last executing test programs: 2m0.816069838s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x3, 0x460, &(0x7f0000000780)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/191, 0xbf, 0x0, &(0x7f0000000400)=@file={0x0, './file0/../file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@float={0x10, 0x0, 0x0, 0x10, 0xa}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4}, {0xa, 0x5}, {0xc}]}, @fwd={0x4}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x2}}, @float={0x1, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000580)=""/154, 0x92, 0x9a, 0x1, 0xf, 0x10000, @value=r5}, 0x28) (async) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (rerun: 32) read$FUSE(r6, &(0x7f0000006b40)={0x2020}, 0x2020) 2m0.485905999s ago: executing program 0 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) (async) r2 = syz_pidfd_open(0x0, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000002a40)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x8}, 0xe3, 0x80, 0x6, 0x9, 0x19, 'syz1\x00', "41e0573aa950bddaf41188d0d4355b3ec6fdebb5722506b0068aac70bbe0e86f", "66ae2920f0a33a0f51c73d0d662f5a2728edca8157a5350db11dbcff8b5bc195", [{0x2, 0x0, {0x1, 0x4}}, {0xff7f, 0x3, {0x2, 0x7fff}}, {0x6, 0x5, {0x2, 0x8b9}}, {0x8000, 0x80, {0x0, 0xe28}}, {0x7, 0x24f1, {0x3, 0x3}}, {0x1000, 0x8, {0x2}}, {0xb82, 0x2, {0x3, 0x80000000}}, {0x2b12, 0xd9, {0x3, 0x2}}, {0xac5, 0x2cd, {0x1, 0x2}}, {0x0, 0x7fff, {0x0, 0x10000}}, {0xc, 0xd67, {0x2, 0x5}}, {0x8, 0x8, {0x2, 0x9}}, {0x6, 0xfffa, {0x0, 0x2}}, {0x0, 0xf001, {0x2, 0x9}}, {0x9, 0x3, {0x3, 0x4}}, {0x1ff, 0x12, {0x2, 0x1}}, {0x93a8, 0xf, {0x1, 0x9}}, {0xe3, 0x9, {0x2, 0x40000000}}, {0x78a, 0x0, {0x0, 0x1}}, {0x9, 0x4, {0x1}}, {0x1, 0x80}, {0x0, 0x3, {0x0, 0x400}}, {0x80, 0x1, {0x0, 0x6}}, {0x7e37, 0x0, {0x2, 0x5}}, {0x82, 0x7, {0x1, 0xb}}, {0x79de, 0x4, {0x3, 0x4}}, {0x9, 0x9, {0x2, 0x6}}, {0x5, 0x2, {0x1, 0x9ad}}, {0x3, 0x9, {0x1, 0x5bb7}}, {0x81, 0x200, {0x0, 0x3784}}, {0x2, 0xfff7, {0x1, 0x7}}, {0x800, 0x2, {0x2, 0xfffffffb}}, {0x4639, 0x3, {0x3, 0x8}}, {0x2, 0x5, {0x0, 0x8}}, {0x7, 0x6, {0x2}}, {0xfff, 0xff, {0x3, 0x3}}, {0x6, 0x0, {0x1, 0x6}}, {0x8, 0xffe1, {0x0, 0x2}}, {0x6, 0x40, {0x0, 0xf}}, {0x2, 0x1, {0x3, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x50014}, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x50}, 0x50) close(0x3) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) read$FUSE(r3, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0xfffffffffffffff5, r10, {0x6}}, 0x18) 2m0.236252892s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xd, &(0x7f0000000000)={0x0, 0xced}, 0x0) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xb6, 0x7fff1004}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@noinit_itable}, {@nodelalloc}, {@dioread_lock}, {@journal_ioprio}, {@journal_dev={'journal_dev', 0x3d, 0x489}}, {@usrjquota}, {@minixdf}]}, 0xf6, 0x479, &(0x7f00000004c0)="$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") 2m0.193692066s ago: executing program 32 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xd, &(0x7f0000000000)={0x0, 0xced}, 0x0) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xb6, 0x7fff1004}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@noinit_itable}, {@nodelalloc}, {@dioread_lock}, {@journal_ioprio}, {@journal_dev={'journal_dev', 0x3d, 0x489}}, {@usrjquota}, {@minixdf}]}, 0xf6, 0x479, &(0x7f00000004c0)="$eJzs3MtvVFUYAPBvbqel5WER8QGCVsFIfLS0PGThRqOJC40musC4qtNCkEINrYkQougCY1wYEvfGpYl/gSvdGHVl4lb3hoQYNqCrMWfuvfTBTGnplA7O75dcOOfeO5zz3XPPzLnnzBBA1xpKf1QiNkfEHxExGBHVxScM5X9dv3q+9s/V87VK1Otv/l1JL4trV8/Xin+isSWb8h31epHf0KTci+9EjE9NTZ4p8iOzp94fmTl77tkTp8aPTx6fPD125MjBA7v7Do8dakucKa5rOz+a3rXjlbcvvVY7eundX75L9d1cHC/jaKeh/Oo29US7C1tnW+alK9V1rAgrktoti4jeRv8fjJ4YuHFsMF7+dF0rB6y1arPP58KFOvA/lgbqQDcqP+jT82+53aFxR0e48kI+4ZHivl5s+ZFq47koimejLWtUfn9EHL3w79dpizWahwAAmO+HNP55ptn4L4sH5p13T7GGsjUi7o2IbRFxX0Rsj4j7IxrnPhgRD62w/MUrJDePf7LLC7L1nhWWsLQ0/nu+WNtaOP4rR3+xtafIbWnE31s5dmJqcn9xTfZF74aUH13wkoV+fOn3Lxfv+6KYZh+aN/5LWyp/YYTZ5cUTdBPjs+Orjzx35ZOIndVm8VdurANWImJHROy8zTJOPPXtrlbHmsVfjoVvqQ3rTPVvIp7M2/9CLIq/VGm5Pjn63OGxQyP9MTW5f6S8K272628X32hV/qrib4PU/hub3v95/OkZsdIfMXP23MnGeu3Mysu4+OdntUqLY9tvGf/N939tb0Rf5a1Guq/Y9+H47OyZ0bT/1ZQdWLB/bO61Zb48P8W/b89c/OMx1/+35Y9njSvxcESkm3h3RDwSEY8WbfdYRDweEXuWiP/nF/e+1+pY6/ZfYla+jVL8E0u0f3rLS6m59l95oufkT9+3Kr++rPY/2EjtK/Ys5/1vuRVczbUDAACAu0XW+A58JRu+kc6y4eH8O/zbY2M2NT0z+/Sx6Q9OT+Tfld8avVk50zU4bz50tJgbLvNji/IHinnjr3oGGvnh2vTUxHoHD11uU4v+n/zV3qUWoBP5vRZ0L/0fupf+D91L/4fupf9Dl+prvvvjO10PYF2s/PO/f03qAdx5xv/QvfR/6F76P3Sllr+Nz1b1k/+7NVHtjGo0TQx0RjXKRGQdUY32JV7/PO8SnVKfMlFd9n9mcZuJDU0Prfc7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8FwAA//+v1t56") 1m49.672254943s ago: executing program 2 (id=74): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0xfffffffc}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) (async) recvmmsg(r0, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}, 0xfae0e63}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008c}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x24000000) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES8=r8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) 1m49.671730623s ago: executing program 2 (id=75): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f350e6", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f350e6", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d85000000070000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) write$FUSE_NOTIFY_RESEND(r5, &(0x7f00000000c0)={0x14}, 0x14) (async) write$FUSE_NOTIFY_RESEND(r5, &(0x7f00000000c0)={0x14}, 0x14) write$FUSE_BMAP(r5, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x1ff}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m49.605909179s ago: executing program 2 (id=76): r0 = epoll_create1(0x80000) (async) rt_sigsuspend(0x0, 0xfffffffffffffe8b) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x55ba, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0xfffffffffffffeda) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, 0x0}, 0x20) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 1m49.496675409s ago: executing program 2 (id=79): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x17, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001040)='signal_generate\x00', r2}, 0x18) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x10) 1m48.493979913s ago: executing program 2 (id=84): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000000, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) set_robust_list(&(0x7f0000000100)={0x0, 0x1}, 0x18) 1m47.494196265s ago: executing program 2 (id=89): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(r3, 0x27) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000005c00)=[{{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f00000036c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/137, 0x89}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000001840)=""/178, 0xb2}, {&(0x7f0000000600)=""/8, 0x8}, {&(0x7f0000001900)=""/175, 0xaf}], 0xa, &(0x7f0000001a80)=""/196, 0xc4}, 0x8}, {{&(0x7f0000001b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/27, 0x1b}], 0x1, &(0x7f0000001c80)=""/124, 0x7c}, 0x8}, {{&(0x7f0000001d00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001d80)=""/150, 0x96}, {&(0x7f0000001e40)=""/245, 0xf5}, {&(0x7f0000001f40)=""/235, 0xeb}], 0x3, &(0x7f0000002080)=""/133, 0x85}, 0x9}, {{&(0x7f0000002140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000021c0)=""/108, 0x6c}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003400)=""/34, 0x22}, {&(0x7f0000005dc0)=""/179, 0xb3}, {&(0x7f0000003340)=""/51, 0x33}], 0x5, &(0x7f0000003400)}, 0x1}, {{&(0x7f0000003440)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/241, 0xf1}], 0x1, &(0x7f0000003600)=""/10, 0xa}, 0x80000001}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003640)=""/49, 0x31}, {&(0x7f0000003680)=""/50, 0x32}, {&(0x7f00000036c0)}, {&(0x7f0000005e80)=""/4106, 0x100a}, {&(0x7f0000004700)=""/121, 0x79}], 0x5, &(0x7f0000004800)=""/35, 0x23}, 0x7ff}, {{0x0, 0x0, &(0x7f0000005ac0), 0x0, &(0x7f0000005b40)=""/168, 0xa8}}], 0x7, 0x22, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000e00)=ANY=[], 0x110) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000240)={0x0, {{0xa, 0xdfff, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, {{0xa, 0x4e23, 0x0, @loopback, 0x6e}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(r5, &(0x7f00000005c0)='cgroup.stat\x00', 0x275a, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') openat$cgroup_int(r9, &(0x7f0000000040)='memory.swap.high\x00', 0x2, 0x0) 1m47.221358681s ago: executing program 33 (id=89): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(r3, 0x27) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000005c00)=[{{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f00000036c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/137, 0x89}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000001840)=""/178, 0xb2}, {&(0x7f0000000600)=""/8, 0x8}, {&(0x7f0000001900)=""/175, 0xaf}], 0xa, &(0x7f0000001a80)=""/196, 0xc4}, 0x8}, {{&(0x7f0000001b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/27, 0x1b}], 0x1, &(0x7f0000001c80)=""/124, 0x7c}, 0x8}, {{&(0x7f0000001d00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001d80)=""/150, 0x96}, {&(0x7f0000001e40)=""/245, 0xf5}, {&(0x7f0000001f40)=""/235, 0xeb}], 0x3, &(0x7f0000002080)=""/133, 0x85}, 0x9}, {{&(0x7f0000002140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000021c0)=""/108, 0x6c}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003400)=""/34, 0x22}, {&(0x7f0000005dc0)=""/179, 0xb3}, {&(0x7f0000003340)=""/51, 0x33}], 0x5, &(0x7f0000003400)}, 0x1}, {{&(0x7f0000003440)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/241, 0xf1}], 0x1, &(0x7f0000003600)=""/10, 0xa}, 0x80000001}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003640)=""/49, 0x31}, {&(0x7f0000003680)=""/50, 0x32}, {&(0x7f00000036c0)}, {&(0x7f0000005e80)=""/4106, 0x100a}, {&(0x7f0000004700)=""/121, 0x79}], 0x5, &(0x7f0000004800)=""/35, 0x23}, 0x7ff}, {{0x0, 0x0, &(0x7f0000005ac0), 0x0, &(0x7f0000005b40)=""/168, 0xa8}}], 0x7, 0x22, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000e00)=ANY=[], 0x110) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000240)={0x0, {{0xa, 0xdfff, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, {{0xa, 0x4e23, 0x0, @loopback, 0x6e}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(r5, &(0x7f00000005c0)='cgroup.stat\x00', 0x275a, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') openat$cgroup_int(r9, &(0x7f0000000040)='memory.swap.high\x00', 0x2, 0x0) 1m45.780065094s ago: executing program 6 (id=90): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0x34014c40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r4, r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e20000000000000000000000000000bd000000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000d45d39a0a797387583ce3cfc000000"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r10 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r10, r9, r9, 0x0) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x18) ioctl$TUNGETVNETLE(r1, 0x40047451, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065deff097b000008003950323030302e4c"], 0x15) 1m45.708208831s ago: executing program 6 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x13, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv6_newrule={0xbc, 0x20, 0x300, 0x70bd29, 0x25dfdbfb, {0xa, 0x20, 0x0, 0xf, 0xff, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @FRA_SRC={0x14, 0x2, @empty}, @FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = eventfd2(0x26, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x1, 0x2002, 0x6, 0x0, 0x1, 0xcaff}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) read(r4, &(0x7f0000000140)=""/220, 0xdc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='-\x00\x00 ', @ANYRES16=r2, @ANYBLOB="010003000000000000001a00000004000180"], 0x18}}, 0x40080c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8f}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6f}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x53}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x21}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x58}}, 0x20008000) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 1m45.462417874s ago: executing program 6 (id=100): mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x800) getpeername$unix(r3, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) (async) getpeername$unix(r3, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1m30.992347918s ago: executing program 5 (id=169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) io_cancel(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07000000000000000000050000000c0003800400038004000100180001801400020073797a5f74756e000000000000000000050006000600000008000900010000000500070003"], 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x4, 0x6, 0xff, 0x280, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x8}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f00000000c0)="7902f877ded06105512f5625344f25d81d743ab71d29353c71a4704492d81a59083f30f26193b78f76bd7971961e2bd3bfc3ca589af19f967717d73348daf29807e9e8e88dc2"}, 0x20) 1m30.820456564s ago: executing program 5 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x87f37c796cbafd08, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth0\x00', 0xc00}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000098, 0x9}}], 0xfffffffffffffdd7}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000280)="c1188e19b95d02ff4284860186dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.422709031s ago: executing program 5 (id=172): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000300)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/47, 0x2f}], 0x1, 0x38, 0xfffffffe) openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x27) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r5) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1m30.398666993s ago: executing program 34 (id=100): mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x800) getpeername$unix(r3, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) (async) getpeername$unix(r3, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1m28.019238984s ago: executing program 5 (id=189): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r6 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e2060e400000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) chroot(0x0) pivot_root(0x0, &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m27.569748566s ago: executing program 5 (id=195): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x15e, 0x800) r1 = syz_usb_connect$cdc_ecm(0x6, 0x158, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x1, 0x1, 0x8, 0x80, 0x40, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "0be7eb0d"}, {0x5, 0x24, 0x0, 0xbc0}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x2, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x15, 0x1, 0x2}, @dmm={0x7, 0x24, 0x14, 0x3, 0x1010}, @mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x0, 0x8001}, @mbim_extended={0x8, 0x24, 0x1c, 0x1c0, 0x8, 0x5}, @mdlm_detail={0xd8, 0x24, 0x13, 0xc, "46bfffe04cc020b06f3d2551dc96e37eed38ced4464af3fa1aa818a32d15e6ca470644add0d07eeba4dac52af6a807f81c186aa765b4d12adffda0c9467543cd8ba384f613ff4461d4864af410e2e86c45a08585579a16d8fd26a6e42becd6775f17b4759e81dcc46ba3d4562816f3c45b8316243dad60dc41d4662c15f82e2a5114964d24f570dcb34cd4d0b5c6ba5cf9158457297151263d21fa1c1a4c16a15daccb3ef5d946ad048687833d9668948654f118e88b38a2033ce944898dd7e8bf4a971d0b6eef07c421a67d8b96c2875f9d3b9b"}, @network_terminal={0x7, 0x24, 0xa, 0x1e, 0x7f, 0x0, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x37, 0xf1, 0xfd}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x7, 0xcf}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0xa, 0x1, 0x7, 0xff, 0x98}, 0xc5, &(0x7f0000000600)={0x5, 0xf, 0xc5, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0xf4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x3, 0x4}, @generic={0x4c, 0x10, 0x4, "56f3b323b6812e3c5ca396536a49e36473d6300d574c8f0dc2a593d215f6cede3bb8925ee10d72287fd47a22dd386d2e22bb54217d6d0a3728097ddf1a8e4465f64646a4cf47999049"}, @ss_container_id={0x14, 0x10, 0x4, 0x66, "bf90406ace1e5f3b832234ad8c1916dc"}, @generic={0x4c, 0x10, 0x1, "8cf39e2f92e8cafe8bf24fabaa746bebb2d2540a98d7c22d5713cd8c3e2dd079c7ed1920ce3fb0ddcf8963007d5a5b6465dfd6c1ddb2faf71c4193c2d1e85008eceb9ef4e103b2c17f"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c01}}, {0x3b, &(0x7f0000000580)=@string={0x3b, 0x3, "6737e80140f27abd752ae5631c814676b67aadf6d3694237823ba40b423888e0d13d3d236c4e880b665f8b16b125075ba66e995ffaefe15eed"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f0000000800)={0x0, 0x8, 0x8a, {0x8a, 0x11, "dfe19aa952afaab8ebbeca41f03fb8d4ad482aeb6d2bcecc04e19dbd4bb784d240334918a4bafcd9d1f6117d37703266bb3e2eba8d7a6a85395d735b9dfd72eba4df00ae8f49f07cf157c099864b9c64e3a2b664f5745aebae1332f6493f9f48a1f39e2d65394b33186f4e3c225ae332ff6583d33e0af60ed5c106b7e4eab64c89c4ed8436dd20e5"}}, &(0x7f00000008c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "4ceb601a95f6d987221689410d9153fe57a7c6b5b0d7777c729fd3d2eb0dd251e35c10d6"}}, &(0x7f0000000900)={0x0, 0xf, 0x89, {0x5, 0xf, 0x89, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xbc, 0x7f, 0x9}, @generic={0x6c, 0x10, 0x3, "1dc598979841b9769cf51fc0aa071edbc75a8f2f7928b13dda5ea13d050eb1da45d106fb778d97edc20bfee5b8fc041ffe59afd5dc831f1425a49211165c1e0525aa0c46e06524e66f55720ccd5dc20605a9bd847e3a5051fea022835d538768c3a8332dbae5314184"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x81, 0x4, 0x79a, 0xff}, @ptm_cap={0x3}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x0, 0xe, "91cbaa2c", "7c459e61"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x85, 0x8, 0x8, 0x5, 0x37ec}}}, &(0x7f0000001540)={0x84, &(0x7f0000000ac0)={0x0, 0x2a, 0x54, "7c55eb4b70f9838ec3b3617678c8cd371b3bd8217b2e5b3c7ffa10fb78928eb4834c396edd70c996f3bdcfa85e41f0f98fccb9d846a0c7e0cef0ef42c37e77dfc47fee02fd78a22e26e9821bdaf54b93fdcc0af8"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000c00)={0x20, 0x0, 0x8, {0x1, 0x8, [0xf]}}, &(0x7f0000000c40)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000c80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, '$,'}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d40)={0x40, 0x13, 0x6, @remote}, &(0x7f00000013c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001400)={0x40, 0x19, 0x2, "9dea"}, &(0x7f0000001440)={0x40, 0x1a, 0x2, 0xf}, &(0x7f0000001480)={0x40, 0x1c, 0x1, 0x10}, &(0x7f00000014c0)={0x40, 0x1e, 0x1, 0x1c}, &(0x7f0000001500)={0x40, 0x21, 0x1, 0xe1}}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1m27.142945616s ago: executing program 5 (id=201): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000400)) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "24f424bd"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) 1m27.116244188s ago: executing program 35 (id=201): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000400)) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "24f424bd"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) 55.588534077s ago: executing program 8 (id=422): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80800) fchdir(r0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x1) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)=0x1) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x181300, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x80000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f00000001c0)="32f87935", &(0x7f0000000200)=""/161, &(0x7f00000002c0)="0889a6b209c541a915b6672f4a29335df9af97720d8e9a1fc95276a0edcda98f785d3694cfbe7552d0b3444990d86d5799e960729800c1ab16f922cf66f7ff0f77e02da90280597d54797ca7800a6a048e22e93a2a75f341", &(0x7f0000000340)="46cc839912eda9e6c598a2b92ab9e6bbf0eb6f0b5f5070dbb000639698f16582787d83aea27187cf5a7861542df08a858ea7", 0x18, r1}, 0x38) read(r0, &(0x7f00000003c0)=""/196, 0xc4) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000500)={r4, r5/1000+10000}, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) socket(0x2, 0x80000, 0x8) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000540)="56bab964779e5c6307e361baf91b481dc83d73b352ab737e8a90eb5428ebb58cbde9c8be26501f17fedcbf04f8ca7b9e155f0a3ae64068d3f1c295c1d9b750d7ae1dc6b3ff2d488f7953f0d4f5132c6bf103f00428996cef2a0f2a4e163c1c2d5177c87acbff0d091e698d86fd25699a8cce6d6e256ee13d5afa13080d2599e10fb8e50a280ab8f0f7ad2d41a73992aa38a41e192ab1a2de252680557cd0", &(0x7f0000000600)=@udp6=r6, 0x1}, 0x20) rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0/../file0\x00') ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000700)=0x0) prlimit64(r7, 0x7, 0x0, &(0x7f0000000740)) prlimit64(r7, 0x9, &(0x7f0000000780)={0xe3b1, 0x3}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000007c0)={@initdev, 0x0}, &(0x7f0000000800)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x17, 0x1, 0x8, 0x9, 0x10000, r1, 0x9, '\x00', r3, r1, 0x2, 0x0, 0x3, 0x0, @void, @value, @value=r1}, 0x50) setrlimit(0x2, &(0x7f00000008c0)={0x1, 0xffffffff}) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000000900)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x200, '\x00', r8, r1, 0x5, 0x2, 0x5}, 0x50) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000a00)=0x7f, 0x4) 55.577204048s ago: executing program 8 (id=423): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x100000000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r8}, 0x10) 45.080008493s ago: executing program 8 (id=480): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x4}, @ptr={0xf}, @struct={0x3, 0x2, 0x0, 0x4, 0x0, 0xffffff01, [{0x2, 0x0, 0x1}, {0xc, 0x4, 0x5}]}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000140)=""/223, 0x61, 0xdf, 0x1, 0x1ff, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x2, 0x4, 0x1001, 0xffffffffffffffff, 0x100, '\x00', r0, r1, 0x3, 0x4, 0x4, 0x4}, 0x50) sync() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r1, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/80, 0x50, 0x0, &(0x7f00000005c0)=""/131, 0x83}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x1, 0x4, 0x8, 0x3, 0xffffffffffffff88, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x76b, 0x0, 0x0, 0x40f00, 0x11, '\x00', r0, 0x5, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0x3, 0x7, 0xa}, 0x10, 0x2ea1f, 0xffffffffffffffff, 0x8, &(0x7f0000000840)=[r2, r2], &(0x7f0000000880)=[{0x5, 0x3, 0x3, 0x3}, {0x5, 0x3, 0x6, 0x5}, {0x5, 0x4, 0xf, 0x3}, {0x4, 0x5, 0x5, 0x9}, {0x0, 0x5, 0x4, 0x8}, {0x0, 0x1, 0x0, 0x3}, {0x5, 0x4, 0xe}, {0x0, 0x5, 0x4, 0xc}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r2, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x12, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffff00}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffc, 0x48, &(0x7f0000000400)=""/72, 0x40f00, 0x30, '\x00', r3, @fallback=0x31, r1, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x10, 0xfffffe01, 0x2000000}, 0x10, r4, r5, 0x6, &(0x7f0000000ac0)=[r2, r2, r2, r6, r7, r2], &(0x7f0000000b00)=[{0x1, 0x5, 0x0, 0x1}, {0x2, 0x2, 0xe, 0x7}, {0x2, 0x2, 0xc, 0xb}, {0x0, 0x2, 0x3, 0x8}, {0x3, 0x3, 0xf, 0x6}, {0x4, 0x4, 0xd, 0x7}], 0x10, 0xe91c}, 0x94) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000c40)=[@set_irq_handler={0xc8, 0x20, {0xc3, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control_nat=0x6006, 0x8, 0x4, 0x8}}], 0x58}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000d00)=0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d40)={'vlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x292, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0x3d1, 0x4c, &(0x7f0000000e80)=""/76, 0x40f00, 0x0, '\x00', r10, 0x1c, r1, 0x8, &(0x7f0000000f00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0x1, 0x8, 0x50}, 0x10, 0x36a9, r8, 0x3, &(0x7f0000000f80)=[r2, r6, r2, r2], &(0x7f0000000fc0)=[{0x2, 0x4, 0x5, 0x7}, {0x2, 0x2, 0xe, 0x4}, {0x2, 0x3, 0xb, 0x6}]}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x688}, [@alu={0x4, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000001100)='syzkaller\x00', 0x9, 0xe1, &(0x7f0000001140)=""/225, 0x41100, 0x60, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001240)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001280)=[r2], &(0x7f00000012c0)=[{0x0, 0x5, 0x5, 0x3}, {0x2, 0x3, 0x9, 0x9}, {0x3, 0x2, 0xa, 0x4}, {0x3, 0x1, 0xe, 0x5}, {0x4, 0x5, 0xd, 0x9}], 0x10, 0x4}, 0x94) r12 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$FIONCLEX(r12, 0x5450) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000014c0)={0x6, &(0x7f0000001480)=[{0x9, 0xae, 0xff}, {0x4, 0xa, 0x3, 0x4}, {0x400, 0x56, 0x10, 0x100}, {0x0, 0x2, 0x2, 0x5}, {0x2, 0x9, 0x2, 0x9ed}, {0x7, 0x6, 0x1, 0xb}]}) mkdir(&(0x7f0000001500)='./file0\x00', 0xd2) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r11, 0x10f, 0x84, &(0x7f0000001540), &(0x7f0000001580)=0x4) write$tun(r5, &(0x7f00000015c0)={@void, @void, @x25={0x0, 0xff, 0x1, "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"}}, 0x1003) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002600)=0x0) ptrace$cont(0x18, r13, 0x77b2, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680), &(0x7f00000026c0)={0x0, 0xfb, 0x76, 0x0, 0x7f, "02df05ff4b4a47b1f3a09426bc4ad0cc", "60711d0b38845106c7ccf98f52662fd093d51e22e852e612ccde6b933ce498f4a05676374d4c83c9a78f34e1bc6228d926403e7488d40e5aa6de008131419c0a7df3af9af63b91a3f464c45b2b9e6830ffc28177b1fb071af95c0a3470099b6242"}, 0x76, 0x3) pread64(r5, &(0x7f0000002740)=""/229, 0xe5, 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000002840)=@bloom_filter={0x1e, 0x8, 0x2c, 0x4, 0x8, r7, 0x5, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x5}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000002900)) 45.046420446s ago: executing program 8 (id=481): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152c, &(0x7f0000001f80)="$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") syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0x1901, 0x4) sendto$inet(r2, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x3, 0x0, 0x4, 0x0, r5, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@random={'security.', '\x00'}, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 44.880146471s ago: executing program 8 (id=482): syz_usb_connect(0xb000000, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904000000f575f600614d1960e6545db4719e381c96e9e19e6acec9b63b39e6b6b68667d5dae17284ea1c000afa0317d6b84fa2a259d61a4374e2ebaf23631a9e5f5ebad49b117f9fbe57688a3043c788a3aeb4b8c1dab9880ce7ee723cef20e910bef3b21c04d9899aea49df5495dab8117c5a0e36e4da835160e2aa72904d389cd77826e82f9212"], 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f", @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="3cfb94dae7af305b316fbe56420dcdc4635347d67597ea6df1721bd84232fd04f0b1dbe77c8b458d7fb451e8c7ebc5b2f9cdfd73887675e89f0119284d9f7000ddf308757ac0933af6f30dc0bcc4ea7a8dba7d8440a73e93e3cc7b8148103738c0767401e3cff654e772cd6ad7ce8884b3429c6eb0ac14c4e2d145dc43bf37cb79f0b88481b321f921f400a5f652763dbdbc4e4bacbf711443bd8da3af8b3cf74e3bf72224253fdfa0d39fa6d0d4c98c6137cc4c52a8"], 0x50) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) (async) dup(0xffffffffffffffff) r2 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='system_usb_device_]:s0 system_}:object_r:boot_t:s0 0000000000000'], 0x78) 44.664259951s ago: executing program 8 (id=484): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa}}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f2ffff01000000000000000018090000", @ANYRES8, @ANYRESDEC=r0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1b, '\x00', r4, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x18) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 44.485205368s ago: executing program 36 (id=484): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa}}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f2ffff01000000000000000018090000", @ANYRES8, @ANYRESDEC=r0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1b, '\x00', r4, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x18) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 14.96804145s ago: executing program 9 (id=683): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x20, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000080aaaaaaaaaa1a8864c0de1b7f1f19d15bee96c6e0ff0df60f86"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x8, 0x80000003, 0x25dfdbfb, {0xa, 0x0, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x24}}, 0x20000050) 14.940412522s ago: executing program 9 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000687b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 14.926015394s ago: executing program 9 (id=685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bea00000000000009500e60000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x11b, &(0x7f00000004c0)=""/236}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2600000004"], 0x26) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092403050001031f04092403"], 0x0) 13.302491994s ago: executing program 9 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) unshare(0x600) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x318, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "aca4c35c"}, @main=@item_012={0x1, 0x0, 0x8, "a8"}]}}, 0x0}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000bbfc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x40040) 10.060390726s ago: executing program 9 (id=727): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x808, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8200c2, 0x119) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = syz_open_dev$loop(0x0, 0x1, 0x210000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1, 0x2, 0x7, 0x1, 0x5, r1}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) unshare(0x20000400) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32=r6, @ANYBLOB="0800030019e500784b770008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) fcntl$setlease(r0, 0x400, 0x1) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 8.712812921s ago: executing program 7 (id=741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x100, 0x400000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000019300)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x5, 0x2, {{0x16, 0x4, 0x2, 0x7, 0x58, 0x65, 0x0, 0xb, 0x4, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x7, 0x4, [@remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x78, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x1e, 0x3, 0x9, [{@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x13b}, {@rand_addr=0x64010101, 0x40}, {@broadcast, 0x7}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x5, 0x80000, 0x24000000, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r6, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1204, r6, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xec, 0x45, "6dfe0457538d23e7dba3d03ee0d0b6b574b4870bcedda0015f65f7fbba66bfdb51312417923dd986e3ac0e5a2911559264e697eb9a2f27ea3b24a3b3fc4b31ac3fed67d58257ff5e5e73f222d8f5a85e14f1ad0dc1eca6aa5847cad5e2e7a0a55eee5418eed958dcbedc546ea57a0b490c5cc02b859cc8775c51b2970aa3c5fd4a4fb6d3a1088d25ccec7ffbc9efce23b917e48e510fc550220447c286c109e7b50d8ac4925751b1e13b42f0b642cf7829aa265e736ac55c63e93fd3eaacadec37102166280a9de3bea490487eeb6361b620d69c45ab2988135585dc5d04d26f228a720e9340bdbc"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x5a, 0x45, "cf89e966d50aa439aa9de7f87bbde6562783d1e93869d18d3a7b782c18cb35d57ec36872d01661bb7b7c9e579aaace41cd0bc99a19214672bb3ca067017af44db09905cf33ff185e4d0f6b5ee7081b59197aba290a70"}, @NL80211_ATTR_TESTDATA={0x75, 0x45, "8b5e861310a7e6c8e571dcf51c6196687b15a75e244e56dc98b8dc8b4fe1a743488693219c825b848e8db6ab396a9cb76fa634bab993f252161f9c497211b6ef1adce27a433a547fc3c361dd902d18bd36127fd04d218dbfad5bbcfa8c80ab30547bf0145393c9f9de6327b1485ce1eefc"}, @NL80211_ATTR_TESTDATA={0x29, 0x45, "16bb9c1a19d50b283b7520b43ecd9a79b2b50b023a71a9e926939d4a6a75c9cab3f4b01d0f"}]}, 0x1204}}, 0x80) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000019440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000019400)={&(0x7f0000019380)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x0, 0x7, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x65, 0x0, 0x7, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0x4, [{@loopback, 0x3}, {@local, 0x7fffffff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x33, 0x0, 0xf, [0x1, 0x0]}, @end, @rr={0x7, 0x13, 0x94, [@dev={0xac, 0x14, 0x14, 0x21}, @empty, @private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x4, 0xec, 0x3, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\v\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000fbdbdf25020000001c0006800500020004000000060005004e23000008000700", @ANYRES32=r7, @ANYBLOB="0800040001f8ffff"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0xffffffffffffffe4, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00008f0a4f96caab06cae61807090000000000800007000000dc2a", @ANYRES16=r1, @ANYBLOB="010000000000000000000300000028000180130001006574683a73797a6b616c6c65723000000d0001007564703a73797a3200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4009015}, 0x40084) 8.308558428s ago: executing program 7 (id=743): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x100}}, 0x50) setreuid(0xee01, 0xffffffffffffffff) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0xffffffffffff8000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a0000000f000061119c0000000000180000000000000000001000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 7.412421742s ago: executing program 9 (id=757): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000900000800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="05072abd7000fddbdf25130000000400018004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x108, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x81}]}, 0x108}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="ddcb5543c29096e5e9895c775d7623de13bffd8e6ba7329787ec5fe36a9ebc49bdb9bf200847a5d191e211dda8e6378d41d96b61286f47bdcb271b29b87670ca544ab60b46820da31d3157dff73881417ef0aa60b3e93615e76a4a0579716860ab08368d272f606ae57a5051e9e1f41db6977a65894136b5ff4ffbf4564338048b91e6e8dd4f8f3c14aee7", @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) 7.064251774s ago: executing program 1 (id=758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r5, &(0x7f0000000100)={@void, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x86dd, 0x6, 0x0, 0x4}}, {@mpls_uc}}}, 0x16) r9 = socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 6.754158553s ago: executing program 1 (id=760): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000180)=[{&(0x7f0000000540)=""/71, 0x47}], 0x1}, 0x6}, {{&(0x7f00000005c0)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000640)=""/243, 0xf3}], 0x1, &(0x7f00000009c0)=""/248, 0xf8}, 0x3}], 0x2, 0x40010002, &(0x7f00000007c0)={r1, r2+60000000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9073, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000005f123f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x66000080) socket(0x2b, 0x3, 0x0) 5.787170292s ago: executing program 1 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000454f555687e125550000000000000000000000000000ff7417fb8de85b3e73fb657718a654e8b4c5461410f0a973"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000e0dfa852ce700de2c911a4c51153ec10aab813fd1faa7300c131c34d1510dc5638693a154ad6f5fcec43", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.433256075s ago: executing program 7 (id=766): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/102) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 5.230722724s ago: executing program 7 (id=767): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x808, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8200c2, 0x119) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = syz_open_dev$loop(0x0, 0x1, 0x210000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1, 0x2, 0x7, 0x1, 0x5, r1}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) unshare(0x20000400) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32=r6, @ANYBLOB="0800030019e500784b770008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) fcntl$setlease(r0, 0x400, 0x1) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 4.968419209s ago: executing program 1 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x100, 0x7, 0x7, 0x2}, {0x7ff, 0x4, 0x1, 0x7}, {0x70, 0x2, 0xd0, 0x3}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00'}, 0x59) setresuid(0xee01, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1d, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xad95, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) 4.054855613s ago: executing program 1 (id=771): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @multicast1}, 0x2, 0x2, 0x2}}, 0x26) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10000, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010112}}, 0x80) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e0004e00000000000000004ca81e1f2c55000100957827022601"], 0x14) 3.55894125s ago: executing program 3 (id=773): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create(0x5) (async) r2 = epoll_create(0x5) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x42) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x0, 0x81, 0x58, @empty, @private0, 0x8, 0x20, 0x9, 0x20000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r4, 0x29, 0xa0, 0x2e, 0x6, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x10, 0x75c7, 0x800}}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_kvm_add_vcpu$x86(0x0, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f0000000080)="3835bef30206ddeaab5f03c260f55d496edc27dc925127af", 0x0, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r9, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r9, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) umount2(0x0, 0x3) 3.452351389s ago: executing program 3 (id=774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r2, 0x200002) r3 = socket(0xd, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="090000003b9c0000e27f0000010000000000560bd804e10000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(0xffffffffffffffff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x306) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08060001080006040b03ffffffffffffffffffffaaaaaaaaaa3f6552ecd4c83ba7570f5ca322cfcffb5b219761e07c2c9565344964c9b932d8dce656c07702757273c5796ba3660349c9d08eb025a76db410cf6757f71015d75e51ed1836854749c9af4430f313b279c14ec56c9bec4a03671920f81ac419e27b78c3"], 0x2a) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) 3.246575469s ago: executing program 1 (id=775): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='hugepage_update\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3ffffd, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004503005c00000000002f907800000000ffffffff0000883e00489078030000000300000090c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae10100da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"], 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xeffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) close(0x3) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000002380)=ANY=[@ANYRES32=r8], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee04f5000063a3f7fbff070000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x0) 3.034043658s ago: executing program 3 (id=776): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@discard}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbbe, &(0x7f00000004c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0xf11, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x104, 0x22010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x9000}}}}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001080)={0x0, 0x0}) sched_setscheduler(r7, 0x1, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xfff) socket$xdp(0x2c, 0x3, 0x0) 2.647863874s ago: executing program 4 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001e00000700000000000000000000e2ffffff9457904a000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) (async, rerun: 64) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8080, 0x0) (rerun: 64) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0xe) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x80c2, 0xc) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x8}) (async) shutdown(r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1b, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0xffffffffffffffc9, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040044) (async) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff1}, {0x3}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48098}, 0x240001a0) 2.039363131s ago: executing program 3 (id=779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xd8, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x80a}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x0, 0x7f, 0x2, 0x72]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x92, 0xbe, "c2fc33044deae56f5dc63226d959337cdb934a5da4c70f7aa22263554eefca0d14aea410635b8e6034c0e87511b970bc7e233dcc7e3c4fb78bca7dec97c477ab4189df7e70b34297a820edb7d124e82b510662e7ed43839ba790cb71a10442b78b8ecc01fefac30c3357a25f0fcd1caf3157702bbf0fb512f291106fbab57b75f41c166ff548319b255d335b9bad"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 1.704450551s ago: executing program 4 (id=780): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) 1.703992051s ago: executing program 4 (id=781): r0 = gettid() syz_pidfd_open(r0, 0x0) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x3) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") (async) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) (async) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@nobh}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noinit_itable}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x578, &(0x7f0000001240)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x1a8) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) close_range(r2, r2, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r4, 0x20, 0x0, 0x8000) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000300)={0xd8, 0x3}) (async) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r9, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="002000000000000028001280090001007665746800000000180002b66f61512d12bf1a506240100763c94f8a23da44c09b16df2a03a4fec02f39d8a61900000009000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1.703740202s ago: executing program 4 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x2003}, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{0x61b, 0x0, 0x40000000000000}, {0x2c0, 0x0, 0x9}, {0x870, 0x0, 0x3}]}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000e00)={0x1, 0xa4}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000e80)={[{@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x3, 0x45c, &(0x7f0000000580)="$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") 1.152348723s ago: executing program 3 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f0000000300), &(0x7f00000003c0)=0x6e) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x0, 0x0) close(r3) (async) close(r3) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x1010, r2, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xec}}, 0x40020) tee(0xffffffffffffffff, r6, 0x8, 0xe) (async) tee(0xffffffffffffffff, r6, 0x8, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 890.750497ms ago: executing program 4 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() setrlimit(0x4, &(0x7f0000000000)={0x3b, 0xffffffff}) sched_setscheduler(r3, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000000000008500000000000000010000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 516.029942ms ago: executing program 7 (id=785): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8852, &(0x7f0000000000)={[{@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$eJzs3E9sVEUcAODf27a05Y+siCiIWkRjI7GFgsLBxGA08aCJERP12LSFIIUaWhIhaJbE4NGQeDcevXrwql6I8WTiFY8mhoQYLoCJcc3bfW93u91tadl2wX5fst2ZefvezOy8eTtvprsBrFtD6Z+kGr4WEVsjotD8gqHq0+2bFyfu3Lw4EaVy+dhfSWW3W2k8kx0mNmWR4UJE4fOkvqHB7PkLp8anp6fOZvHRudMfj86ev/DiyYEs5ciRQwcPHH557KXlV6pFfmm9bu36bGb3zjc/vPL2RG+enufWWI9OGYqhVkWpeK7TmXXZloZw0tvFgrAs6fmfNldfpf9vjZ5YrPFKa1gyYLWVy+Vyf/vNpXKzSwtSgAdWEt0uAdAd+Qd9ev+bP1oNBDaszvCj624crd4ApfW+nT0inq4k5vMgfU33t500FBEflP7+On3EKs1DAAA0+vFoPhJsGv8Vqysj/5y7+mr6/FC2hlKMiIcjYltEPBIR2yPi0YjYERGPRcTjTcfviYjyIvk3zzbX8q8tQhWud6iqLaXjv1eyta36+G9eAYo9WWxLRD5gntqfvSfD0dd//OT01IFF8vjp9d++bLetcfyXPtL887FgVo7rvU0TdJPjc+MrrnCTG5cidvU21z/pjUhqbZNExM6I2LWM4xYbwidf+HZ3LdI3/3VL17+i3HIdrQPrTOVvIp6vtn8p5rV/Pcdk3vrk6fETUyemzozV1idHB2J6av9oehbsb5nHL79efqdd/kvW//s/mnd54/APx7Kede/S9t/YcP5Hvn5br38xiUhq67Wzy8/j8u9ftL2nWen5vyF5rxLO70s/GZ+bO3sgYkPy1sL0sfq+eTx9jlK1/sN7W/f/bdk+6TvxRESkJ/GTEfFUVO8Q07LviYhnImLvIvX/+bVnP1p5/VdXWv/JputfteXntX99vb5dIMnWBqspg42bek7tuXanzcXj7tr/UCU0nKUsvP6lJUzmXSLalTT/tEtT/u3IOwgAAAD3v0JEbG6YS9ochcLISHUOaHtsLEzPzM7tOz5z7sxkui2iGH2FfKarOh/cl+Tzn8WG+FhT/GA2b/xVz2AlPjIxMz3Z1ZoDmyp9PimMRLzf09D/U392ZooZuJ/5vhasX4v1/3QQv+PKGhYGWFN3//l/9dNVLQiw5hr6f7tv+JdW8H9fwAPA/T9Qt/QP/bhmwIOvrC/Duras/r/PjwDC/0lvvFsLF7paEmCtGf/DurTk9/rvKVDub71pIBa+OAYWP2BPrKwYgy3y6kogHVl1JffBleyV/5pC29dEYXkH7I/OtOnxe3w3SmdnT+zo+Mlfzv5XvtMt+N2a9NNWga5cjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADruvwAAAP//hS/gCQ==") socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000140)='./file1\x00', 0x92) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[], 0x1, 0x5505, &(0x7f0000000340)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000006, 0x11, 0xffffffffffffffff, 0x3000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) fchown(0xffffffffffffffff, 0xee01, 0x0) r9 = dup(r7) getsockname$packet(r9, 0x0, &(0x7f0000000140)) 7.027489ms ago: executing program 7 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}, 0xec, 0x49f, &(0x7f0000000840)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.76738ms ago: executing program 3 (id=787): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1, 0x0, 0x9}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 0s ago: executing program 4 (id=788): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = getpgrp(0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"], 0x50) kcmp(r2, r3, 0x0, r1, r1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bfd000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000001c0)={0x3, 0x0, [{0x2, 0x7fff, 0x0, 0xc46, 0x0, 0x4, 0x7ff}, {0x7, 0x1, 0x6, 0x9, 0x54e0d503, 0x7ff, 0x6}, {0x80000008, 0x73c, 0x0, 0xabc, 0x3ff, 0x8, 0x7}]}) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', r5, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r14}, 0x10) kernel console output (not intermixed with test programs): '. [ 69.907613][ T1075] usb 4-1: device not accepting address 13, error -71 [ 69.925465][ T30] audit: type=1326 audit(2000000019.830:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 69.984389][ T1465] UDC core: couldn't find an available UDC or it's busy: -16 [ 69.991929][ T30] audit: type=1326 audit(2000000019.860:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.021551][ T1465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.030299][ T30] audit: type=1326 audit(2000000019.860:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.053705][ T30] audit: type=1326 audit(2000000019.860:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.077100][ T30] audit: type=1326 audit(2000000019.860:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.100495][ T299] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 70.108895][ T30] audit: type=1326 audit(2000000019.860:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.132609][ T30] audit: type=1326 audit(2000000019.860:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.156143][ T30] audit: type=1326 audit(2000000019.860:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.179869][ T30] audit: type=1326 audit(2000000019.860:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1461 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 70.282648][ T1472] binder: 1471:1472 ioctl c0306201 200000000080 returned -14 [ 70.290298][ T368] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 70.441047][ T1472] binder: 1471:1472 ioctl 4c03 2000000004c0 returned -22 [ 70.469349][ T1472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 70.589853][ T1477] loop3: detected capacity change from 0 to 512 [ 70.618062][ T1477] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 70.627785][ T1477] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 70.638309][ T1477] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 70.648163][ T1477] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.278: corrupted in-inode xattr [ 70.660289][ T1477] EXT4-fs (loop3): Remounting filesystem read-only [ 70.666883][ T1477] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.278: couldn't read orphan inode 15 (err -117) [ 70.679157][ T1477] EXT4-fs (loop3): Remounting filesystem read-only [ 70.685691][ T1477] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000000,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,nodiscard,. Quota mode: writeback. [ 70.709279][ T1477] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop3, type ext3) errno=-22 [ 70.767635][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.778586][ T299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.867591][ T299] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.876794][ T299] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 70.884868][ T368] usb 2-1: device descriptor read/64, error -71 [ 70.891263][ T299] usb 8-1: Manufacturer: syz [ 70.899731][ T299] usb 8-1: config 0 descriptor?? [ 71.058673][ T1485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1545 sclass=netlink_audit_socket pid=1485 comm=syz.3.280 [ 71.246752][ T1505] loop8: detected capacity change from 0 to 16 [ 71.257738][ T299] usbhid 8-1:0.0: can't add hid device: -71 [ 71.263746][ T299] usbhid: probe of 8-1:0.0 failed with error -71 [ 71.269060][ T1505] erofs: (device loop8): mounted with root inode @ nid 36. [ 71.277540][ T368] usb 2-1: device descriptor read/64, error -71 [ 71.284232][ T1505] x_tables: duplicate underflow at hook 1 [ 71.308507][ T299] usb 8-1: USB disconnect, device number 5 [ 71.484040][ T1512] loop7: detected capacity change from 0 to 128 [ 71.527941][ T1512] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.540133][ T1512] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.609858][ T1487] loop4: detected capacity change from 0 to 131072 [ 71.617569][ T368] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 71.654043][ T1487] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.689613][ T1487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 71.858327][ T1518] tipc: Started in network mode [ 71.863364][ T1518] tipc: Node identity ac14140f, cluster identity 4711 [ 71.870471][ T1518] tipc: New replicast peer: 255.255.255.83 [ 71.876459][ T1518] tipc: Enabled bearer , priority 10 [ 71.897525][ T368] usb 2-1: device descriptor read/64, error -71 [ 71.981311][ T1527] loop4: detected capacity change from 0 to 1024 [ 72.028346][ T1532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 72.053637][ T1527] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.064485][ T1527] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.086951][ T1527] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 72.104830][ T1527] incfs: Can't find or create .index dir in ./file0 [ 72.111580][ T1527] incfs: mount failed -28 [ 72.189172][ T422] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.270036][ T1527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 72.404770][ T368] usb 2-1: device descriptor read/64, error -71 [ 72.527606][ T368] usb usb2-port1: attempt power cycle [ 72.576564][ T1555] loop7: detected capacity change from 0 to 40427 [ 72.632299][ T1555] F2FS-fs (loop7): invalid crc value [ 72.638657][ T1555] F2FS-fs (loop7): Found nat_bits in checkpoint [ 72.669366][ T1555] F2FS-fs (loop7): Start checkpoint disabled! [ 72.676034][ T1555] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 72.839885][ T1559] 9pnet: Could not find request transport: Ø& 0x000000000000000b [ 72.897436][ T1561] binder: 1560:1561 ioctl c0306201 0 returned -14 [ 72.937593][ T368] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 72.969581][ T1564] loop8: detected capacity change from 0 to 16 [ 72.997563][ T1075] tipc: Node number set to 2886997007 [ 73.007823][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 73.047568][ T368] usb 2-1: device descriptor read/8, error -71 [ 73.094464][ T1564] erofs: (device loop8): mounted with root inode @ nid 36. [ 73.126373][ T1564] erofs: (device loop8): z_erofs_readpage: failed to read, err [-95] [ 73.487587][ T368] usb 2-1: device descriptor read/8, error -71 [ 73.500438][ T336] handle_bad_sector: 3 callbacks suppressed [ 73.500452][ T336] attempt to access beyond end of device [ 73.500452][ T336] loop7: rw=2049, want=45104, limit=40427 [ 73.520610][ T1579] Zero length message leads to an empty skb [ 73.630359][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 73.630372][ T30] audit: type=1400 audit(2000000023.540:774): avc: denied { create } for pid=1592 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.656670][ T415] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 73.785013][ T30] audit: type=1400 audit(2000000023.580:775): avc: denied { create } for pid=1592 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 74.620639][ T1604] xt_CT: No such helper "syz0" [ 74.823982][ T1615] loop4: detected capacity change from 0 to 1024 [ 74.833377][ T1615] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.849098][ T1615] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,grpjquota=,grpquota,auto_da_alloc=0x0000000000000006,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 74.885911][ T1615] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.315: Allocating blocks 497-513 which overlap fs metadata [ 74.899925][ T1615] EXT4-fs (loop4): Remounting filesystem read-only [ 74.906515][ T1615] EXT4-fs (loop4): pa ffff888111dea1f8: logic 128, phys. 385, len 8 [ 74.914532][ T1615] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 74.924607][ T415] usb 9-1: not running at top speed; connect to a high speed hub [ 74.925024][ T1615] EXT4-fs (loop4): Remounting filesystem read-only [ 74.941466][ T30] audit: type=1400 audit(2000000024.850:776): avc: denied { append } for pid=1614 comm="syz.4.315" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.967542][ T368] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 74.977647][ T291] EXT4-fs error (device loop4): mb_free_blocks:1860: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 74.992551][ T291] EXT4-fs (loop4): Remounting filesystem read-only [ 74.999502][ T30] audit: type=1400 audit(2000000024.910:777): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.037621][ T415] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 75.048462][ T415] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 75.094085][ T30] audit: type=1400 audit(2000000025.000:778): avc: denied { setopt } for pid=1620 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.113520][ T30] audit: type=1400 audit(2000000025.020:779): avc: denied { ioctl } for pid=1620 comm="syz.4.316" path="socket:[21597]" dev="sockfs" ino=21597 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.153254][ T30] audit: type=1400 audit(2000000025.060:780): avc: denied { bind } for pid=1630 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.176059][ T1631] loop4: detected capacity change from 0 to 1024 [ 75.223140][ T1631] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 75.230667][ T1631] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.243160][ T1631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 75.251367][ T1631] System zones: [ 75.251364][ T415] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.251375][ T1631] 0-1 [ 75.251390][ T415] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.255057][ T1631] , 3-36 [ 75.264616][ T415] usb 9-1: Product: syz [ 75.266960][ T1631] [ 75.275002][ T415] usb 9-1: Manufacturer: 뤥éŽç´»á¡¾Ê’圥範⥨▭扇êµå–½í›¢ç·¸ç…žã˜µâ—¶Æ˜ã éššê¼¼è¬êˆºë® åŸ­æ»•裦ꠎä•鲊朽ପ戯즸á™î™žî°›ä¡˜é²”檊惱ë¨í”¡ã«†ê“Šæ³æ††ç‡¶îޒ峝é¸é§¯æ€á¥¶å¾œå†¢êµ˜æ­„ݘ힘聆æœê“옘앋쩬䣓纋㥠짩뢯Ƃ鲔᱾랅娣⶧아Ὠï»è„·æ’™ä”µâ“¥ä £é±¿è‡µìƒ±â–¼îº‚䂄䀀ᜱî©í„œâ‘‘䩤é¤ã±¸â¹å¥¡ë¬—ಣæ±å–’è› [ 75.282567][ T1631] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 75.285701][ T415] usb 9-1: SerialNumber: syz [ 75.317709][ T368] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.427594][ T368] usb 2-1: config 1 interface 0 altsetting 44 endpoint 0x82 is Bulk; changing to Interrupt [ 75.437720][ T368] usb 2-1: config 1 interface 0 altsetting 44 endpoint 0x3 is Bulk; changing to Interrupt [ 75.451244][ T368] usb 2-1: config 1 interface 0 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.464824][ T368] usb 2-1: config 1 interface 0 has no altsetting 0 [ 75.867545][ T299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.877674][ T368] usb 2-1: string descriptor 0 read error: -22 [ 75.883930][ T368] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.893162][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.917629][ T1606] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 75.924632][ T1606] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 75.937851][ T368] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 76.107530][ T299] usb 5-1: Using ep0 maxpacket: 16 [ 76.227582][ T299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 76.397584][ T299] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 76.413706][ T299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.422747][ T299] usb 5-1: Product: syz [ 76.426916][ T299] usb 5-1: Manufacturer: syz [ 76.431886][ T299] usb 5-1: SerialNumber: syz [ 76.439772][ T299] usb 5-1: config 0 descriptor?? [ 76.478228][ T299] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 76.486067][ T299] usb 5-1: Detected FT232RL [ 76.513785][ T1663] loop7: detected capacity change from 0 to 40427 [ 76.560199][ T1663] F2FS-fs (loop7): Unrecognized mount option "fault_injection=0000000Y0Ä=›£" or missing value [ 76.607894][ T30] audit: type=1400 audit(2000000026.520:781): avc: denied { setattr } for pid=1664 comm="syz.7.328" name="#f" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.644177][ T1075] usb 2-1: USB disconnect, device number 8 [ 76.682493][ T1670] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.690957][ T1670] incfs_lookup_dentry err:-13 [ 76.695668][ T1670] incfs: Can't find or create .index dir in ./file0 [ 76.702395][ T299] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 76.702623][ T1670] incfs: mount failed -13 [ 76.772625][ T368] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 76.781253][ T368] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.897001][ T1686] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 76.917226][ T1684] fido_id[1684]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.957617][ T299] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 76.968470][ T299] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.027614][ T299] usb 5-1: USB disconnect, device number 7 [ 77.070456][ T299] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.104677][ T299] ftdi_sio 5-1:0.0: device disconnected [ 77.227755][ T415] cdc_ncm 9-1:1.0: bind() failure [ 77.233803][ T415] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 77.257542][ T415] cdc_ncm 9-1:1.1: bind() failure [ 77.307600][ T415] usb 9-1: USB disconnect, device number 3 [ 77.413825][ T1689] loop8: detected capacity change from 0 to 40427 [ 77.439639][ T1689] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 77.449966][ T1689] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 77.502375][ T1689] F2FS-fs (loop8): invalid crc value [ 77.582755][ T1689] F2FS-fs (loop8): Found nat_bits in checkpoint [ 77.686879][ T30] audit: type=1400 audit(2000000027.590:782): avc: denied { create } for pid=1712 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.724328][ T1689] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 77.735490][ T30] audit: type=1400 audit(2000000027.640:783): avc: denied { connect } for pid=1707 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.756681][ T1689] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 77.818819][ T39] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.197568][ T39] usb 8-1: unable to get BOS descriptor or descriptor too short [ 78.208984][ T39] usb 8-1: no configurations [ 78.223236][ T39] usb 8-1: can't read configurations, error -22 [ 78.260772][ T1744] loop8: detected capacity change from 0 to 40427 [ 78.279628][ T1744] F2FS-fs (loop8): invalid crc value [ 78.286729][ T1744] F2FS-fs (loop8): Found nat_bits in checkpoint [ 78.328928][ T1744] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 78.344959][ T1744] attempt to access beyond end of device [ 78.344959][ T1744] loop8: rw=2049, want=77960, limit=40427 [ 78.380672][ T1189] attempt to access beyond end of device [ 78.380672][ T1189] loop8: rw=2049, want=45104, limit=40427 [ 78.621659][ T1758] kvm [1757]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 78.630665][ T1758] kvm [1757]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 78.656264][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 78.656275][ T30] audit: type=1400 audit(2000000028.560:830): avc: denied { write } for pid=1760 comm="syz.8.350" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.731081][ T30] audit: type=1400 audit(2000000028.610:831): avc: denied { create } for pid=1757 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.766229][ T30] audit: type=1400 audit(2000000028.610:832): avc: denied { create } for pid=1764 comm="syz.7.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.794482][ T30] audit: type=1400 audit(2000000028.620:833): avc: denied { mount } for pid=1760 comm="syz.8.350" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 78.824619][ T30] audit: type=1400 audit(2000000028.640:834): avc: denied { relabelfrom } for pid=1757 comm="syz.4.353" name="" dev="pipefs" ino=21437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.857867][ T30] audit: type=1400 audit(2000000028.640:835): avc: denied { module_request } for pid=1757 comm="syz.4.353" kmod="net-pf-16-proto-16-family-fou" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.882813][ T30] audit: type=1400 audit(2000000028.700:836): avc: denied { ioctl } for pid=1773 comm="syz.7.356" path="socket:[21445]" dev="sockfs" ino=21445 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.908879][ T30] audit: type=1400 audit(2000000028.700:837): avc: denied { read write } for pid=1773 comm="syz.7.356" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.940669][ T30] audit: type=1400 audit(2000000028.700:838): avc: denied { open } for pid=1773 comm="syz.7.356" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.970136][ T30] audit: type=1400 audit(2000000028.700:839): avc: denied { ioctl } for pid=1773 comm="syz.7.356" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.995509][ T1785] loop7: detected capacity change from 0 to 512 [ 79.101530][ T1785] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.115984][ T1785] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.297538][ T299] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 79.507126][ T1806] kthread_run failed with err -4 [ 79.537532][ T299] usb 9-1: Using ep0 maxpacket: 16 [ 79.711550][ T299] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.726281][ T299] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.746370][ T299] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.770065][ T299] usb 9-1: config 1 interface 0 has no altsetting 0 [ 79.838200][ T1818] fuse: Bad value for 'fd' [ 79.848669][ T1818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 79.947751][ T299] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.967561][ T299] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.118962][ T299] usb 9-1: Product: syz [ 80.124189][ T299] usb 9-1: Manufacturer: syz [ 80.148392][ T299] usb 9-1: SerialNumber: syz [ 80.152527][ T1830] syz.1.372[1830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.159496][ T1830] syz.1.372[1830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.588385][ T299] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 80.784293][ T1842] loop7: detected capacity change from 0 to 1024 [ 80.818384][ T1842] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.841036][ T1842] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,nouid32,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro,. Quota mode: writeback. [ 80.961062][ T1850] loop7: detected capacity change from 0 to 2048 [ 80.979291][ T1853] loop4: detected capacity change from 0 to 4096 [ 81.015262][ T1853] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 81.042191][ T1853] EXT4-fs (loop4): Test dummy encryption mode enabled [ 81.051008][ T1853] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 81.062743][ T1859] loop7: detected capacity change from 0 to 256 [ 81.093001][ T1853] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 81.107710][ T1859] exfat: Bad value for 'uid' [ 81.213416][ T1866] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 81.626401][ T1870] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 81.635996][ T1870] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 85.308081][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 85.308148][ T30] audit: type=1400 audit(2000000035.160:939): avc: denied { create } for pid=1852 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.463399][ T299] usb 9-1: USB disconnect, device number 4 [ 85.477277][ T299] usblp0: removed [ 85.482365][ T1866] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 85.495313][ T30] audit: type=1400 audit(2000000035.160:940): avc: denied { write } for pid=1852 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.534199][ T30] audit: type=1400 audit(2000000035.210:941): avc: denied { connect } for pid=1873 comm="syz.8.381" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.555635][ T30] audit: type=1400 audit(2000000035.210:942): avc: denied { setopt } for pid=1873 comm="syz.8.381" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.577706][ T30] audit: type=1400 audit(2000000035.360:943): avc: denied { watch } for pid=1877 comm="syz.7.382" path="/34" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.577928][ T1884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 85.608331][ T30] audit: type=1400 audit(2000000035.470:944): avc: denied { read } for pid=1889 comm="syz.8.386" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.632930][ T30] audit: type=1400 audit(2000000035.470:945): avc: denied { open } for pid=1889 comm="syz.8.386" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.676694][ T1895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 85.686330][ T30] audit: type=1400 audit(2000000035.470:946): avc: denied { mounton } for pid=1889 comm="syz.8.386" path="/22/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.713073][ T1895] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 85.751145][ T30] audit: type=1400 audit(2000000035.640:947): avc: denied { create } for pid=1892 comm="syz.4.383" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.777555][ T30] audit: type=1400 audit(2000000035.640:948): avc: denied { mounton } for pid=1892 comm="syz.4.383" path="/87/file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.782501][ T1900] IPv6: sit1: Disabled Multicast RS [ 85.869353][ T1906] netlink: 84 bytes leftover after parsing attributes in process `syz.7.390'. [ 85.881814][ T1906] loop7: detected capacity change from 0 to 256 [ 86.070767][ T1913] loop7: detected capacity change from 0 to 256 [ 86.277707][ T1918] syz.7.394[1918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.277774][ T1918] syz.7.394[1918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.292837][ T1918] loop7: detected capacity change from 0 to 256 [ 86.321168][ T1918] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 87.107615][ T384] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 87.344973][ T1949] loop7: detected capacity change from 0 to 512 [ 87.488007][ T384] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.627845][ T384] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.645324][ T384] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.658463][ T384] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.670168][ T384] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.689716][ T384] usb 9-1: config 0 descriptor?? [ 87.693901][ T1949] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,usrquota,,errors=continue. Quota mode: writeback. [ 87.707759][ T1949] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.317589][ T39] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 88.455914][ T384] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 88.486950][ T384] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 88.511021][ T384] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 88.520606][ T384] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 88.577767][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 88.608842][ T384] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 88.655852][ T384] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 88.675776][ T384] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 88.684750][ T384] plantronics 0003:047F:FFFF.000A: unbalanced collection at end of report description [ 88.694714][ T384] plantronics 0003:047F:FFFF.000A: parse failed [ 88.701156][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.712272][ T384] plantronics: probe of 0003:047F:FFFF.000A failed with error -22 [ 88.721409][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.732883][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.745890][ T39] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.755106][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.764954][ T39] usb 8-1: config 0 descriptor?? [ 88.819183][ T1985] loop4: detected capacity change from 0 to 256 [ 88.871341][ T1985] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.885192][ T1985] FAT-fs (loop4): unable to read boot sector [ 89.007605][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 89.337608][ T384] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 89.349611][ T39] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 89.365086][ T39] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 89.378406][ T39] microsoft 0003:045E:07DA.000B: no inputs found [ 89.385382][ T39] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 89.676866][ T60] usb 9-1: USB disconnect, device number 5 [ 89.717591][ T384] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.727607][ T384] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 89.738731][ T384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.745513][ T384] usb 5-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.00 [ 89.755285][ T384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.767052][ T384] usb 5-1: config 0 descriptor?? [ 89.787763][ T1989] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.804513][ T2010] netlink: 'syz.8.418': attribute type 4 has an invalid length. [ 90.019885][ T1989] UDC core: couldn't find an available UDC or it's busy: -16 [ 90.027346][ T1989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.065986][ T2024] overlayfs: suspected uncovered redirected dir found (origin=105/file0, index=index/00fb210001435efa63379b456c9d78fd46f6a772a83c4e981c6502000000000000). [ 90.095270][ T2027] netlink: 'syz.1.424': attribute type 27 has an invalid length. [ 90.111269][ T2027] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.118488][ T2027] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.230734][ T336] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.244096][ T2027] device ip6gre1 left promiscuous mode [ 90.249951][ T1989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=1989 comm=syz.4.412 [ 91.408609][ T2035] device veth0_vlan left promiscuous mode [ 91.414907][ T2035] device veth0_vlan entered promiscuous mode [ 91.422787][ T2035] device veth1_macvtap left promiscuous mode [ 91.429923][ T2035] device veth1_macvtap entered promiscuous mode [ 91.518662][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.529716][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.547343][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 91.547607][ T30] audit: type=1326 audit(2000000041.450:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.7.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1f6ca749 code=0x7fc00000 [ 91.586552][ T384] apple 0003:05AC:0215.000C: hidraw1: USB HID v0.00 Device [HID 05ac:0215] on usb-dummy_hcd.4-1/input0 [ 91.625006][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.676726][ T20] usb 8-1: USB disconnect, device number 8 [ 91.740176][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.747267][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.833485][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.848649][ T2046] loop7: detected capacity change from 0 to 128 [ 91.849756][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.884566][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.891733][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.022910][ T384] usb 5-1: USB disconnect, device number 8 [ 92.211504][ T30] audit: type=1400 audit(2000000042.120:977): avc: granted { setsecparam } for pid=2048 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 92.342593][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.370303][ T390] Bluetooth: hci0: command 0x1003 tx timeout [ 92.380949][ T2043] attempt to access beyond end of device [ 92.380949][ T2043] loop7: rw=2049, want=130, limit=128 [ 92.385324][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 92.391912][ T47] Bluetooth: hci0: sending frame failed (-49) [ 92.400207][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.414585][ T2050] fido_id[2050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 92.430308][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 92.438521][ T30] audit: type=1326 audit(2000000042.340:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.475127][ T2043] Buffer I/O error on dev loop7, logical block 129, lost async page write [ 92.494363][ T2043] attempt to access beyond end of device [ 92.494363][ T2043] loop7: rw=2049, want=131, limit=128 [ 92.505859][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.533530][ T30] audit: type=1326 audit(2000000042.340:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.552563][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.568932][ T2065] tipc: Failed to remove unknown binding: 66,1,1/0:756601017/756601019 [ 92.571112][ T2043] Buffer I/O error on dev loop7, logical block 130, lost async page write [ 92.581958][ T30] audit: type=1326 audit(2000000042.340:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.609028][ T30] audit: type=1326 audit(2000000042.340:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.628202][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.641518][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.649644][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.657991][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.666206][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.674338][ T2043] attempt to access beyond end of device [ 92.674338][ T2043] loop7: rw=2049, want=132, limit=128 [ 92.675595][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.693547][ T30] audit: type=1326 audit(2000000042.340:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.698732][ T2043] Buffer I/O error on dev loop7, logical block 131, lost async page write [ 92.718418][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.733490][ T30] audit: type=1326 audit(2000000042.340:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.757162][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.766609][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.776819][ T30] audit: type=1326 audit(2000000042.340:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.800166][ T30] audit: type=1326 audit(2000000042.340:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2056 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 92.810357][ T2043] attempt to access beyond end of device [ 92.810357][ T2043] loop7: rw=2049, want=133, limit=128 [ 92.840077][ T2043] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 92.848929][ T2043] attempt to access beyond end of device [ 92.848929][ T2043] loop7: rw=2049, want=134, limit=128 [ 92.849578][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.860873][ T2043] Buffer I/O error on dev loop7, logical block 133, lost async page write [ 92.868566][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.884651][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.893036][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.901476][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.909488][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.917544][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.924972][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.932468][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.940666][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.948882][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.956487][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.967533][ T384] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 92.977093][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.990208][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.008025][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.138841][ T2080] overlayfs: failed to clone upperpath [ 93.157758][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.169093][ T2083] netlink: 'syz.3.438': attribute type 27 has an invalid length. [ 93.192712][ T2083] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.199968][ T2083] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.287595][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.294723][ T2083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.303048][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.310105][ T2083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.325437][ T2083] device veth0_vlan left promiscuous mode [ 93.327857][ T384] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 93.332495][ T2083] device veth0_vlan entered promiscuous mode [ 93.348778][ T2083] device veth1_macvtap left promiscuous mode [ 93.349043][ T384] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.357080][ T2083] device veth1_macvtap entered promiscuous mode [ 93.377420][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.385207][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.392980][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.403038][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.407635][ T384] usb 5-1: config 1 interface 0 has no altsetting 0 [ 93.418127][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.430863][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.448017][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.464827][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.473045][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.481614][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.490306][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.499801][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 93.516587][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.533508][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 93.550337][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.567278][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.581595][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.590094][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.598310][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.074932][ T384] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.109560][ T384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.177561][ T384] usb 5-1: Product: syz [ 94.182203][ T384] usb 5-1: Manufacturer: syz [ 94.186824][ T384] usb 5-1: SerialNumber: syz [ 94.194506][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.214927][ T2091] device vlan2 entered promiscuous mode [ 94.217786][ T2065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.220635][ T2091] device bridge0 entered promiscuous mode [ 94.571260][ T384] usb 5-1: bad CDC descriptors [ 94.579621][ T368] Bluetooth: hci0: command 0x1001 tx timeout [ 94.585655][ T47] Bluetooth: hci0: sending frame failed (-49) [ 94.595613][ T384] usb 5-1: USB disconnect, device number 9 [ 94.816398][ T2117] loop7: detected capacity change from 0 to 1024 [ 94.858977][ T2117] EXT4-fs (loop7): Ignoring removed nobh option [ 94.865417][ T2117] EXT4-fs (loop7): Mount option "data=writeback" incompatible with ext2 [ 94.932693][ T2117] loop7: detected capacity change from 0 to 4096 [ 94.969142][ T2117] EXT4-fs (loop7): Test dummy encryption mode enabled [ 94.976781][ T2117] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 94.984999][ T2117] System zones: 0-5 [ 94.991349][ T2117] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000007,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 95.116080][ T2131] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 95.165507][ T2142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2142 comm=syz.7.454 [ 95.180641][ T2142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2142 comm=syz.7.454 [ 95.269869][ T2153] incfs: Options parsing error. -22 [ 95.275396][ T2153] incfs: mount failed -22 [ 95.307519][ T2044] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 95.737561][ T2044] usb 5-1: No LPM exit latency info found, disabling LPM. [ 95.847566][ T2044] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 96.097559][ T2044] usb 5-1: string descriptor 0 read error: -22 [ 96.105864][ T2044] usb 5-1: New USB device found, idVendor=0525, idProduct=84a1, bcdDevice= 0.40 [ 96.115360][ T2044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.437530][ T60] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 96.607528][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 96.677530][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 96.797556][ T60] usb 2-1: config 0 has no interfaces? [ 96.957691][ T60] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.966941][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.980025][ T2181] overlayfs: failed to resolve './bus': -2 [ 97.076863][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 97.076897][ T30] audit: type=1400 audit(2000000046.890:1025): avc: denied { mount } for pid=2178 comm="syz.7.464" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.105288][ T60] usb 2-1: Product: syz [ 97.111321][ T60] usb 2-1: Manufacturer: syz [ 97.116204][ T60] usb 2-1: SerialNumber: syz [ 97.139954][ T60] usb 2-1: config 0 descriptor?? [ 97.247608][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.355911][ T30] audit: type=1326 audit(2000000047.260:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.380951][ T30] audit: type=1326 audit(2000000047.260:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.381189][ T60] usb 2-1: USB disconnect, device number 9 [ 97.404831][ T30] audit: type=1326 audit(2000000047.270:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.433466][ T30] audit: type=1326 audit(2000000047.270:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.457083][ T30] audit: type=1326 audit(2000000047.270:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.480451][ T30] audit: type=1326 audit(2000000047.270:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.503915][ T30] audit: type=1326 audit(2000000047.270:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.527182][ T30] audit: type=1326 audit(2000000047.270:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 97.550440][ T30] audit: type=1326 audit(2000000047.270:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2184 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 98.092164][ T2044] usb 5-1: USB disconnect, device number 10 [ 98.467546][ T60] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 98.776380][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 98.917763][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 98.952077][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 99.073374][ T60] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 99.156531][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.245530][ T60] usb 2-1: config 0 descriptor?? [ 99.972092][ T60] uclogic 0003:145F:0212.000D: interface is invalid, ignoring [ 100.182859][ T2200] hub 6-0:1.0: USB hub found [ 100.187936][ T2200] hub 6-0:1.0: 1 port detected [ 100.632086][ T2239] loop8: detected capacity change from 0 to 256 [ 100.672793][ T2239] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 100.717535][ T368] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 100.952668][ T2243] loop7: detected capacity change from 0 to 512 [ 101.138144][ T2243] EXT4-fs error (device loop7): ext4_quota_enable:6404: comm syz.7.483: Bad quota inum: 5, type: 1 [ 101.149776][ T2243] EXT4-fs warning (device loop7): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 101.165331][ T2243] EXT4-fs (loop7): mount failed [ 101.225985][ T2250] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.233225][ T2250] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.247737][ T2250] device bridge_slave_0 entered promiscuous mode [ 101.256361][ T2250] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.263481][ T2250] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.270903][ T2250] device bridge_slave_1 entered promiscuous mode [ 101.297618][ T368] usb 5-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 101.308754][ T368] usb 5-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 101.321769][ T368] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.328543][ T368] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 101.337643][ T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.349706][ T368] usb 5-1: config 0 descriptor?? [ 101.367581][ T2235] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.375568][ T2250] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.382649][ T2250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.389930][ T2250] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.396958][ T2250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.419835][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.427408][ T1872] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.435123][ T1872] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.446370][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.454703][ T1872] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.461766][ T1872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.477321][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.485794][ T1872] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.492844][ T1872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.500810][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.508794][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.523516][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.535703][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.543815][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.551468][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.559887][ T2250] device veth0_vlan entered promiscuous mode [ 101.568359][ T8] device bridge_slave_1 left promiscuous mode [ 101.574529][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.582078][ T8] device bridge_slave_0 left promiscuous mode [ 101.588474][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.596275][ T8] device veth0_vlan left promiscuous mode [ 101.699447][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.707172][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.716435][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.724581][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.734414][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.742191][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.751375][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.759062][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.771913][ T2250] device veth1_macvtap entered promiscuous mode [ 101.778705][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.786401][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.795686][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.804407][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.812362][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.822051][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.829779][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.839045][ T368] itetech 0003:06CB:73F5.000E: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.4-1/input0 [ 101.852768][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.860681][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.869902][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.877710][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.887964][ T2263] netlink: 'syz.7.487': attribute type 4 has an invalid length. [ 101.903267][ T2263] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.487'. [ 101.918045][ T60] usb 2-1: USB disconnect, device number 10 [ 101.924338][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.933323][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.941766][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.951730][ T1872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.011681][ T2272] loop7: detected capacity change from 0 to 256 [ 102.029105][ T415] usb 5-1: USB disconnect, device number 11 [ 102.084703][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 102.084716][ T30] audit: type=1326 audit(2000000051.990:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 102.347617][ T39] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 102.757625][ T39] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 102.852287][ T2288] loop4: detected capacity change from 0 to 128 [ 102.861589][ T30] audit: type=1400 audit(2000000052.770:1206): avc: denied { create } for pid=2285 comm="syz.7.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 102.892073][ T39] usb 10-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 102.966607][ T333] udevd[333]: incorrect ext4 checksum on /dev/loop4 [ 102.980832][ T2288] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 103.016666][ T39] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 103.179690][ T39] usb 10-1: config 220 interface 0 has no altsetting 0 [ 103.212180][ T39] usb 10-1: config 220 interface 1 has no altsetting 0 [ 103.427577][ T39] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 103.436803][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.445069][ T39] usb 10-1: Product: syz [ 103.449517][ T39] usb 10-1: Manufacturer: syz [ 103.454223][ T39] usb 10-1: SerialNumber: syz [ 103.527558][ T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 103.567531][ T368] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 103.768130][ T2301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.807611][ T368] usb 2-1: Using ep0 maxpacket: 16 [ 103.827675][ T39] usb 10-1: selecting invalid altsetting 0 [ 103.833708][ T39] usb 10-1: selecting invalid altsetting 0 [ 103.879158][ T39] usb 10-1: USB disconnect, device number 2 [ 103.887637][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.901845][ T60] usb 8-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 103.911030][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.922233][ T60] usb 8-1: config 0 descriptor?? [ 103.927689][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.938717][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.948485][ T368] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.961385][ T368] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.970497][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.979764][ T368] usb 2-1: config 0 descriptor?? [ 104.222807][ T30] audit: type=1400 audit(2000000054.130:1207): avc: denied { create } for pid=2302 comm="syz.9.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.261039][ T30] audit: type=1400 audit(2000000054.170:1208): avc: denied { lock } for pid=2309 comm="syz.9.500" path="socket:[24229]" dev="sockfs" ino=24229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.269175][ T2310] x_tables: duplicate underflow at hook 2 [ 104.362740][ T30] audit: type=1400 audit(2000000054.270:1209): avc: denied { setopt } for pid=2314 comm="syz.9.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.388895][ T60] wacom 0003:056A:0343.000F: unknown main item tag 0x0 [ 104.396950][ T60] wacom 0003:056A:0343.000F: hidraw0: USB HID v58.6c Device [HID 056a:0343] on usb-dummy_hcd.7-1/input0 [ 104.434728][ T2317] loop9: detected capacity change from 0 to 16 [ 104.533568][ T2317] erofs: (device loop9): mounted with root inode @ nid 36. [ 104.542311][ T2317] x_tables: duplicate underflow at hook 1 [ 104.548380][ T30] audit: type=1400 audit(2000000054.460:1210): avc: denied { read } for pid=2314 comm="syz.9.502" path="socket:[24802]" dev="sockfs" ino=24802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.588402][ T299] usb 8-1: USB disconnect, device number 9 [ 105.027551][ T368] usbhid 2-1:0.0: can't add hid device: -71 [ 105.034498][ T2333] loop4: detected capacity change from 0 to 512 [ 105.041060][ T368] usbhid: probe of 2-1:0.0 failed with error -71 [ 105.048943][ T368] usb 2-1: USB disconnect, device number 11 [ 105.075460][ T2333] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 105.084567][ T2333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.116319][ T2333] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.507: bad orphan inode 16 [ 105.138070][ T2333] ext4_test_bit(bit=15, block=4) = 0 [ 105.143468][ T2333] EXT4-fs (loop4): 1 orphan inode deleted [ 105.150100][ T2333] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,acl,mblk_io_submit,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,bsdgroups,,errors=continue. Quota mode: none. [ 105.874155][ T2351] loop9: detected capacity change from 0 to 256 [ 106.067941][ T2351] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.078859][ T2351] FAT-fs (loop9): unable to read boot sector [ 106.174421][ T30] audit: type=1400 audit(2000000056.080:1211): avc: denied { map } for pid=2360 comm="syz.1.514" path="socket:[24367]" dev="sockfs" ino=24367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.202196][ T2365] loop7: detected capacity change from 0 to 256 [ 106.232334][ T2366] loop9: detected capacity change from 0 to 256 [ 106.246682][ T30] audit: type=1400 audit(2000000056.080:1212): avc: denied { read } for pid=2360 comm="syz.1.514" path="socket:[24367]" dev="sockfs" ino=24367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.283640][ T30] audit: type=1400 audit(2000000056.190:1213): avc: denied { add_name } for pid=2362 comm="syz.7.515" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.326236][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.334319][ T2369] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 106.399676][ T2366] FAT-fs (loop9): Unrecognized mount option "ÿÿÿÿ" or missing value [ 106.408254][ T30] audit: type=1400 audit(2000000056.190:1214): avc: denied { associate } for pid=2362 comm="syz.7.515" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.728707][ T2378] loop4: detected capacity change from 0 to 512 [ 106.761999][ T2378] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.517: invalid indirect mapped block 10 (level 1) [ 106.802610][ T2378] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.517: invalid indirect mapped block 8 (level 1) [ 106.817626][ T2384] overlayfs: failed to clone upperpath [ 106.834520][ T2378] EXT4-fs (loop4): 1 truncate cleaned up [ 106.840559][ T2378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.862653][ T2386] xt_hashlimit: max too large, truncated to 1048576 [ 106.869462][ T2386] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 106.909599][ T2390] __nla_validate_parse: 56 callbacks suppressed [ 106.909614][ T2390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 107.127535][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 107.150866][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 107.150879][ T30] audit: type=1400 audit(2000000057.050:1221): avc: denied { unlink } for pid=282 comm="syz-executor" name="blkio.throttle.io_serviced_recursive" dev="tmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 107.256277][ T30] audit: type=1400 audit(2000000057.060:1222): avc: denied { sys_admin } for pid=2408 comm="syz.1.527" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 107.317795][ T2421] overlayfs: statfs failed on './file0' [ 107.325640][ T2419] validate_nla: 55 callbacks suppressed [ 107.325652][ T2419] netlink: 'syz.1.530': attribute type 12 has an invalid length. [ 107.406214][ T2422] xt_policy: neither incoming nor outgoing policy selected [ 107.557805][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.664906][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.702532][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.731488][ T30] audit: type=1400 audit(2000000057.640:1223): avc: denied { create } for pid=2428 comm="syz.1.532" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.753539][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.771898][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.784068][ T2430] 9pnet: Insufficient options for proto=fd [ 107.803527][ T60] usb 5-1: config 0 descriptor?? [ 108.177517][ T299] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 108.283781][ T30] audit: type=1326 audit(2000000058.190:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.9.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3fa0be749 code=0x7ffc0000 [ 108.307307][ T30] audit: type=1326 audit(2000000058.190:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.9.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3fa0be749 code=0x7ffc0000 [ 108.314183][ T60] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 108.331650][ T30] audit: type=1326 audit(2000000058.190:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.9.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3fa0be749 code=0x7ffc0000 [ 108.361918][ T30] audit: type=1326 audit(2000000058.190:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.9.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa3fa0be749 code=0x7ffc0000 [ 108.386154][ T60] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 108.406772][ T30] audit: type=1326 audit(2000000058.190:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.9.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3fa0be749 code=0x7ffc0000 [ 108.417611][ T299] usb 2-1: Using ep0 maxpacket: 32 [ 108.430109][ T39] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 108.442918][ T30] audit: type=1326 audit(2000000058.190:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.9.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa3fa0be749 code=0x7ffc0000 [ 108.485324][ T30] audit: type=1326 audit(2000000058.190:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2436 comm="syz.9.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3fa0be749 code=0x7ffc0000 [ 108.587589][ T299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.598058][ T299] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.617687][ T299] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.706453][ T2453] loop9: detected capacity change from 0 to 1024 [ 108.722795][ T2453] EXT4-fs (loop9): Mount option "noacl" will be removed by 3.5 [ 108.722795][ T2453] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 108.722795][ T2453] [ 108.740648][ T2453] EXT4-fs (loop9): Ignoring removed bh option [ 108.746756][ T2453] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.767556][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 108.778644][ T2453] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,journal_dev=0x000000000000000c,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noacl,user_xattr,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 108.797733][ T299] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.821659][ T299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.829910][ T299] usb 2-1: Product: syz [ 108.834157][ T299] usb 2-1: Manufacturer: syz [ 108.834199][ T2453] netlink: 'syz.9.538': attribute type 29 has an invalid length. [ 108.839228][ T299] usb 2-1: SerialNumber: syz [ 108.887929][ T299] cdc_ncm 2-1:1.0: skipping garbage [ 108.893235][ T299] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 108.907983][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.908777][ T299] cdc_ncm 2-1:1.0: bind() failure [ 108.930433][ T2464] fuse: Bad value for 'fd' [ 108.965274][ T2471] loop9: detected capacity change from 0 to 16 [ 108.989640][ T39] usb 8-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 108.998911][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.007696][ T2471] erofs: Unknown parameter '`ÁÐ' [ 109.014513][ T39] usb 8-1: config 0 descriptor?? [ 109.094195][ T299] usb 2-1: USB disconnect, device number 12 [ 109.260920][ T2435] tipc: Enabled bearer , priority 0 [ 109.277220][ T2435] device syzkaller0 entered promiscuous mode [ 109.673898][ T20] usb 5-1: USB disconnect, device number 12 [ 109.849612][ T2481] loop4: detected capacity change from 0 to 40427 [ 109.876663][ T2481] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 109.891621][ T2481] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.905446][ T2481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.951663][ T2481] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 109.959973][ T2481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.168500][ T2481] syz.4.546[2481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.174863][ T291] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 110.186965][ T291] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 110.194828][ T291] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 110.202538][ T291] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 110.210157][ T291] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 110.223010][ T291] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 110.231391][ T291] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 110.367617][ T299] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 111.037601][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.047641][ T299] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 111.056689][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.067781][ T299] usb 2-1: config 0 descriptor?? [ 111.103287][ T2434] tipc: Resetting bearer [ 111.118290][ T2434] tipc: Disabling bearer [ 111.197593][ T39] usbhid 8-1:0.0: can't add hid device: -71 [ 111.203760][ T39] usbhid: probe of 8-1:0.0 failed with error -71 [ 111.224827][ T39] usb 8-1: USB disconnect, device number 10 [ 111.334876][ T2512] loop9: detected capacity change from 0 to 131072 [ 111.375283][ T2512] F2FS-fs (loop9): Found nat_bits in checkpoint [ 111.390153][ T2532] loop4: detected capacity change from 0 to 256 [ 111.437899][ T2532] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 111.482589][ T2532] exFAT-fs (loop4): error, invalid size(size(6940) > aligned(9223372036854777344) [ 111.482589][ T2532] [ 111.507733][ T2512] F2FS-fs (loop9): Mounted with checkpoint version = 753bd00b [ 111.508950][ T2532] exFAT-fs (loop4): Filesystem has been set read-only [ 111.562021][ T2527] loop7: detected capacity change from 0 to 40427 [ 111.592207][ T2527] F2FS-fs (loop7): invalid crc value [ 111.604199][ T299] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 111.617285][ T2527] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 111.644269][ T2527] F2FS-fs (loop7): inconsistent node block, nid:3, node_footer[nid:83886083,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 111.667626][ T2527] F2FS-fs (loop7): Failed to read root inode [ 112.050139][ T2500] UDC core: couldn't find an available UDC or it's busy: -16 [ 112.070900][ T2500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.142759][ T2500] UDC core: couldn't find an available UDC or it's busy: -16 [ 112.160200][ T2500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.167995][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 112.168007][ T30] audit: type=1400 audit(2000000062.080:1249): avc: denied { read } for pid=2526 comm="syz.7.557" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.237557][ T299] lenovo 0003:17EF:6047.0011: Failed to switch middle button: -71 [ 112.257613][ T299] lenovo 0003:17EF:6047.0011: Fn-lock setting failed: -71 [ 112.277572][ T299] lenovo 0003:17EF:6047.0011: Sensitivity setting failed: -71 [ 112.306065][ T299] usb 2-1: USB disconnect, device number 13 [ 112.344903][ T2540] fido_id[2540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 112.423042][ T30] audit: type=1326 audit(2000000062.330:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.465651][ T2527] loop7: detected capacity change from 0 to 40427 [ 112.491029][ T30] audit: type=1326 audit(2000000062.330:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.531687][ T30] audit: type=1326 audit(2000000062.350:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.536317][ T2527] F2FS-fs (loop7): Corrupted extension count (3092 + 1 > 64) [ 112.562590][ T30] audit: type=1326 audit(2000000062.350:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.594895][ T2527] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 112.597607][ T30] audit: type=1326 audit(2000000062.350:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.616231][ T2527] F2FS-fs (loop7): invalid crc value [ 112.628730][ T30] audit: type=1326 audit(2000000062.350:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.655474][ T30] audit: type=1326 audit(2000000062.350:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.657394][ T2527] F2FS-fs (loop7): Found nat_bits in checkpoint [ 112.685144][ T30] audit: type=1326 audit(2000000062.350:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.727689][ T2527] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 112.734905][ T2527] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 112.768823][ T30] audit: type=1326 audit(2000000062.360:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 112.892030][ T2568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.567'. [ 113.069720][ T2578] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 113.079555][ T2578] SELinux: failed to load policy [ 113.097046][ T2578] loop9: detected capacity change from 0 to 256 [ 113.381453][ T2591] fuse: Bad value for 'fd' [ 113.387632][ T299] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 113.417198][ T2595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 113.455483][ T2599] netlink: 104 bytes leftover after parsing attributes in process `syz.4.575'. [ 113.627546][ T299] usb 2-1: Using ep0 maxpacket: 32 [ 113.747588][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.758701][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.768673][ T299] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 113.777907][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.786559][ T299] usb 2-1: config 0 descriptor?? [ 113.862080][ T2614] loop4: detected capacity change from 0 to 40427 [ 113.911638][ T2614] F2FS-fs (loop4): fault_injection options not supported [ 113.924626][ T2614] F2FS-fs (loop4): invalid crc value [ 113.935508][ T2614] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 113.980549][ T2614] F2FS-fs (loop4): recover fsync data on readonly fs [ 113.987457][ T2614] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 113.994382][ T2614] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 114.175528][ T2624] loop4: detected capacity change from 0 to 1024 [ 114.197515][ T368] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 114.206288][ T2624] EXT4-fs (loop4): Unrecognized mount option "subj_role=uidçZx’·x+¥" or missing value [ 114.326092][ T2624] fuse: Bad value for 'group_id' [ 114.727555][ T299] usbhid 2-1:0.0: can't add hid device: -71 [ 114.733562][ T299] usbhid: probe of 2-1:0.0 failed with error -71 [ 114.740998][ T299] usb 2-1: USB disconnect, device number 14 [ 114.757528][ T368] usb 8-1: device descriptor read/64, error -71 [ 114.837528][ T20] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.147589][ T368] usb 8-1: device descriptor read/64, error -71 [ 115.227549][ T20] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 115.236346][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.267638][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.276518][ T20] usb 5-1: config 1 has no interface number 0 [ 115.297517][ T20] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 115.317506][ T20] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 115.347530][ T299] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 115.417504][ T368] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 115.507575][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.516784][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.524963][ T20] usb 5-1: Product: syz [ 115.529307][ T20] usb 5-1: Manufacturer: syz [ 115.533911][ T20] usb 5-1: SerialNumber: syz [ 115.687567][ T368] usb 8-1: device descriptor read/64, error -71 [ 115.707564][ T299] usb 2-1: config index 0 descriptor too short (expected 2340, got 36) [ 115.715903][ T299] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 115.724155][ T299] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 115.733186][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.743041][ T299] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 115.752289][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.765087][ T299] usb 2-1: config 0 descriptor?? [ 115.797647][ T20] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 115.807458][ T20] usb 5-1: USB disconnect, device number 13 [ 115.933617][ T2643] netlink: 52 bytes leftover after parsing attributes in process `syz.3.587'. [ 115.982184][ T2647] device sit2 entered promiscuous mode [ 116.077590][ T368] usb 8-1: device descriptor read/64, error -71 [ 116.686347][ T2657] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 116.889708][ T2658] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 117.091829][ T299] usbhid 2-1:0.0: can't add hid device: -71 [ 117.097812][ T299] usbhid: probe of 2-1:0.0 failed with error -71 [ 117.104203][ T368] usb usb8-port1: attempt power cycle [ 117.109954][ T2669] loop7: detected capacity change from 0 to 1024 [ 117.112139][ T299] usb 2-1: USB disconnect, device number 15 [ 117.130815][ T2669] EXT4-fs (loop7): Test dummy encryption mode enabled [ 117.165088][ T2669] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 117.199259][ T2669] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,test_dummy_encryption=v1,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 117.215646][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 117.215660][ T30] audit: type=1400 audit(2000000067.130:1353): avc: denied { write } for pid=2677 comm="syz.3.599" path="socket:[25754]" dev="sockfs" ino=25754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.260747][ T2688] loop9: detected capacity change from 0 to 2048 [ 118.320629][ T2688] loop9: p1 < > p3 p4 [ 118.325977][ T2688] loop9: p3 size 65536 extends beyond EOD, truncated [ 118.333283][ T2688] loop9: p4 start 42180 is beyond EOD, truncated [ 118.381536][ T2695] loop7: detected capacity change from 0 to 512 [ 118.405404][ T528] udevd[528]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 118.415136][ T30] audit: type=1400 audit(2000000068.310:1354): avc: denied { name_bind } for pid=2697 comm="syz.9.605" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 118.435126][ T528] udevd[528]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 118.467897][ T333] udevd[333]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 118.529765][ T2701] loop9: detected capacity change from 0 to 512 [ 118.556763][ T2695] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.568509][ T2695] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.604839][ T2701] EXT4-fs (loop9): Test dummy encryption mode enabled [ 118.617060][ T2701] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 118.737517][ T299] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.752568][ T2701] EXT4-fs error (device loop9): ext4_orphan_get:1427: comm syz.9.606: bad orphan inode 131083 [ 118.768725][ T2695] EXT4-fs error (device loop7): ext4_do_update_inode:5249: inode #2: comm syz.7.603: corrupted inode contents [ 118.777244][ T333] udevd[333]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 118.781215][ T2701] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 118.795446][ T1667] udevd[1667]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 118.816472][ T30] audit: type=1400 audit(2000000068.720:1355): avc: denied { accept } for pid=2707 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.837084][ T2695] EXT4-fs error (device loop7): ext4_dirty_inode:6085: inode #2: comm syz.7.603: mark_inode_dirty error [ 118.860647][ T2695] EXT4-fs error (device loop7): ext4_do_update_inode:5249: inode #2: comm syz.7.603: corrupted inode contents [ 118.873905][ T2695] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.603: mark_inode_dirty error [ 118.885370][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 118.894324][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 118.904268][ T2706] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 118.915132][ T30] audit: type=1400 audit(2000000068.820:1356): avc: denied { relabelto } for pid=2694 comm="syz.7.603" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 118.929534][ T2695] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 21: comm syz.7.603: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=19, rec_len=1, size=2048 fake=0 [ 118.942547][ T30] audit: type=1400 audit(2000000068.840:1357): avc: denied { rename } for pid=2694 comm="syz.7.603" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 118.962170][ T2695] EXT4-fs error (device loop7) in ext4_resetent:3739: Corrupt filesystem [ 118.997583][ T2695] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2942: inode #19: comm syz.7.603: corrupted xattr block 21 [ 119.009780][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.010190][ T2695] EXT4-fs warning (device loop7): ext4_evict_inode:303: xattr delete (err -117) [ 119.019508][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.027797][ T299] usb 2-1: Using ep0 maxpacket: 16 [ 119.037307][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.051891][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.060961][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.070182][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.079262][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.093481][ T2710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.137578][ T299] usb 2-1: device descriptor read/all, error -71 [ 119.144141][ T574] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 119.298871][ T30] audit: type=1400 audit(2000000069.210:1358): avc: denied { append } for pid=2720 comm="syz.1.613" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.007637][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.384486][ T2745] device bridge0 entered promiscuous mode [ 121.390830][ T2745] bridge0: port 3(vlan2) entered blocking state [ 121.397091][ T2745] bridge0: port 3(vlan2) entered disabled state [ 121.404529][ T2745] device bridge0 left promiscuous mode [ 121.447606][ T574] usb 10-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config [ 121.458246][ T574] usb 10-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.471630][ T574] usb 10-1: config 0 interface 0 has no altsetting 0 [ 121.517780][ T574] usb 10-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 121.539807][ T30] audit: type=1400 audit(2000000071.450:1359): avc: denied { getopt } for pid=2748 comm="syz.7.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.549838][ T574] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.568976][ T2750] syz.4.620[2750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.569033][ T2750] syz.4.620[2750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.594732][ T574] usb 10-1: config 0 descriptor?? [ 121.619377][ T30] audit: type=1404 audit(2000000071.530:1360): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 121.638285][ T574] usb 10-1: can't set config #0, error -71 [ 121.662228][ T574] usb 10-1: USB disconnect, device number 3 [ 121.687634][ T2759] loop4: detected capacity change from 0 to 1024 [ 121.707612][ T30] audit: type=1400 audit(2000000071.530:1361): avc: denied { prog_load } for pid=2751 comm="syz.7.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.739167][ T2759] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 121.811356][ T30] audit: type=1400 audit(2000000071.530:1362): avc: denied { prog_load } for pid=2751 comm="syz.7.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.996255][ T2779] loop4: detected capacity change from 0 to 1024 [ 122.038391][ T2779] EXT4-fs (loop4): Unrecognized mount option "noinit_it" or missing value [ 122.052634][ T2780] incfs: ino conflict with backing FS 1 [ 122.091306][ T2779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.098315][ T2779] overlayfs: failed to set xattr on upper [ 122.555974][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 122.555988][ T30] audit: type=1326 audit(2000000072.460:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 122.591702][ T30] audit: type=1326 audit(2000000072.460:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 122.615315][ T30] audit: type=1326 audit(2000000072.490:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 122.638656][ T2795] netlink: 'syz.7.634': attribute type 1 has an invalid length. [ 122.639070][ T30] audit: type=1326 audit(2000000072.500:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 122.680560][ T2798] UDC core: couldn't find an available UDC or it's busy: -16 [ 122.697502][ T2798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.715258][ T30] audit: type=1326 audit(2000000072.500:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2794 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ad0516005 code=0x7ffc0000 [ 122.742755][ T30] audit: type=1326 audit(2000000072.500:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad04e3749 code=0x7ffc0000 [ 122.766706][ T30] audit: type=1326 audit(2000000072.500:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9ad04e23aa code=0x7ffc0000 [ 122.790221][ T30] audit: type=1326 audit(2000000072.500:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ad0516005 code=0x7ffc0000 [ 122.867880][ T30] audit: type=1400 audit(2000000072.560:1423): avc: denied { read } for pid=2796 comm="syz.1.635" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.895439][ T30] audit: type=1400 audit(2000000072.560:1424): avc: denied { open } for pid=2796 comm="syz.1.635" path="net:[4026532294]" dev="nsfs" ino=4026532294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.927614][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.937564][ T299] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 123.284032][ T2807] loop9: detected capacity change from 0 to 1024 [ 123.324075][ T2807] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.346988][ T2807] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.371697][ T2807] JBD2: no valid journal superblock found [ 123.383621][ T2807] EXT4-fs (loop9): error loading journal [ 123.554953][ T2817] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 123.569525][ T299] usb 8-1: Using ep0 maxpacket: 8 [ 123.707619][ T299] usb 8-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 123.719099][ T299] usb 8-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 123.733003][ T299] usb 8-1: config 0 interface 0 has no altsetting 0 [ 123.740107][ T299] usb 8-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 123.749811][ T299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.760635][ T299] usb 8-1: config 0 descriptor?? [ 123.907506][ T6] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 123.915116][ T368] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 124.088567][ T2831] 9pnet: Insufficient options for proto=fd [ 124.097800][ T299] usbhid 8-1:0.0: can't add hid device: -71 [ 124.104948][ T299] usbhid: probe of 8-1:0.0 failed with error -71 [ 124.123962][ T299] usb 8-1: USB disconnect, device number 14 [ 124.212319][ T2837] loop4: detected capacity change from 0 to 1024 [ 124.319132][ T2837] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 124.336168][ T2837] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.354387][ T2837] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: comm syz.4.645: lblock 0 mapped to illegal pblock 0 (length 6) [ 124.367941][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.378248][ T2837] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 124.390568][ T368] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 124.399757][ T2837] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.399757][ T2837] [ 124.409665][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.417741][ T6] usb 10-1: unable to get BOS descriptor or descriptor too short [ 124.426392][ T2847] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: comm syz.4.645: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.446300][ T368] usb 2-1: config 0 descriptor?? [ 124.451608][ T2847] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.645: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 124.469849][ T6] usb 10-1: not running at top speed; connect to a high speed hub [ 124.481589][ T2847] EXT4-fs error (device loop4) in ext4_setattr:5653: Corrupt filesystem [ 124.607592][ T6] usb 10-1: config 5 has an invalid interface number: 44 but max is 1 [ 124.616471][ T6] usb 10-1: config 5 has no interface number 1 [ 124.622840][ T6] usb 10-1: config 5 interface 44 has no altsetting 0 [ 124.629967][ T6] usb 10-1: config 5 interface 0 has no altsetting 0 [ 124.797568][ T6] usb 10-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 124.806805][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.815081][ T6] usb 10-1: Product: syz [ 124.820582][ T6] usb 10-1: Manufacturer: syz [ 124.825317][ T6] usb 10-1: SerialNumber: syz [ 125.017568][ T368] usbhid 2-1:0.0: can't add hid device: -71 [ 125.023760][ T368] usbhid: probe of 2-1:0.0 failed with error -71 [ 125.032349][ T368] usb 2-1: USB disconnect, device number 18 [ 125.202962][ T2857] loop4: detected capacity change from 0 to 4096 [ 125.218123][ T2857] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 125.225385][ T2857] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.234017][ T2857] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 125.265980][ T2857] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.274033][ T2857] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.300444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 125.319521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 125.670214][ T2885] loop7: detected capacity change from 0 to 1024 [ 125.739802][ T2885] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.760357][ T2885] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro,. Quota mode: writeback. [ 126.351981][ T2895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2895 comm=syz.7.658 [ 129.192072][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 129.192086][ T30] audit: type=1400 audit(2000000079.100:1475): avc: denied { create } for pid=2910 comm="syz.7.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.279813][ T2919] loop9: detected capacity change from 0 to 512 [ 129.287418][ T30] audit: type=1400 audit(2000000079.150:1476): avc: denied { connect } for pid=2910 comm="syz.7.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.324912][ T30] audit: type=1400 audit(2000000079.220:1477): avc: denied { create } for pid=2921 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.359393][ T2919] EXT4-fs (loop9): Ignoring removed nobh option [ 129.372444][ T2919] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 129.383986][ T2919] EXT4-fs (loop9): 1 truncate cleaned up [ 129.389888][ T2919] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 129.398227][ T6] usb 10-1: bad CDC descriptors [ 129.448402][ T30] audit: type=1400 audit(2000000079.360:1478): avc: denied { append } for pid=2918 comm="syz.9.666" name="loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.479418][ T2919] EXT4-fs error (device loop9): __ext4_get_inode_loc:4358: comm syz.9.666: Invalid inode table block 3900541761 in block_group 0 [ 129.499697][ T30] audit: type=1400 audit(2000000079.390:1479): avc: denied { map } for pid=2918 comm="syz.9.666" path="/dev/loop9" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.523886][ T2919] EXT4-fs (loop9): Remounting filesystem read-only [ 129.537511][ T2919] EXT4-fs error (device loop9): __ext4_get_inode_loc:4358: comm syz.9.666: Invalid inode table block 3900541761 in block_group 0 [ 129.551087][ T2919] EXT4-fs (loop9): Remounting filesystem read-only [ 129.557749][ T2919] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5881: Corrupt filesystem [ 129.559683][ T6] usb 10-1: USB disconnect, device number 4 [ 129.567436][ T2919] EXT4-fs (loop9): Remounting filesystem read-only [ 129.649122][ T2919] EXT4-fs error (device loop9): ext4_dirty_inode:6085: inode #15: comm syz.9.666: mark_inode_dirty error [ 129.672577][ T2919] EXT4-fs (loop9): Remounting filesystem read-only [ 129.686775][ T2919] EXT4-fs error (device loop9): __ext4_get_inode_loc:4358: comm syz.9.666: Invalid inode table block 3900541761 in block_group 0 [ 129.714261][ T2919] EXT4-fs (loop9): Remounting filesystem read-only [ 129.727354][ T2919] EXT4-fs error (device loop9): ext4_get_max_inline_size:116: inode #15: comm syz.9.666: can't get inode location 15 [ 129.752746][ T2919] EXT4-fs (loop9): Remounting filesystem read-only [ 129.765871][ T2919] EXT4-fs error (device loop9): __ext4_get_inode_loc:4358: comm syz.9.666: Invalid inode table block 3900541761 in block_group 0 [ 129.793307][ T2919] EXT4-fs (loop9): Remounting filesystem read-only [ 129.837989][ T45] EXT4-fs error (device loop9): __ext4_get_inode_loc:4358: comm kworker/u4:2: Invalid inode table block 3900541761 in block_group 0 [ 129.862013][ T45] EXT4-fs (loop9): Remounting filesystem read-only [ 129.944840][ T30] audit: type=1400 audit(2000000079.850:1480): avc: denied { block_suspend } for pid=2946 comm="syz.1.673" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.119639][ T30] audit: type=1400 audit(2000000080.030:1481): avc: denied { execute } for pid=2949 comm="syz.1.674" path="/157/blkio.bfq.group_wait_time" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.164737][ T390] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 130.177340][ T30] audit: type=1400 audit(2000000080.090:1482): avc: denied { bind } for pid=2952 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.198707][ T2953] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 130.209871][ T30] audit: type=1400 audit(2000000080.090:1483): avc: denied { listen } for pid=2952 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.229688][ T30] audit: type=1400 audit(2000000080.090:1484): avc: denied { connect } for pid=2952 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.230099][ T2953] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 130.249535][ T39] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 130.290767][ T2963] loop4: detected capacity change from 0 to 512 [ 130.362969][ T2963] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.374569][ T2963] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.463414][ T2983] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.665905][ T2991] kvm: emulating exchange as write [ 130.787505][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 130.917560][ T39] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.933281][ T39] usb 8-1: config 0 has no interface number 0 [ 130.960964][ T39] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.977518][ T368] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 131.004362][ T39] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.049079][ T39] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 131.090295][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.126686][ T39] usb 8-1: config 0 descriptor?? [ 131.233414][ T3003] fuse: Bad value for 'fd' [ 131.240473][ T3001] __nla_validate_parse: 21 callbacks suppressed [ 131.240485][ T3001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 131.288883][ T3006] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 131.349202][ T368] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 131.357381][ T368] usb 10-1: config 0 has no interface number 0 [ 131.364345][ T3008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 131.517622][ T368] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 131.527025][ T368] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.535331][ T368] usb 10-1: Product: syz [ 131.539780][ T368] usb 10-1: Manufacturer: syz [ 131.544514][ T368] usb 10-1: SerialNumber: syz [ 131.553075][ T368] usb 10-1: config 0 descriptor?? [ 131.837572][ T39] uclogic 0003:28BD:0071.0012: pen parameters not found [ 131.844555][ T39] uclogic 0003:28BD:0071.0012: interface is invalid, ignoring [ 131.937567][ T368] usb 10-1: Found UVC 0.08 device syz (046d:0823) [ 131.944071][ T368] usb 10-1: No valid video chain found. [ 131.950426][ T368] usb 10-1: USB disconnect, device number 5 [ 132.043058][ T2933] xt_CT: No such helper "netbios-ns" [ 132.062163][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 132.080482][ T2933] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 132.091855][ T2933] EXT4-fs (loop7): unable to read superblock [ 132.099792][ T2933] UDC core: couldn't find an available UDC or it's busy: -16 [ 132.107223][ T2933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.121713][ T3017] loop4: detected capacity change from 0 to 512 [ 132.158514][ T368] usb 8-1: USB disconnect, device number 15 [ 132.228100][ T3017] EXT4-fs (loop4): Unrecognized mount option "GPL" or missing value [ 132.646660][ T3051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 132.705304][ T3053] loop7: detected capacity change from 0 to 1024 [ 132.740454][ T3053] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: none. [ 132.747591][ T395] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 133.237700][ T395] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.293527][ T395] usb 10-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 133.475714][ T395] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.740087][ T395] usb 10-1: config 0 descriptor?? [ 133.905201][ T3074] loop7: detected capacity change from 0 to 40427 [ 133.964074][ T3074] F2FS-fs (loop7): Found nat_bits in checkpoint [ 133.972502][ T3097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 134.011255][ T3098] loop4: detected capacity change from 0 to 512 [ 134.037603][ T3074] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 134.062996][ T3098] EXT4-fs (loop4): too many log groups per flexible block group [ 134.087590][ T3098] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 134.094412][ T3098] EXT4-fs (loop4): mount failed [ 134.113986][ T3103] device vlan2 left promiscuous mode [ 134.123112][ T3104] attempt to access beyond end of device [ 134.123112][ T3104] loop7: rw=2049, want=81920, limit=40427 [ 134.129747][ T3103] device bridge0 left promiscuous mode [ 134.140813][ T3104] attempt to access beyond end of device [ 134.140813][ T3104] loop7: rw=2049, want=49496, limit=40427 [ 134.152126][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.171491][ T3074] attempt to access beyond end of device [ 134.171491][ T3074] loop7: rw=524288, want=78080, limit=40427 [ 134.184369][ T3074] attempt to access beyond end of device [ 134.184369][ T3074] loop7: rw=0, want=77832, limit=40427 [ 134.195580][ T3074] attempt to access beyond end of device [ 134.195580][ T3074] loop7: rw=0, want=77832, limit=40427 [ 134.212556][ T3109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 134.221769][ T3074] attempt to access beyond end of device [ 134.221769][ T3074] loop7: rw=0, want=77832, limit=40427 [ 134.271910][ T3110] netlink: 'syz.1.715': attribute type 12 has an invalid length. [ 134.286488][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 134.286499][ T30] audit: type=1326 audit(2000000084.200:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.320351][ T30] audit: type=1326 audit(2000000084.230:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.344021][ T30] audit: type=1326 audit(2000000084.230:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.367587][ T30] audit: type=1326 audit(2000000084.230:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.404988][ T30] audit: type=1326 audit(2000000084.230:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.428854][ T30] audit: type=1326 audit(2000000084.230:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.452607][ T30] audit: type=1326 audit(2000000084.230:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.476767][ T30] audit: type=1326 audit(2000000084.230:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.500969][ T30] audit: type=1326 audit(2000000084.230:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.524711][ T30] audit: type=1326 audit(2000000084.230:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3108 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c8fd9d749 code=0x7ffc0000 [ 134.557920][ T395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.590886][ T3120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.603232][ T1090] attempt to access beyond end of device [ 134.603232][ T1090] loop7: rw=2049, want=45104, limit=40427 [ 134.625196][ T3123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 134.661608][ T3127] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 134.704962][ T3128] syz.3.722[3128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.705037][ T3128] syz.3.722[3128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.311139][ T3147] overlayfs: failed to clone upperpath [ 135.500739][ T368] usb 10-1: USB disconnect, device number 6 [ 135.577761][ T3149] loop7: detected capacity change from 0 to 512 [ 135.602022][ T3152] netlink: 8 bytes leftover after parsing attributes in process `syz.9.727'. [ 135.635301][ T3149] EXT4-fs (loop7): orphan cleanup on readonly fs [ 135.658155][ T3149] EXT4-fs warning (device loop7): ext4_xattr_inode_get:509: inode #11: comm syz.7.720: EA inode hash validation failed [ 135.701513][ T3149] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1001: inode #11: comm syz.7.720: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 135.767521][ T3149] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1190: inode #11: comm syz.7.720: ea_inode dec ref err=-117 [ 135.783761][ T3149] EXT4-fs (loop7): 1 orphan inode deleted [ 135.877522][ T3149] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,data_err=ignore,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 136.567587][ T368] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 136.591720][ T3167] netlink: 88 bytes leftover after parsing attributes in process `syz.1.731'. [ 136.817519][ T368] usb 10-1: Using ep0 maxpacket: 16 [ 136.891805][ T3188] xt_hashlimit: size too large, truncated to 1048576 [ 136.937611][ T368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.951598][ T3196] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 136.961956][ T368] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.982104][ T368] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.995143][ T3196] tipc: Enabled bearer , priority 10 [ 137.005215][ T368] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.037589][ T368] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.057445][ T368] usb 10-1: config 0 descriptor?? [ 137.204887][ T3214] fuse: Bad value for 'group_id' [ 137.677549][ T6] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.277547][ T368] usbhid 10-1:0.0: can't add hid device: -71 [ 138.283798][ T368] usbhid: probe of 10-1:0.0 failed with error -71 [ 138.290555][ T6] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 138.301976][ T368] usb 10-1: USB disconnect, device number 7 [ 138.308137][ T6] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 138.318279][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.450402][ T6] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 138.899163][ T39] usb 5-1: USB disconnect, device number 15 [ 139.363237][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 139.363255][ T30] audit: type=1400 audit(2000000089.190:1656): avc: denied { mount } for pid=3274 comm="syz.3.762" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.524003][ T3280] 9pnet: Insufficient options for proto=fd [ 139.533904][ T30] audit: type=1400 audit(2000000089.440:1657): avc: denied { setopt } for pid=3279 comm="syz.4.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.739416][ T30] audit: type=1400 audit(2000000089.650:1658): avc: denied { read } for pid=3282 comm="syz.4.764" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.811302][ T3284] sch_fq: defrate 0 ignored. [ 139.822114][ T30] audit: type=1400 audit(2000000089.730:1659): avc: denied { write } for pid=3285 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.210129][ T30] audit: type=1400 audit(2000000090.110:1660): avc: denied { unlink } for pid=1090 comm="syz-executor" name="file0" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.255640][ T30] audit: type=1400 audit(2000000090.150:1661): avc: denied { read write } for pid=3289 comm="syz.7.766" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.310591][ T30] audit: type=1400 audit(2000000090.150:1662): avc: denied { open } for pid=3289 comm="syz.7.766" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.352939][ T30] audit: type=1400 audit(2000000090.210:1663): avc: denied { ioctl } for pid=3289 comm="syz.7.766" path="/newroot/dev/input/event0" dev="devtmpfs" ino=256 ioctlcmd=0x4507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.413528][ T3294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.767'. [ 140.690039][ T30] audit: type=1400 audit(2000000090.600:1664): avc: denied { setopt } for pid=3297 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.710864][ T368] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 141.060808][ T3304] loop4: detected capacity change from 0 to 128 [ 141.136098][ T3304] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.147613][ T3304] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.161329][ T30] audit: type=1400 audit(2000000091.070:1665): avc: denied { create } for pid=3302 comm="syz.4.770" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.218911][ T368] usb 8-1: Using ep0 maxpacket: 16 [ 141.356103][ T368] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.368843][ T368] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.380736][ T368] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.398772][ T368] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.409715][ T368] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.422256][ T368] usb 8-1: config 0 descriptor?? [ 141.559051][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.567072][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.915138][ T3311] loop4: detected capacity change from 0 to 16 [ 141.939902][ T3311] erofs: Unknown parameter 'ÿÿ01777777777777777777777ÿ' [ 142.045858][ T3311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 142.073401][ T3311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 142.098386][ T3311] loop4: detected capacity change from 0 to 512 [ 142.147420][ T3311] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 142.167224][ T3311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 142.177522][ T3311] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.184730][ T3311] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.772: bad orphan inode 267 [ 142.196832][ T3311] EXT4-fs (loop4): Remounting filesystem read-only [ 142.204037][ T3311] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 142.224618][ T3311] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.772: dx entry: limit 0 != root limit 125 [ 142.237521][ T3311] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.772: Corrupt directory, running e2fsck is recommended [ 142.404762][ T3321] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.772: dx entry: limit 0 != root limit 125 [ 142.437494][ T3321] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.772: Corrupt directory, running e2fsck is recommended [ 142.467563][ T3324] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.772: dx entry: limit 0 != root limit 125 [ 142.487817][ T3324] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.772: Corrupt directory, running e2fsck is recommended [ 142.757584][ T395] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 143.037549][ T395] usb 2-1: device descriptor read/64, error -71 [ 143.467600][ T395] usb 2-1: device descriptor read/64, error -71 [ 143.937358][ T3348] loop4: detected capacity change from 0 to 512 [ 143.957773][ T3348] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 143.987582][ T395] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.267533][ T395] usb 2-1: device descriptor read/64, error -71 [ 144.584805][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 144.585051][ T30] audit: type=1400 audit(2000000094.490:1670): avc: denied { map } for pid=3349 comm="syz.3.783" path="socket:[28342]" dev="sockfs" ino=28342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 144.618546][ T30] audit: type=1400 audit(2000000094.490:1671): avc: denied { accept } for pid=3349 comm="syz.3.783" path="socket:[28342]" dev="sockfs" ino=28342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 144.707531][ T395] usb 2-1: device descriptor read/64, error -71 [ 144.827601][ T395] usb usb2-port1: attempt power cycle [ 145.188108][ T3357] loop7: detected capacity change from 0 to 512 [ 145.221724][ T3357] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.249789][ T3357] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.785: invalid indirect mapped block 4294967295 (level 1) [ 145.264927][ T3357] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.785: invalid indirect mapped block 4294967295 (level 1) [ 145.280464][ T3357] EXT4-fs (loop7): 2 truncates cleaned up [ 145.286642][ T3357] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 145.308056][ T30] audit: type=1400 audit(2000000095.220:1672): avc: denied { mounton } for pid=3356 comm="syz.7.785" path="/109/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.501732][ T3357] EXT4-fs (loop7): shut down requested (2) [ 145.623878][ T30] audit: type=1400 audit(2000000095.530:1673): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 145.689641][ T3367] loop4: detected capacity change from 0 to 512 [ 145.703960][ T3364] loop7: detected capacity change from 0 to 512 [ 145.716966][ T46] ================================================================== [ 145.725056][ T46] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f2/0x760 [ 145.733240][ T46] Read of size 4 at addr ffff888139431470 by task kswapd0/46 [ 145.740621][ T46] [ 145.742970][ T46] CPU: 1 PID: 46 Comm: kswapd0 Not tainted syzkaller #0 [ 145.749924][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.759987][ T46] Call Trace: [ 145.763285][ T46] [ 145.766240][ T46] __dump_stack+0x21/0x30 [ 145.770601][ T46] dump_stack_lvl+0xee/0x150 [ 145.775215][ T46] ? show_regs_print_info+0x20/0x20 [ 145.780430][ T46] ? load_image+0x3a0/0x3a0 [ 145.784953][ T46] print_address_description+0x7f/0x2c0 [ 145.790533][ T46] ? unaccount_page_cache_page+0x6f2/0x760 [ 145.796366][ T46] kasan_report+0xf1/0x140 [ 145.800841][ T46] ? unaccount_page_cache_page+0x6f2/0x760 [ 145.806675][ T46] __asan_report_load4_noabort+0x14/0x20 [ 145.812330][ T46] unaccount_page_cache_page+0x6f2/0x760 [ 145.817988][ T46] __delete_from_page_cache+0xbe/0x420 [ 145.823486][ T46] ? bad_page+0x180/0x180 [ 145.827851][ T46] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 145.834903][ T46] ? __kasan_check_write+0x14/0x20 [ 14