6645: attempt to access beyond end of device [ 1175.776647][T21210] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1175.792010][T21208] syz.4.6645: attempt to access beyond end of device [ 1175.792010][T21208] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1175.813731][T21210] syz.4.6645: attempt to access beyond end of device [ 1175.813731][T21210] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1178.683696][T11272] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1178.903577][T11272] usb 5-1: Using ep0 maxpacket: 16 [ 1178.911972][T11272] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1178.930627][T11272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.939229][T11272] usb 5-1: Product: syz [ 1178.943458][T11272] usb 5-1: Manufacturer: syz [ 1178.948747][T11272] usb 5-1: SerialNumber: syz [ 1178.958084][T11272] usb 5-1: config 0 descriptor?? [ 1178.965909][T11272] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1180.215715][T21252] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6655'. [ 1180.366189][ T28] audit: type=1400 audit(1757732411.445:1079): avc: denied { write } for pid=21248 comm="syz.8.6655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1180.694994][T11272] usb 5-1: Detected FT232H [ 1180.723809][T11272] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1181.950699][T11272] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1182.005781][T21269] loop8: detected capacity change from 0 to 4096 [ 1182.089346][T11272] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1182.102465][T11272] usb 5-1: USB disconnect, device number 40 [ 1182.258842][T11272] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1182.339852][T21269] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1182.384134][T11272] ftdi_sio 5-1:0.0: device disconnected [ 1184.108791][T21298] fuse: Bad value for 'group_id' [ 1184.984245][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1185.298076][T21304] netlink: 'syz.0.6668': attribute type 12 has an invalid length. [ 1185.340511][T21306] loop8: detected capacity change from 0 to 4096 [ 1185.347833][T21303] input: syz0 as /devices/virtual/input/input17 [ 1185.402754][T21306] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1185.495185][T21306] EXT4-fs (loop8): shut down requested (0) [ 1185.802610][T21306] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1185.919532][T21312] loop7: detected capacity change from 0 to 40427 [ 1185.930167][T21312] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1185.938641][T21312] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1185.956330][T21312] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 1185.963529][T13948] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1185.977459][T21312] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1186.017309][T21312] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1186.024527][T21312] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1186.153580][T13948] usb 5-1: Using ep0 maxpacket: 16 [ 1186.161756][T13948] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1186.171576][T13948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.180070][T13948] usb 5-1: Product: syz [ 1186.184614][T13948] usb 5-1: Manufacturer: syz [ 1186.189744][T13948] usb 5-1: SerialNumber: syz [ 1187.183549][T13948] usb 5-1: config 0 descriptor?? [ 1187.192436][T13948] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1187.202195][T13948] usb 5-1: Detected FT232H [ 1187.238927][T21344] 9pnet_fd: Insufficient options for proto=fd [ 1187.268502][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1187.292796][ T28] audit: type=1400 audit(1757732418.515:1080): avc: denied { read } for pid=21340 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1187.306211][T21348] netlink: 'syz.8.6681': attribute type 4 has an invalid length. [ 1187.375414][T21348] netlink: 'syz.8.6681': attribute type 4 has an invalid length. [ 1187.393650][T13948] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1187.515902][T21348] loop8: detected capacity change from 0 to 4096 [ 1187.546153][T21348] EXT4-fs: Ignoring removed mblk_io_submit option [ 1187.573080][T21348] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1187.600137][T21348] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. Stopping sshd: stopped /usr/sbin/sshd (pid 194) OK Stopping crond: stopped /usr/sbin/crond (pid 187) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 141) [ 1188.857292][ T28] audit: type=1400 audit(1757732420.085:1081): avc: denied { search } for pid=21373 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1188.859039][T13948] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1188.887070][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1188.904216][T13948] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1188.914960][T13948] usb 5-1: USB disconnect, device number 41 [ 1188.932448][T13948] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1188.948869][T13948] ftdi_sio 5-1:0.0: device disconnected [ 1189.078520][T21388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6688'. Stopping network[ 1189.089117][ T28] audit: type=1400 audit(1757732420.285:1082): avc: denied { write } for pid=142 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 : [ 1189.114749][ T28] audit: type=1400 audit(1757732420.285:1083): avc: denied { remove_name } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.142192][ T28] audit: type=1400 audit(1757732420.285:1084): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 1189.190150][ T28] audit: type=1400 audit(1757732420.305:1085): avc: denied { create } for pid=21387 comm="syz.7.6688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1189.226416][ T28] audit: type=1400 audit(1757732420.305:1086): avc: denied { nlmsg_read } for pid=21387 comm="syz.7.6688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1189.280833][ T28] audit: type=1400 audit(1757732420.375:1087): avc: denied { unlink } for pid=142 comm="dhcpcd" name="pid" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1189.369620][ T28] audit: type=1400 audit(1757732420.595:1088): avc: denied { read } for pid=21354 comm="syz.0.6684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1189.399315][ T28] audit: type=1400 audit(1757732420.595:1089): avc: denied { read write } for pid=21395 comm="ip" path="/dev/console" dev="rootfs" ino=7146 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1189.500166][T21402] loop7: detected capacity change from 0 to 256 [ 1189.544403][T21402] FAT-fs (loop7): bogus number of FAT sectors [ 1189.550764][T21402] FAT-fs (loop7): Can't find a valid FAT filesystem OK [ 1190.813726][T13127] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 Stopping iptables: OK Stopping system message bus: [ 1190.914964][T21414] serio: Serial port ttyS3 done [ 1193.811639][T13948] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1193.853449][T21435] loop8: detected capacity change from 0 to 4096 [ 1193.924446][T21435] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1193.933572][ T967] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1193.994618][T21435] EXT4-fs (loop8): shut down requested (0) [ 1194.029345][T13948] usb 8-1: Using ep0 maxpacket: 16 [ 1194.051798][T13948] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1194.088926][T13948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.097432][T13948] usb 8-1: Product: syz [ 1194.101628][T13948] usb 8-1: Manufacturer: syz [ 1194.106582][T13948] usb 8-1: SerialNumber: syz [ 1194.113951][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 1194.120740][T13948] usb 8-1: config 0 descriptor?? [ 1194.121991][ T967] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1194.138746][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.141680][T13948] usb 8-1: can't set config #0, error -71 Stopping klogd: [ 1194.166828][T13948] usb 8-1: USB disconnect, device number 21 [ 1194.170657][ T967] usb 4-1: Product: syz [ 1194.189803][ T967] usb 4-1: Manufacturer: syz [ 1194.264372][ T967] usb 4-1: SerialNumber: syz OK [ 1194.296770][ T967] usb 4-1: config 0 descriptor?? [ 1194.306636][T21435] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 1194.320284][ T967] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1194.328532][ T967] usb 4-1: Detected FT232H Stopping acpid: [ 1194.519321][ T967] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1194.540010][ T967] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1194.620319][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1194.620337][ T28] audit: type=1400 audit(1757732425.845:1097): avc: denied { write } for pid=88 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.668960][ T967] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1194.696824][ T967] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1194.696943][ T28] audit: type=1400 audit(1757732425.845:1098): avc: denied { remove_name } for pid=88 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.710518][ T967] usb 4-1: USB disconnect, device number 13 [ 1194.770888][ T28] audit: type=1400 audit(1757732425.845:1099): avc: denied { unlink } for pid=88 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1194.775147][ T967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1194.832988][ T967] ftdi_sio 4-1:0.0: device disconnected [ 1194.858223][T13140] EXT4-fs (loop8): unmounting filesystem. [ 1195.265105][T21482] loop7: detected capacity change from 0 to 128 [ 1195.271850][T21482] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1195.279678][T21482] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1195.288487][T21482] ext4 filesystem being mounted at /545/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.302522][T21482] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" OK [ 1195.749030][ T967] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 1195.920604][ T967] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 1196.053213][ T967] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 Stopping syslogd: stopped /sbin/syslogd (pid 85) [ 1196.146469][ T967] hid-generic 0000:0004:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 OK [ 1196.771367][T21518] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! umount: can't remount debugfs read-only [ 1196.934404][T21536] tipc: Failed to remove unknown binding: 66,1,1/0:167795886/167795888 [ 1197.121076][T21536] tipc: Failed to remove unknown binding: 66,1,1/0:167795886/167795888 [ 1197.129828][T21536] tipc: Failed to remove unknown binding: 66,1,1/0:167795886/167795888 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.242 closed by remote host. [ 1197.353809][ T28] audit: type=1400 audit(1757732428.575:1100): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14683]" dev="pipefs" ino=14683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 1197.466499][T21491] EXT4-fs (loop7): unmounting filesystem. [ 1197.587307][ T8866] tipc: Left network mode [ 1198.164131][ T8866] device bridge_slave_1 left promiscuous mode [ 1198.170332][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.178300][ T8866] device bridge_slave_0 left promiscuous mode [ 1198.184604][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.192290][ T8866] device veth1_macvtap left promiscuous mode [ 1198.198337][ T8866] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 1198.994490][ T8866] device bridge_slave_1 left promiscuous mode [ 1199.000597][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.008056][ T8866] device bridge_slave_0 left promiscuous mode [ 1199.014221][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.021897][ T8866] device bridge_slave_1 left promiscuous mode [ 1199.028239][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.035718][ T8866] device bridge_slave_0 left promiscuous mode [ 1199.041825][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.049693][ T8866] device bridge_slave_1 left promiscuous mode [ 1199.055844][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.063157][ T8866] device bridge_slave_0 left promiscuous mode [ 1199.069419][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.077265][ T8866] device bridge_slave_1 left promiscuous mode [ 1199.083367][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.090842][ T8866] device bridge_slave_0 left promiscuous mode [ 1199.097035][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.105181][ T8866] device veth1_macvtap left promiscuous mode [ 1199.111272][ T8866] device veth0_vlan left promiscuous mode [ 1199.118078][ T8866] device veth1_macvtap left promiscuous mode [ 1199.124238][ T8866] device veth0_vlan left promiscuous mode [ 1199.130333][ T8866] device veth1_macvtap left promiscuous mode [ 1199.136402][ T8866] device veth0_vlan left promiscuous mode [ 1199.142442][ T8866] device veth1_macvtap left promiscuous mode [ 1199.148545][ T8866] device veth0_vlan left promiscuous mode [ 1199.464563][T21552] kvm: exiting hardware virtualization [ 1199.470640][T21552] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1199.477485][T21552] ACPI: PM: Preparing to enter system sleep state S5 [ 1199.484405][T21552] reboot: Power down serialport: VM disconnected.