last executing test programs: 12m25.103038079s ago: executing program 32 (id=43): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000b8000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b8000001003a780020010000300f300fc79d53bf0000c4b9e16dc301012202", 0xff37}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) (async) r9 = dup(r3) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@nodevmap}], [], 0x6b}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x0, 0x2, 0x36c0}]}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x2e, 0x0, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000340)=""/52, 0x50, 0x34, 0x0, 0x0, 0x70dca95f83a9ae52, @value=r9}, 0x28) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40441, 0x20) 12m17.144489507s ago: executing program 33 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000580)='qrtr_ns_service_announce_del\x00', r0, 0x0, 0xe}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000002d040200000000001d4002000000000047040000ffed000062030000000000000f440000000000007a0a00fe00ffffffd704000040000000b5000000000000009500000000000000023b"], 0x0}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d63703836342c7574664800312c756e695f786c61748dbf622d25ac4fe161727365743d63703835372c756e695f786c6174653d312c757466383d312c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c696f636861727365743d6d6163677265656b2c73686f72746e616d653d77696e6e742c696f636861727365743d63703836332c757466383d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nonumtail=0,\x00'], 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m5.49407602s ago: executing program 34 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$pagemap(r2, &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") listen(r0, 0x5) 9m47.410450006s ago: executing program 6 (id=239): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setreuid(0xee00, 0xffffffffffffffff) (async) setreuid(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async, rerun: 64) r2 = getpid() (async) getrlimit(0xb, &(0x7f0000000940)) sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) (async) pselect6(0x40, &(0x7f00000009c0)={0x2, 0x80, 0x4000000000001, 0x0, 0x6656142a, 0x5c4, 0x400, 0x8000000000000001}, &(0x7f00000001c0)={0x20000000000afe, 0x9, 0x4, 0x1000000ffffffff, 0x8, 0x1, 0x4fae, 0x1}, &(0x7f00000003c0)={0x98cf, 0x0, 0xfffffffffffffff9, 0x4, 0x4, 0x8, 0x6, 0x1}, 0x0, &(0x7f0000000a80)={0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r5, 0x1d, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="0b001005000800ff00000001", @ANYRES64=r1, @ANYBLOB, @ANYRES64=r7], 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) r9 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r9, @ANYRESDEC, @ANYRESHEX], 0x1, 0x536, &(0x7f0000000400)="$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") (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) (async, rerun: 32) write$binfmt_misc(r1, &(0x7f0000000280), 0xff9d) (async, rerun: 32) sendfile(r0, r1, &(0x7f0000000100), 0x2) (async, rerun: 64) fcntl$addseals(r1, 0x409, 0x8) (rerun: 64) 9m47.397711516s ago: executing program 6 (id=244): r0 = io_uring_setup(0x554d, &(0x7f0000000000)={0x0, 0xb07b, 0x2, 0x0, 0x215}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000001400)={&(0x7f0000002000)={[{&(0x7f0000000080)="854fe7a09b082d5a86bdc31692ea51294576cf4fff8d32c724350124b328b7ffa8a648a267141eb3935de9d2f7301446cc5b53ee05f45fd3af2db1f56554fc9f66a7184819e83372754831dbc103ff8f01", 0x51, 0x2}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="0867351e81051c9c745711514687c5128975fa0e55e9d5ea3b5c9614c901559c5a8c83fb121d5f91ec8a46fb57dd2127b8b98d4a9fb4e376314ab56aeabd78e0ebf9dd71bbb496ab02aac0d4f1acb6abf6b560837a1fc77a9433f1d248f17e3301a83612b646fb9be423", 0x6a}, {&(0x7f0000001180)="c265f455b3efc3231cf6b4c620710ab91696b1af66a144b19b9aed9b84efa24aa06dde364757be211c3083", 0x2b, 0x2}, {&(0x7f00000011c0)="1d690397dbf71ce869ee037bcde118de9e9a427573e3118111517f1dfbe716c9021b6d0cf6a9d798ddc261a5718460d5ad5f3da7016d0cc7be1e6c9ae32c5e42f9d4429495b51b88526a23f01a454b0f500309d9354bfb1129f0ff7f32f0dcf5b2e697c221907010f31a3ae2126feb4a93ba8fcd291d332166f9109f0ed265fbdc2ce53d2f0cb2ed424c8f7459fb12068f10c7426e25f8cdf99ef5b8a23528700425a20de36dc7041acdf2618633b697ef0d92d39a3c4a587dd10dcdebd9e5eadbca7cafbdd9c3b7f8", 0xc9}, {&(0x7f00000012c0)="6515", 0x2}, {&(0x7f0000001300)="c6e4baf483caaed5dfc1b5c3a25a5661fd9d4de1b09050cf6dd86bdb78e03b5728026d2ac59701c54a22bf5960dbc4ad056301d659d1fe344f023ca69edd8330491a7f9ace981f6f", 0x48, 0x1}, {&(0x7f0000001380)="86b48a14228d5c0d45d4e81a24becbe45fde9d072cbc942dd3941029dacd5992a211c54ddda40f10ee93614fc46747dce46e3352282f578ff3497ab36eaabc4823050009397489039b05e520935aa147126704005727693c028347e87a7a78b057db011c1f227a0494084d", 0x6b, 0x1}]}, 0x8, 0x1}, 0x1) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000001440)={0x3, 0x2, 0xe11e}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001480)="1c22d4aecf2637609179bf2e601284557e3a2aa63267c348606dab984b1b529f9290fca95beb3f3935999357a2a0bd7fcb11169349508c7164417b24836291d964b576f07d015db76a4ab7c955c10196ed7af300fee5f9981d68072bb7a648c99fe9249fcd6f5ef1b4152423f14a1568147ae01bed55cec6bd284aa9c9c48b65c42ba91ba6355b2849ec189e238d7bdd659f395bbf7ac8e5b89c2bf8588264ca92485fba830975c89b126811059bfad06992d31226206d162f1d609b79c746c505de021dc0c641a7589476", 0xcb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001580), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000015c0)=0x1, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001600)=""/1, &(0x7f0000001640)=0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000001680)={0x6, 0x4, 0xe0}) splice(r1, &(0x7f00000016c0)=0x9, r0, &(0x7f0000001700)=0x738, 0x5afc, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r2, 0x4b65, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r3) lsetxattr$security_ima(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), &(0x7f0000001800)=@md5={0x1, "2b00b58542a5c6bced2e16456ccd5dee"}, 0x11, 0x1) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0}, &(0x7f0000001ac0)=0xc) stat(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001bc0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000001cc0)=0xe8) fstat(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000001d80), 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001dc0)=0x0) stat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fsopen(&(0x7f0000001ec0)='vxfs\x00', 0x0) r13 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r14 = fcntl$getown(r0, 0x9) stat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000aec0)=[{{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000018c0)="eb0590ea3ee0bac8f3fe3b85680a13e97d81dbf048e7b99e8de8c0c5c729ee3637d74db6441db729fb3baeeaef3d2d1ea87a9bfd9f41d563ce2df1cb1523aee7dfa2065d9234dbe364c37e8503d08a50d16d0a8b4663d1a61b2eef943334f9876dbd5d23011c34b368dffe59c8b049f26b9c6b216e668f532878fad47791a5f472a300914f1bbaca76c5792da2eab693218c8199", 0x94}, {&(0x7f0000001980)="03a8108733726e81467cc364cfdc4ed6fd49ab7c122cd785186882ca0e0e29cad38a6fa559eb797aa412707de0a5617e880f4961114f8417171c097c33ddab18a32337a8a55e6399f91a56ba7e6b02202bb1692f2034560fe8c1fed11f7b304fb24356ab5b1cd58b301bae59e0ef06dc6b010024bde72cfa0ff9af313a05e41616f13cea53248c", 0x87}], 0x2, &(0x7f0000003000)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r3, r2, r9, r2, r3, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r11}}}, @rights={{0x38, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r0, r3, r3, r12, r2, r2, r3]}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}], 0x140, 0x40080}}, {{&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000003140)="325717a87307eee625f6ac01a53eec3bae88eb22d7fa3ecebfe8351bee1bc643c0ff9dacf0bfaf1f5bc83835a1fd1896cdaf1051de41dafe622a5f02eb7cb9aeca303a5292926d1cb6e9cc2bc977adbc083c4c27bc905ee5b60243168e195d44c996fb5b13173087c26e3b1c81c268cde1e7d96b88e09d4d3fce34c6f9e4015bfa92d5b02b328fcbb8ea0a0fd3d119", 0x8f}], 0x1, &(0x7f0000007600)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xa0, 0x24040084}}, {{0x0, 0x0, &(0x7f00000077c0)=[{&(0x7f00000076c0)="feaaf617be75d1bdbff3672d7ced824b4a37c280e554cbc4c4311aca7585abe5d49111f28a9fd1eded28bb981a46aaf68f02e4a7e7af25d456ebabd241b8a631df3a8f7bb5c8a44e4898b6e853a63631ca705c2f752202b40c6a5634e6bc6c94115e558e8bee5dcff7d98d6d8111fa6cef687d24ff019f0c95d2984fe8a239eae460be5d29dce3eb1333487d986269ab6eae19303666386709f2bbb07113e3a9e2d3dec2d095a299d2871c8f4922d0d2248bc91ff4e2bfecfcff45845c98fcc51f0415e885d7025537a659b30466a04d", 0xd0}], 0x1, &(0x7f0000007800)=[@rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x18, 0x2}}, {{0x0, 0x0, &(0x7f0000007b00)=[{&(0x7f0000007840)="0270880fb9fe3b1370d14f9525ec7b678f31516b39faf9de6286d83f8e244e8de8969c004d6d85d4ce60d55519a9f28a6b8a24a17f0f80ef6801218eacafcb7881cc6e66f132150acb8a94540818b82e32b7bfb7f32e5dda7d51701fc468728da238d3853dc999447f1f09c442aeada5a9422b8c997fd9c5fd835a663e48f41b319702ed87436d303ed1bf9e80ba14bf1984", 0x92}, {&(0x7f0000007900)="7c25f1e621ea99d09ba9d7d783f72eb6ef44c2794d8582ff76f399163dc5578f1fe3568ce178e213435f9ccbe0ef6a58eeb5fc6f48a66b3784a18e414e30a613d5cb22bb9e97330d69fcda702b5d099a88f08696d72a879158ed7a13ba20bdf9dc70ad686f99f1afa039c0a4be0609082b9fcbff61f1a6f18098b13c254b0a09d685678b44754ee132178182f77ee998adccd9a4ceea02f9470cd1923c84f7649f16e75c3e8927e30e2bbd5915492e04c0b31fcc947d6d9d51768e78a56395a7c6d327712b9491b4aa6429800144c9f1227287eb84aaf27039ba3a7a923461c9379a97ef7536c73a136c6c991170a7791b", 0xf1}, {&(0x7f0000007a00)="bf0440bb090db84d4c617773322841c14fc34a3d51a801e7d41ccd6f9c72b4f3cac9d149f56fffc3835538e75d2024fd09c83a4ba3c53b32cd2619fec551aec6e811ed0515f86c072114d627c482c75ac4d6325995549867cebcb2b80d41bb8b38c29634ac7592ad097b45acd473d5e755345363744401ad5b38b9206388de5c81a0d057e70742b25f6e771debd5819ede23c13c93196b3858b5952ddaa8a9f255636a30a01f1381c77cdb829472ecddbab770dafb9c4378ebf0895d04ed64cd7174cd41342c3dba80d6b1ab6ff13ee49f6dfb5fece379ff00b51d94e3d943f9c0c1b97d3012f45bd26c7dc3ea01d40ec4c33817bfc7a2d1179282cf", 0xfc}], 0x3, &(0x7f0000007cc0)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r1, r2, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r2]}}], 0x48, 0x40040}}, {{&(0x7f0000007d40)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f00000082c0)=[{&(0x7f0000007dc0)="0ea3ec95b194ecd9bb052a90c3a5a3f9c7bc7f239059df560ef721e53668a782ecae5e9ce9f7ed40ecb8b16b19d7c7a28aeb016614fa34e9515a197cb1ae2060e75976c81e00dcfc6f7c336d546374b0575ac8f5f6fda46cf8d1cb9d1891157ace071e5565e380ef05d3db63fb86", 0x6e}, {&(0x7f0000007e40)="0a5943b27e76648082cf42d6b6115b64a0a896703c4239e6684aa092f3f2a7471c88a0dd48d06cdd1e8f551694f5eba723d78f924028658cb28d2ab280fdd1c269c80d238bf43779f18ce89a420aa077a3f19a768929761ab8d7acb5879b0b20be1d", 0x62}, {&(0x7f0000007ec0)="99bb247dead648025ef85ba4bd0dc9230c3651c84deeab0ed67337bb0b75bda82f6a38a8cbb3cdd9", 0x28}, {&(0x7f0000007f00)="83f29462d57854e039999cc33dbbead83f430ba8335b68b43d999d7ca0605a69a1b81c660944cfdf6bfc0e4903da1c4f2de38bdaa478c4f29827a2aafe77359de9d7e5df14fae906e63df3c0aa6fe11a658988bc7ad2497a33673542622737e96e198f97c81437eec820d7061055e0cb3e34bc2d5ca134dfbccde69620a45be75291dbd2383a29b72a0c0c36a20cb528c895287128e3", 0x96}, {&(0x7f0000007fc0)="35c2909857dd3681d70bb315ded9ffe09f31f55a9bc3f6911b21ff119d812425891878e5a24c20f862f937269403d4938681a9325c6df66512460894a321244996d7d492fd6e9e519ca295d6ccd1ed596f81c36a6f362c26facb680897bffe2acc06026be33a274c729047e04af9329e7bb2f8971e181fdc6114ef1c3e771d4a3295ff0cc7455bac6cbe9be8122c7e18b1b4a740a8a1a333692ecd65a1edb94539ae641d6a3d40bca8d95bd66502a3d0e362934ad3bd9418e174047d5e06a8fa00885948197e8506fa3b1ca8538e4ea5c32adae65ceef46991aae8771e222e0fad57", 0xe2}, {&(0x7f00000080c0)="428f2adb1db41b9d8dec9027e7be5dc22e47e9b8a6d606218c83d1a6bdba5702f40f9e90b4284e25534b7d508a250449ae37fe76ce085781d7abca7db8c30ad469cb14e781057f00a355ff88849e861c04577a3c1578ae8b1586a3d65d37bb8ec10d9ffb82834bcd898a6ee929cac73a448a27f279ea6642aaf07daf8516b956165903b68d0c916d23728b557f86ff3ca5a3", 0x92}, {&(0x7f0000008180)="1b3b18c4ebbe8615f5033796bc1077d89e18925930f5f7e71d9b17e70378f52ce635a336aa69eef9b60538044560413252d99bf3b50634e5bd3a91a2f84b3166818b419daa6e84b13b620e6a4187ad434a7cd23e3f4196c4c61433f2bdc812a36e781008cce84340cb3a40c590ac86f8b32d46fd8e2a1ef75a19cae26f73b5b5c22cdf90251432d1e5359360181ece97bad1f02872", 0x95}, {&(0x7f0000008240)="6729391c5a98274c2efb97a087b3b293ec4c3c321d518e0e971d8e6f9fcba283c919eba0a8ffd114dda6b4df5f22e61fa543e20356e8560e4eb3d7433f92af0d004470b689a3c76dab661a186cbf3079c222a470c66232a58ec93f418a8faea4dfb27c4ca87525", 0x67}], 0x8}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f0000008340)="284c5d9e06e991bcb03fec57723f304851702efcce577f6c413ab6a2c6cccb7a1a09b6399f1b8a02b306909019eab264263c652a402ca93ae9999a1e820d3651a075b8ee6bdb7947cc84733c25217d485a7a2d47a29b9c5f89f4ef8971d695d08d598e9e", 0x64}, {&(0x7f00000083c0)="8b81a48f207d9cea8073dce3f9f9db535d551a0043c8d98215c5570a9f184c108c272e82600976c51bb8f32779f993d31519d79822724a1daf81a7be2355d443f5828ae6454add8d79493b309caefc7685b53fbc7f4d22e1315b5b7aca831d852f7a33a1708709a57d677129ed0e8e2c156f3f5b14e64f696402397f551958f0bbd1ba6696bd49567e0bd1dc6e3d313bfc10a0ea0c084872afb41c48618ff62a359e4d6891d2804254802da3d8da", 0xae}], 0x2, 0x0, 0x0, 0x4}}, {{&(0x7f00000084c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000008700)=[{&(0x7f0000008540)="9692b45f94dd2b1905f0445df60d3f9f016bba3d9569e0cd393ba80d0b26730293368e4618a84701f7b560907032c33b168080f1373ebe7a39b5f2e324e58059f431e8755d0793566de32eb84ef80f7753efb97721443a2c2d2df948d00777ad96bda6675056d17fcd9ccdc5d9f1e4bab2272a2334ae263dde50e75817d9b8361032e273658636f942bb068a57ce888ba8c8b90ecbdd22a6b0a4ccb3cee79e447dfbfb3ecbee7f39dfb10f0a59b5a359efda10c88947bca649fd0597b11dd94db7939d1f94187c6687eb52714119495036a2ba3eee2efd4cc8588b7f40b6ae8b118b9b54c44832a4d4d0e97ead8b78", 0xef}, {&(0x7f0000008640)="3684838c2ee96a15168c04573e3acfbc5c8d9d229464fc41e55237845606b1b8372425f610d1a8ce3086e886bce47fb3e706e50b8e956ce34e3a5607ca4066bc83ece41e92d8bea7f44ce7e271f48468f1aeed05953ee67bf0a985eab14cd30e3b9eaffc221e5821eabf4868e3c1db792b1fa26270e46617c693665214aeff36325e56bb32", 0x85}], 0x2, &(0x7f000000a900)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x2c, 0x1, 0x1, [r2, r3, r1, r2, r1, r2, r0]}}], 0x138, 0x44000}}, {{0x0, 0x0, &(0x7f000000ae40)=[{&(0x7f000000aa40)="079dbd2900262a9173c43a29e282fed996295184788f4b68bc62e2a47fef13e978a5e57bc8b47caf8eba4bbe62c694c6e142f1e6a3fd4f8ed46e4456deffaaa35bae62082c93ccb983501d", 0x4b}, {&(0x7f000000aac0)="cb03e667c0badfa3baeb77725a7729dfaba0e179e32f7c6294cd0740189f9f838ea9c9fd43db189f31672f9dd1568bb8abb1049e814569e35a5e3f928e84f87f5581a72e3964570572068f7a385e3c3cf28af55f1d0270723f3d643145044f3ffb784190afefa55838afd0427ce0b92f8894789b19d68ab48ade41441aad93cb6c6db3f2a9a50a2f9271111b4f82a53ce81892104953b1ee727d3925188c01", 0x9f}, {&(0x7f000000ab80)="c58cabbef63f236768896d8699149c9bcd17189c8d6d497bd9831abb646879616a99767bd1f5731173e5b9be91d431ecdf2c6838ff6938d1536daeb6b3ba8dc2e59bc33d9cb373c518727c26378ee53729512658fe6a90b6e1e81d438d115e015e8df929a24dd5ceb796b220ec33f736da312b5d22237a9c7428c16115b550bd2fef5e68f3dcf83fa272b324bc4420966f8274", 0x93}, {&(0x7f000000ac40)="6c28feefbe2b9adebd88953f2e474c4a75c6c16cfb032cc7b7970483bdf4c62ca32c29f671359777973673e21f790ce7abf7ca5b080f832d2bd6146c04816d3da0373caad2394da046a8dcde53ed258f3e7913d662893b8a2ade00ce4da8805fa1335cb8c3ee549b19cbcf0e956921ad3a5b7207d19d498b2a40f6edd87977655ab65837b701ba69450410cfd0e3a8be2415a46190afa34e8f3d20a58e8e813eaf4f2625ce99190c44add1369c7158451e07e32eb68d3d208a099dfcc3d3da1b943f4d1f58a9bcee506eba59fb4667233c4a90369002", 0xd6}, {&(0x7f000000ad40)="659e1bb7f94fccde4893f2bf95a3eb0d8d602cb6a4ec6d8c36fe57cd4150289ec962146a271c708c87faee3016ea510b01d9606817453065419743469c2b45811937f7475bdb1903f816df4b8ca3f8ca9effc53d9c9781181b9f836d", 0x5c}, {&(0x7f000000adc0)="1779b057119bdba1b4b337e2fba79312d7f4d458471c209fa5cfd40e005ef1f9524a465e23bdd080ed7e0ba25b5a09910cd10c3933a5adf26531ae9417ff2b47250f2a", 0x43}], 0x6, 0x0, 0x0, 0xc010}}], 0x8, 0xc0c0) 9m47.313513804s ago: executing program 6 (id=247): syz_usb_connect(0x6, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x9, 0x3b, 0x86, 0x20, 0xc45, 0x8003, 0xb882, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0xee, 0xa0, 0x42, [{{0x9, 0x4, 0x3, 0xa, 0x0, 0x6, 0xc, 0x9b, 0x9}}, {{0x9, 0x4, 0x42, 0xc, 0x1, 0xff, 0x1, 0x74, 0x3, [], [{{0x9, 0x5, 0x1, 0x8, 0x20, 0xd, 0x4, 0x19}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x12, &(0x7f0000000080)=@string={0x12, 0x3, "d317c939888346290da1e72273770c25"}}, {0x42, &(0x7f00000000c0)=@string={0x42, 0x3, "fe20cffbfc398d9cd9afb6a14cfafd61b5d4d23642c8baa7f0b4465576a0a8b1e940427f04d031df0ba7441a332613d785f86d7196bfd431ab93ab2fca14ac43"}}, {0x8c, &(0x7f0000000140)=@string={0x8c, 0x3, "a6a748ffd813590ff99e846f9cc2cb4828a504bbf68cca5c3a75b000f187e6db03c9db9f24a0ea3e5860bad008f3f4838412a0d26f2e0724a93e978e0584dfc61cc22b21c7a92c03150e3f0cadc38cf79423e7d2af94003355064fd418457f0624859b76a31c821490b9bab85d473ef4de50d0a5db0ec9ee5dbde936803ac64fc44fdd077acf2693cff6"}}]}) syz_usb_connect(0x6, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x9, 0x3b, 0x86, 0x20, 0xc45, 0x8003, 0xb882, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0xee, 0xa0, 0x42, [{{0x9, 0x4, 0x3, 0xa, 0x0, 0x6, 0xc, 0x9b, 0x9}}, {{0x9, 0x4, 0x42, 0xc, 0x1, 0xff, 0x1, 0x74, 0x3, [], [{{0x9, 0x5, 0x1, 0x8, 0x20, 0xd, 0x4, 0x19}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x12, &(0x7f0000000080)=@string={0x12, 0x3, "d317c939888346290da1e72273770c25"}}, {0x42, &(0x7f00000000c0)=@string={0x42, 0x3, "fe20cffbfc398d9cd9afb6a14cfafd61b5d4d23642c8baa7f0b4465576a0a8b1e940427f04d031df0ba7441a332613d785f86d7196bfd431ab93ab2fca14ac43"}}, {0x8c, &(0x7f0000000140)=@string={0x8c, 0x3, "a6a748ffd813590ff99e846f9cc2cb4828a504bbf68cca5c3a75b000f187e6db03c9db9f24a0ea3e5860bad008f3f4838412a0d26f2e0724a93e978e0584dfc61cc22b21c7a92c03150e3f0cadc38cf79423e7d2af94003355064fd418457f0624859b76a31c821490b9bab85d473ef4de50d0a5db0ec9ee5dbde936803ac64fc44fdd077acf2693cff6"}}]}) (async) 9m46.429149104s ago: executing program 6 (id=255): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@utf8no}, {@utf8}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x3bc}}, {@shortname_win95}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@numtail}]}, 0x1, 0x36a, &(0x7f0000001840)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init() r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) unshare(0x6020480) poll(&(0x7f0000004140)=[{r2, 0x4491}, {r2}, {r1, 0x408}], 0x3, 0x7f) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0x400, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x1, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x5, 0x0, &(0x7f0000001d80), &(0x7f0000001dc0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x80000) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000001640)=ANY=[]) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r10, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001d40)={'wpan0\x00'}) r11 = syz_clone(0x400, &(0x7f0000000180)="c3dba4ff8e5e0fa537e152a562a74845e20e88fd2670bfa4660642cc54437fadae9694e0cdf5aaf66235e5c9d1a127f071615e48d12b7d6504b3a382a4b8a871eef98c87be70c82f72673601a92fb1ff0f421a89b7442e4b539457418fedc2133363b3959eb234ec6afd0a1026ba26e43e8725e15bb7798fddb2bcaeb03ce5d4971c0ee49521f831a2083eb531722c634e4c5a70105fdb9370cc2c000d78509e93ce70979e7151be4cfdf35aacd6655beda48c573aa732cb1f80997af0632c016b", 0xc1, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="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") setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000001c00)={0x400, {{0xa, 0x4e24, 0x2aa24c73, @local, 0x9}}, {{0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x108) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="040028bd7000fedbdf251400000008001c00", @ANYRES32=r11, @ANYBLOB="e767fcb1bb841507d6361dcb4a80dbde259edd5923f3a4f5a08fb80ad44489bf9f95e00a28aa30bd956804510ea28f5b5772f1c85844751d52a102230be2c8149e61e993f71a97178d649cf196f709be86207330250dfcb13b5a908aea1fcc5d4fb7d98be87e3f8407974a1de6eda811e4d4ac"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x2018414, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c6e6f646f74732c6e6f646f74730c646f74732c636865636b3d72686c617865642c636865636b3dba656c617865642c646f74732c6e6f646f74732c6e6f646f74732c646f74732c64656275672c00"], 0x1, 0x257, &(0x7f0000000300)="$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") 9m45.219220341s ago: executing program 6 (id=260): rt_sigreturn() (async) rt_sigreturn() rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() (async) rt_sigreturn() rt_sigreturn() (async) rt_sigreturn() rt_sigreturn() (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1f) (async) rt_sigreturn() rt_sigreturn() (async) rt_sigreturn() rt_sigreturn() (async) rt_sigreturn() rt_sigreturn() (async) rt_sigreturn() 9m45.084818032s ago: executing program 6 (id=267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x1, 0x4004, 0xff, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r7, r0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) flock(r5, 0x1) write$FUSE_ENTRY(r9, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x0, {0x4, 0x2, 0x1, 0x9, 0x20000003, 0x2, {0x3, 0xfff, 0x1, 0x8, 0xfff, 0x3, 0x1, 0xf, 0x4, 0xa000, 0xa, 0x0, 0x0, 0x0, 0xd331}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r10}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r11 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004748290895130003758100000001090236000100000000091c960102502f7e0009050f10200001ff08090401"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) 9m45.079104443s ago: executing program 35 (id=267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x1, 0x4004, 0xff, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r7, r0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) flock(r5, 0x1) write$FUSE_ENTRY(r9, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x0, {0x4, 0x2, 0x1, 0x9, 0x20000003, 0x2, {0x3, 0xfff, 0x1, 0x8, 0xfff, 0x3, 0x1, 0xf, 0x4, 0xa000, 0xa, 0x0, 0x0, 0x0, 0xd331}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r10}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r11 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004748290895130003758100000001090236000100000000091c960102502f7e0009050f10200001ff08090401"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) 8m39.921331614s ago: executing program 8 (id=732): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) 8m39.902427815s ago: executing program 8 (id=733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="c744240000000000c74424025255a179c7442406000000000f0114240f0098b22d000066baf80cb8d2a25e8def66bafc0c66ed0fc7b2f7c3fbf3440f20c0350e000000440f22c0c4e23547e92e0fc71d97fc0000c74424000f000080c74424029b000000c7442406000000000f011c2466ba6100ed0fb7bd88000000", 0x7c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m38.977274649s ago: executing program 8 (id=740): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x2, 0xe872}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x54}}, 0x4000) 8m38.976650819s ago: executing program 8 (id=741): socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0xff, 0x27e, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x4, 0xc, 0x3f25, 0x1, 0x20000000000006, 0x4, 0x5c45, 0x7, 0x7f, 0x0, 0x1000000002e, 0xfffffffffffffff9, 0x80, 0x8, 0x401, 0x8000000000000001], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000001, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffbfffffff, 0x6, 0xffffffffffff592c, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x78) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f0000000840)=""/165, 0xa5}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000900)=""/122, 0x7a}], 0x5, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10082) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x80, 0x2000, 0x0, 0x10000}) 8m38.693240932s ago: executing program 8 (id=744): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x6, 0xe) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) rt_sigpending(0x0, 0x0) 8m38.485138479s ago: executing program 8 (id=747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getuid() (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r7, 0x929f, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 32) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) (async, rerun: 64) sendmsg$NFC_CMD_GET_TARGET(r8, 0x0, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000"], 0x50) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x54, 0x25, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0x10}, {0xffff, 0xd}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x5, 0x7fffffff, 0x1, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0xfe1, 0x5, 0x5, 0x8, 0x7]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 64) 8m38.482013119s ago: executing program 36 (id=747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getuid() (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r7, 0x929f, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 32) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) (async, rerun: 64) sendmsg$NFC_CMD_GET_TARGET(r8, 0x0, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000"], 0x50) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x54, 0x25, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0x10}, {0xffff, 0xd}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x5, 0x7fffffff, 0x1, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0xfe1, 0x5, 0x5, 0x8, 0x7]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 64) 8m8.944912416s ago: executing program 9 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="21ca986e7fd6d1a2f56831bdb9c49af030ff4dc0fefe86872bc2a24336dffbd42c21a5a86716821bda04c051d4da08cecd6de04e705ba101acf05f4b62b30f00546f17a72be7099f5393e85a41548cae1e1667b6d4a5ef6b630aca0a24bc", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xecdcdada538fa59b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="21ca986e7fd6d1a2f56831bdb9c49af030ff4dc0fefe86872bc2a24336dffbd42c21a5a86716821bda04c051d4da08cecd6de04e705ba101acf05f4b62b30f00546f17a72be7099f5393e85a41548cae1e1667b6d4a5ef6b630aca0a24bc", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xecdcdada538fa59b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'veth0\x00'}) (async) sendmsg$can_raw(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) (async) 8m8.76748639s ago: executing program 9 (id=1018): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xcf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8m8.575177736s ago: executing program 9 (id=1024): gettid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020005d"], 0x69) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 8m6.692947677s ago: executing program 9 (id=1030): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc628404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4bcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x9, {0x3, 0x0, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x2, r5, 0x0, 0x2, 0x40000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_emit_ethernet(0x9a, &(0x7f0000000940)=ANY=[@ANYRES16=r4], 0x0) lsetxattr$system_posix_acl(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02008bc56f84f640dc6e4f5b7232a800000100040000000000040004000000000010000100fd0000002000040000000000"], 0x24, 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") sched_setscheduler(0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x1672) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(0x0, 0x0, r7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x20, 0x7ff, 0xfffffeff, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0xa5, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, {[@noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESDEC=r8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) 8m5.866439163s ago: executing program 9 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000001000000000000000002000000000000000005c3a3c262f5e5917155cae15a12ce8330c44701731b7bd1bb0c4eeb67c8ebd8cb9d39639f0e33dc2e169704e3ef4dc74e45ee61024c353ace6d76c371fbecd3964cbfcb34bd9e42306af6fe9184e661adfbc55e8f6533c02e5624056d9563c73e922494e3b7d4d069942d962ba1772b17e80c8dcd2a488ce9fd0b77881c2d2239b687025e666437798f1e5a52086f512e9ba1e581a5f0b01e4bfac731b8fe4cd1fbbcd63848266b340630c1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000001000000000000000002000000000000000005c3a3c262f5e5917155cae15a12ce8330c44701731b7bd1bb0c4eeb67c8ebd8cb9d39639f0e33dc2e169704e3ef4dc74e45ee61024c353ace6d76c371fbecd3964cbfcb34bd9e42306af6fe9184e661adfbc55e8f6533c02e5624056d9563c73e922494e3b7d4d069942d962ba1772b17e80c8dcd2a488ce9fd0b77881c2d2239b687025e666437798f1e5a52086f512e9ba1e581a5f0b01e4bfac731b8fe4cd1fbbcd63848266b340630c1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="000000000000379ab702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000403000000dbaaf0ff500000", @ANYRES32=r2, @ANYBLOB="00004608f0ff760000005e9200000000000056080000010000008500000007000000b700000000000000950000112d9067378a00004b7300"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff48, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="000000000000379ab702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000403000000dbaaf0ff500000", @ANYRES32=r2, @ANYBLOB="00004608f0ff760000005e9200000000000056080000010000008500000007000000b700000000000000950000112d9067378a00004b7300"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff48, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='mnt\x00', 0x3241060, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00"], 0x50) (async) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00"], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 8m5.408089799s ago: executing program 9 (id=1039): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0xae, 0x7ffc0002}]}) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) removexattr(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000030100c0"]) 8m5.355986374s ago: executing program 37 (id=1039): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0xae, 0x7ffc0002}]}) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) removexattr(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000030100c0"]) 5m29.26915958s ago: executing program 3 (id=1384): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) 5m28.608868433s ago: executing program 3 (id=1388): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)={0x2, 0x146, 0xb}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000040000e3e7e65551c27eb71100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100003050800"/20, @ANYRES32=0x0, @ANYBLOB="4100000000000000200012800b0001006d61637365630000100002800c000100ff0700000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000002ef685765329701caa62be8f1af6201a013757dd6e0c3f255862abc0c3ec37234f6ba47aae401c65557d4941a2b90ce2f0fd89327261a71b457e0ac858fa8cae25f0c481c3", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x3, 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) inotify_init1(0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r8, 0x107, 0xc, &(0x7f0000000440)=0x400, 0x4) 3m47.24821403s ago: executing program 3 (id=1390): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m47.247160651s ago: executing program 3 (id=1391): r0 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00') writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="3483da", 0x3}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x70) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x44044) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000002c0)={0x0, 0xf, 0x8000, 0x6, 0xa9, 0xb3, &(0x7f0000000340)="e91d2ef93dda2e4920c5b48168327fd28dd40c36f9c3d9db5a12e30a0c0f32ca2f2150ec94a0e923acf9890cee01cf24a1e10380a000f1f31ace555d27e9fb15a4a9b0c0af43a09ffdbb0521bfabad12cd61735be1fa96aa52ac439951f9c09c2b6b31186d9cff39bc38c26c4e577f3749cd1654df7ca8c0425a4768972d26717841f7e5788616e27a0a732095a479f983bb7916d689356cb590e0a805b55b6d33b522950994c1e258"}) r2 = syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) process_vm_writev(r2, &(0x7f0000000440), 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, 0x0) 3m47.246836671s ago: executing program 3 (id=1392): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xcf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m47.246534811s ago: executing program 3 (id=1393): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40900, 0x0) openat$incfs(r4, &(0x7f00000003c0)='.pending_reads\x00', 0x0, 0xd658ed25d17ef96) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="14007b125d7632d3916b6e325fca71470000", @ANYRES16, @ANYBLOB="000129bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x948066bbf075af49) 3m47.246289151s ago: executing program 38 (id=1393): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40900, 0x0) openat$incfs(r4, &(0x7f00000003c0)='.pending_reads\x00', 0x0, 0xd658ed25d17ef96) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="14007b125d7632d3916b6e325fca71470000", @ANYRES16, @ANYBLOB="000129bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x948066bbf075af49) 2m6.920512225s ago: executing program 2 (id=2041): syz_emit_ethernet(0x3e, &(0x7f0000000940)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000004a00010025bd7000fcdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="010000001400010000000000000000001b"], 0x30}}, 0x40080) sync_file_range(r1, 0x5, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x80001) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {0x0}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/21, 0x15}, {&(0x7f0000000cc0)=""/82, 0x52}], 0x5}, 0x3}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/82, 0x52}, {0x0}], 0x2, &(0x7f0000000f80)=""/142, 0x8e}, 0xffffff01}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000004e40)}, 0x2}], 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) umount2(&(0x7f0000000100)='./file0\x00', 0x9) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x8, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjmfHTOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddg3PwAAAOCKuNF1/f+Pmfb1PwAAADBiZoedAAAAAHDhXP8DAADA6HP9DwAAACPtK6+/3pzSzu9fr765v7dZe/P2aqW+WdraWymt1HZ3Suu12nrrmX1b5+2vWqvtfDa29+6WG5V6o1zfP7izVdvbbtzZiMlLaRAAAABwypMfv/+7JCIOPzfVmpomhp0UcCnGj0pJNs/p/b9/oj1/95KSAi7FWB+vefda/nLnCfB4G+9e0KOvA6OnOOwEgKFLzlnfc/DOr7P5JwabDwAAMHhzH8v//v/87wUOC5eQHnCBdGK4uro+59OZYSUCXLrWff9+B/I4WYCRUuxrBCAwyv7v7//PlaYPlRAAADBw060pKZSy23vTUSiUShE3Wz8LUEzWNqqV+Yh4IiJ+O1O81qwvtLZMzr1mAAAAAAAAAAAAAAAAAAAAAAAAAADa0jSJFAAAABhpEYU/Jb9sP8t/bub56e77AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvDuIMBAAAAdOtcp7fm/xx2NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMmvcevL3Smfp4+dSg4v7lCxExmxd/PCZb88koRsT1vycxfmK7JCLGBhD/8F5EfDQvftJM6yhkXvxBvAnnxI/Z7F3Ii39jAPHhKrvfPP68ltf/CvFsa57f/8Yj/qf+QfU+/sXR8W+sR/+/2WeMp975Wbln/HsRT43nH3868ZMe8Z/rM/7Xv3Zw0Gtd+qOIuc7nT+uIdzLCcanc2Nop1/cPbm9sLa9X1ivbi4sLLy+9svTS0nx5baNayf7NjfGdp3/+/lntv577+Zdk2fRu//M5+8v7TPrPO3cffLhTOTwd/9ZzOfF/9ePsFafjF7I4n8rKzfVznfJhu3zSMz/9zTNntX/1uP3Fh/n/v9Vrp91OdZSn+/3TAQAuQH3/YHO5Wq3sjmyheZX+CKSh8AgWvjXQHaZpmjb7VM6q+xHRz36SGHBLC/n5HBd6HgGGfWQCAAAG7fikf9iZAAAAAAAAAAAAAAAAAAAAwNV1GU9Z6455/AjkZBCP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIj/BgAA//8RHtP4") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r6, 0x9, 0x1, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40) setreuid(0xee01, 0xee00) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r7, 0x4008af10, &(0x7f0000000240)={0x2, 0xc}) openat(r6, &(0x7f00000000c0)='./file0\x00', 0x220041, 0x2) 1m57.424197356s ago: executing program 2 (id=2082): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) r1 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000ffcffc)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000000c0)={0x20, 0x17, 0x4, "387105b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m55.215125123s ago: executing program 2 (id=2100): fremovexattr(0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ptrace$getregs(0xc, r0, 0x3, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ftruncate(r3, 0x6) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x6, 0x0, 0x7ff, 0x2}, 0x10) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500008400000000706ef7d352c242b18fe30000000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000004000000000000ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x400000000000000}, 0x0) 1m54.394464538s ago: executing program 2 (id=2101): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x1f, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x400}, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x9, 0x6, 0x69, 0x2, 0x9b930b3bd5112216}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0xe}}, @sadb_x_sec_ctx={0x201, 0x18, 0x9, 0x2, 0x1000, "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"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x2, 0x10, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}]}, 0x10e0}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0xfffffeb2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = getpgrp(r1) syz_clone3(&(0x7f0000000380)={0x802200, 0x0, 0x0, 0x0, {0x83}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r5, r1, r1], 0x3}, 0x58) 1m54.201160774s ago: executing program 2 (id=2102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='svc_stats_latency\x00', r3}, 0x18) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x14004, &(0x7f0000000540)=ANY=[@ANYBLOB='nodiscard,resuid=', @ANYRESHEX=0x0, @ANYBLOB="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"/304], 0x1, 0x5515, &(0x7f00000079c0)="$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") 1m54.037314157s ago: executing program 2 (id=2105): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000001c0)={@private2, r2}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000940)='kmem_cache_free\x00', r0}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0xfdef) 1m54.012059599s ago: executing program 39 (id=2105): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000001c0)={@private2, r2}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000940)='kmem_cache_free\x00', r0}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0xfdef) 1.730067641s ago: executing program 7 (id=2858): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5a2, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) 1.628084649s ago: executing program 1 (id=2867): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8991, 0x0) 1.627920649s ago: executing program 1 (id=2868): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newtfilter={0x8c, 0x28, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_ACT={0x5c, 0x1, [@m_ctinfo={0x58, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x101}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8e81}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.591035462s ago: executing program 1 (id=2869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0xf4, 0x28, 0xd27, 0x8000, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0x0, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_ACT={0xc4, 0x1, [@m_gact={0xc0, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x1, 0x10000000, 0x2, 0x7f}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2380, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x6, 0x4, 0x4ce}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x53a, 0x8}}]}, {0x4a, 0x6, "59ea4671c6e8fb435d8cffb2886914c9333bb87d2bc6fa499b46de3ef15d440ad610ac8237be8e5e1b981cde1f0b881ea70c0e2df103f2d54373ce9b7a32167a3998ba5adfa8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xf4}}, 0x0) r5 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x7}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0x6, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ffea668}]}, 0x6c}}, 0x0) 1.578467583s ago: executing program 1 (id=2870): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f", 0x8d}, {&(0x7f00000001c0)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e7ff02f7ca7eefba257aec7de6629f161bf3dcfe2b5c06245feab64407ddf6eb9e4e10cf50bbc30", 0x5b}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x173}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.23973423s ago: executing program 0 (id=2885): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001080)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_TIMEOUT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1.229119951s ago: executing program 0 (id=2886): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000600)=""/149, 0x95}], 0x2}, 0x4}], 0x1, 0x122, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 1.148277848s ago: executing program 0 (id=2889): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4041050) 817.511924ms ago: executing program 7 (id=2890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x538c8cc0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 806.437695ms ago: executing program 7 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@random="bbc5f3bdc430", @empty, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x3000, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "9e3b4c8df2c667146e9720a500c6db9a23e9f9d2b8815c990647986a0abf51ca", "cff45771826ebe615014f69f7809706f", {"994c7608845205579774f5b940e33057", "8503c55890a9ddc55a512cd3815a5b68"}}}}}}}, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 736.96682ms ago: executing program 4 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 736.808321ms ago: executing program 4 (id=2894): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 736.529861ms ago: executing program 7 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0f271f86cacfc6ef7cbf9f7de5e89015"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x44040000) 734.407391ms ago: executing program 4 (id=2896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x0, 0x5, 0xc02, 0x5}, 0x20) 727.267701ms ago: executing program 7 (id=2897): bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000002740)=""/4095, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38) 715.178872ms ago: executing program 4 (id=2898): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 654.722017ms ago: executing program 4 (id=2899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 654.414607ms ago: executing program 4 (id=2900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open_tree(0xffffffffffffffff, 0x0, 0x88800) close_range(r4, 0xffffffffffffffff, 0x0) 654.181787ms ago: executing program 7 (id=2901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 636.799309ms ago: executing program 1 (id=2902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 585.233043ms ago: executing program 1 (id=2903): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 226.995191ms ago: executing program 0 (id=2905): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 152.794997ms ago: executing program 5 (id=2907): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='net_dev_start_xmit\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 147.704788ms ago: executing program 5 (id=2908): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8d8}, 0x0) close(r1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 111.09479ms ago: executing program 5 (id=2909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.071037ms ago: executing program 5 (id=2910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6566c8bd20f39915734b4a24e9b596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6861cd700b4f8c0f594861c0296", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb1aeeb70c4294fb9be03e73d06a9", 0x3a}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="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", 0xda8}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 35.869547ms ago: executing program 0 (id=2911): socket$netlink(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x3ada, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=@can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "96ccd9f4c7b21421"}, 0x10}}, 0x44101) close(0x4) 35.712517ms ago: executing program 5 (id=2912): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x75e}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 22.140138ms ago: executing program 0 (id=2913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003340)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) 0s ago: executing program 5 (id=2914): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x24000054) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 0s ago: executing program 0 (id=2915): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63e"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): 4: detected capacity change from 0 to 40427 [ 653.773269][ T6992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.787774][ T6992] usb 3-1: config 0 descriptor?? [ 653.829845][ T7295] F2FS-fs (loop4): fault_injection options not supported [ 654.070782][ T7295] F2FS-fs (loop4): invalid crc value [ 654.188807][ T7295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 654.533918][ T7295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 654.660135][ T7295] attempt to access beyond end of device [ 654.660135][ T7295] loop4: rw=2049, want=45104, limit=40427 [ 654.769373][ T5083] attempt to access beyond end of device [ 654.769373][ T5083] loop4: rw=2049, want=45112, limit=40427 [ 655.061088][ T7336] loop4: detected capacity change from 0 to 128 [ 655.764153][ T6992] usbhid 3-1:0.0: can't add hid device: -71 [ 655.770432][ T6992] usbhid: probe of 3-1:0.0 failed with error -71 [ 655.781375][ T6992] usb 3-1: USB disconnect, device number 38 [ 655.994975][ T7368] loop5: detected capacity change from 0 to 1024 [ 657.280818][ T6981] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 658.404548][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2027'. [ 658.487157][ T6985] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 658.529149][ T7367] loop5: detected capacity change from 0 to 512 [ 658.545137][ T7393] loop4: detected capacity change from 0 to 512 [ 658.581661][ T7393] EXT4-fs (loop4): Unrecognized mount option "sync" or missing value [ 658.832719][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 658.832738][ T30] audit: type=1326 audit(1755554295.609:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 658.929815][ T30] audit: type=1326 audit(1755554295.646:6995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 658.955037][ T30] audit: type=1326 audit(1755554295.702:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 658.981531][ T30] audit: type=1326 audit(1755554295.702:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 659.006061][ T30] audit: type=1326 audit(1755554295.748:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 659.031021][ T30] audit: type=1326 audit(1755554295.748:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 659.057656][ T6985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 659.063122][ T30] audit: type=1326 audit(1755554295.748:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 659.081707][ T6981] usb 5-1: device not accepting address 16, error -71 [ 659.101292][ T30] audit: type=1326 audit(1755554295.748:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe156c6550 code=0x7ffc0000 [ 659.125774][ T30] audit: type=1326 audit(1755554295.748:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe156c77eb code=0x7ffc0000 [ 659.183681][ T30] audit: type=1326 audit(1755554295.748:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.5.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe156c77eb code=0x7ffc0000 [ 659.212236][ T7415] 9pnet: Insufficient options for proto=fd [ 659.220263][ T6985] usb 2-1: config 84 has an invalid interface number: 111 but max is 0 [ 659.229026][ T6985] usb 2-1: config 84 has no interface number 0 [ 659.235982][ T6985] usb 2-1: config 84 interface 111 has no altsetting 0 [ 659.285152][ T3177] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 659.296010][ T6985] usb 2-1: language id specifier not provided by device, defaulting to English [ 659.520066][ T7424] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2040'. [ 659.670678][ T7428] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2038'. [ 659.729635][ T3177] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 659.833992][ T3177] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 659.850769][ T3177] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 659.861249][ T3177] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 659.870767][ T3177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.892243][ T7407] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 659.914817][ T3177] snd-usb-audio: probe of 6-1:27.0 failed with error -12 [ 659.967823][ T6985] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 659.977008][ T6985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.986122][ T6985] usb 2-1: Product: ĐŞ [ 659.990577][ T6985] usb 2-1: SerialNumber: 麡珏גּ줺귮癲ꋧ⌗컹야髰蹏铏܎䖎鯫湼ěĺ©śę¤é˝ŻáĽ™îˇá˘±ë˛—îŤ/￭蠾쬯ęŻâ–‹ëµ»č–±âľˇä´˘ă’źî­Żç€Şć… î–Źć¬—ď‰ě‚…íŻçťŚŕ˘”קּ狴 [ 660.138343][ T3177] usb 6-1: USB disconnect, device number 29 [ 660.422882][ T6981] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 661.248493][ T7439] loop5: detected capacity change from 0 to 128 [ 661.488237][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 661.519879][ T7441] syz.5.2045[7441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.519971][ T7441] syz.5.2045[7441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.586201][ T7447] 9pnet: Insufficient options for proto=fd [ 661.604956][ T6985] usb 2-1: bad CDC descriptors [ 661.610860][ T6985] usb 2-1: USB disconnect, device number 34 [ 661.726892][ T6981] usb 5-1: Using ep0 maxpacket: 32 [ 661.758332][ T7455] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 661.779633][ T7455] SELinux: security_context_str_to_sid(staff_u) failed for (dev 9p, type 9p) errno=-22 [ 661.788801][ T7447] loop5: detected capacity change from 0 to 40427 [ 661.852957][ T6981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.864885][ T6981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.876013][ T6981] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 661.886030][ T6981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.895027][ T6981] usb 5-1: config 0 descriptor?? [ 661.983715][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2052'. [ 661.987876][ T6981] hub 5-1:0.0: USB hub found [ 662.063013][ T7463] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2054'. [ 662.135942][ T7465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7465 comm=syz.5.2055 [ 662.199585][ T6981] hub 5-1:0.0: 1 port detected [ 662.400489][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.420199][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.442596][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.462212][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.484568][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.502067][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.516260][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.530453][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 662.547198][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7468 comm=syz.5.2056 [ 663.561228][ T7469] loop5: detected capacity change from 0 to 131072 [ 663.701600][ T7483] overlayfs: conflicting lowerdir path [ 664.179216][ T7491] overlayfs: './bus' not a directory [ 664.247292][ T6992] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 664.255862][ T7491] device pim6reg1 entered promiscuous mode [ 664.973725][ T3181] usb 5-1: USB disconnect, device number 17 [ 665.188688][ T7503] 9pnet: Insufficient options for proto=fd [ 665.636545][ T7513] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2067'. [ 666.771973][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 666.821931][ T7503] loop4: detected capacity change from 0 to 40427 [ 666.842908][ T7520] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2071'. [ 666.939109][ T7503] F2FS-fs (loop4): fault_injection options not supported [ 666.947692][ T7503] F2FS-fs (loop4): invalid crc value [ 666.984733][ T7503] F2FS-fs (loop4): Found nat_bits in checkpoint [ 667.022887][ T7503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 667.063432][ T5083] attempt to access beyond end of device [ 667.063432][ T5083] loop4: rw=2049, want=45104, limit=40427 [ 667.313305][ T6985] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 667.470268][ T7538] loop4: detected capacity change from 0 to 512 [ 667.617043][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 667.617080][ T30] audit: type=1400 audit(1755554303.723:7220): avc: denied { bind } for pid=7548 comm="syz.4.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 667.686229][ T30] audit: type=1400 audit(1755554303.778:7221): avc: denied { create } for pid=7550 comm="syz.4.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 667.725787][ T6985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.737893][ T6985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.748862][ T6985] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 667.762331][ T6985] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 667.771918][ T6985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.803243][ T6985] usb 8-1: config 0 descriptor?? [ 667.966566][ T7557] loop4: detected capacity change from 0 to 512 [ 668.082194][ T7557] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.2081: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 668.100539][ T7557] EXT4-fs error (device loop4): ext4_quota_enable:6409: comm syz.4.2081: Bad quota inode: 3, type: 0 [ 668.112861][ T7557] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 668.130500][ T7557] EXT4-fs (loop4): mount failed [ 668.483809][ T6985] usbhid 8-1:0.0: can't add hid device: -71 [ 668.492390][ T6985] usbhid: probe of 8-1:0.0 failed with error -71 [ 668.559926][ T6985] usb 8-1: USB disconnect, device number 18 [ 669.197596][ T7571] 9pnet: Insufficient options for proto=fd [ 669.341430][ T7575] 9pnet: Insufficient options for proto=fd [ 669.371768][ T6984] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 669.395959][ T7577] loop4: detected capacity change from 0 to 4096 [ 669.409691][ T7571] loop5: detected capacity change from 0 to 40427 [ 669.440265][ T7577] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 669.451933][ T7577] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 669.465703][ T7577] EXT4-fs error (device loop4): ext4_fill_super:4830: inode #2: comm syz.4.2088: iget: special inode unallocated [ 669.479016][ T7577] EXT4-fs (loop4): get root inode failed [ 669.486044][ T7577] EXT4-fs (loop4): mount failed [ 669.584429][ T30] audit: type=1400 audit(1755554305.532:7222): avc: denied { write } for pid=7576 comm="syz.4.2088" path="socket:[45268]" dev="sockfs" ino=45268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 669.585583][ T7577] input: syz1 as /devices/virtual/input/input20 [ 669.612297][ T30] audit: type=1400 audit(1755554305.532:7223): avc: denied { read } for pid=7576 comm="syz.4.2088" path="socket:[45269]" dev="sockfs" ino=45269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 669.700408][ T7586] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2090'. [ 669.794469][ T6984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 669.805188][ T6984] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 669.815245][ T6984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 669.825136][ T6984] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 670.000322][ T6984] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 670.010670][ T6984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.019541][ T6984] usb 3-1: Product: syz [ 670.024157][ T6984] usb 3-1: Manufacturer: syz [ 670.029175][ T6984] usb 3-1: SerialNumber: syz [ 670.034685][ T6984] usb 3-1: config 0 descriptor?? [ 670.076553][ T6984] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 670.107756][ T30] audit: type=1400 audit(1755554306.012:7224): avc: denied { append } for pid=7589 comm="syz.1.2091" name="hwrng" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 670.441904][ T6984] ums-isd200: probe of 3-1:0.0 failed with error -22 [ 670.553249][ T6992] usb 3-1: USB disconnect, device number 39 [ 670.675560][ T7615] 9pnet: Insufficient options for proto=fd [ 670.726140][ T6981] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 670.996982][ T6981] usb 5-1: Using ep0 maxpacket: 16 [ 671.127404][ T6981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.203853][ T6981] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 671.357442][ T6981] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.026347][ T6981] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.059894][ T6981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.068072][ T6981] usb 5-1: Product: syz [ 672.109628][ T6981] usb 5-1: Manufacturer: syz [ 672.134493][ T6981] usb 5-1: SerialNumber: syz [ 672.167794][ T7615] loop5: detected capacity change from 0 to 40427 [ 672.657841][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.806836][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.856288][ T7641] device bridge_slave_0 entered promiscuous mode [ 672.906469][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.943114][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.989458][ T7641] device bridge_slave_1 entered promiscuous mode [ 673.699034][ T7652] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 673.733038][ T7652] kvm: pic: non byte read [ 673.760188][ T7652] kvm: pic: level sensitive irq not supported [ 673.760252][ T7652] kvm: pic: non byte read [ 673.906423][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 673.925201][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.013207][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.063072][ T6981] usb 5-1: unit 3 not found! [ 674.084746][ T6981] usb 5-1: USB disconnect, device number 18 [ 674.087963][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.132811][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.140188][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.179444][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.206943][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.233809][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.241489][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.281139][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.305613][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.323392][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.336665][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 674.351606][ T7641] device veth0_vlan entered promiscuous mode [ 674.359206][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 674.368489][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.376255][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.391246][ T30] audit: type=1400 audit(1755554309.971:7225): avc: denied { watch_reads } for pid=7677 comm="syz.4.2115" path="/131/file1" dev="tmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 674.410224][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.426186][ T7641] device veth1_macvtap entered promiscuous mode [ 674.437538][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 674.463959][ T6984] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 676.036944][ T6309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 676.097632][ T7689] 9pnet: Insufficient options for proto=fd [ 676.130158][ T30] audit: type=1400 audit(1755554311.568:7226): avc: denied { relabelto } for pid=7692 comm="syz.0.2106" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 676.161355][ T30] audit: type=1400 audit(1755554311.568:7227): avc: denied { associate } for pid=7692 comm="syz.0.2106" name="0" dev="tmpfs" ino=13 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 676.194197][ T30] audit: type=1400 audit(1755554311.605:7228): avc: denied { write } for pid=7641 comm="syz-executor" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 676.220747][ T30] audit: type=1400 audit(1755554311.605:7229): avc: denied { remove_name } for pid=7641 comm="syz-executor" name="binderfs" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 676.226472][ T7695] IPv6: sit2: Disabled Multicast RS [ 676.254004][ T30] audit: type=1400 audit(1755554311.605:7230): avc: denied { rmdir } for pid=7641 comm="syz-executor" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 676.349066][ T6984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.360464][ T6984] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 676.370134][ T6984] usb 6-1: config 1 has no interface number 1 [ 676.376897][ T6984] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 676.390974][ T6984] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 255, changing to 7 [ 676.479050][ T6750] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 676.576770][ T6984] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 676.585857][ T6984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.594059][ T6984] usb 6-1: Product: syz [ 676.598620][ T6984] usb 6-1: Manufacturer: syz [ 676.603244][ T6984] usb 6-1: SerialNumber: syz [ 676.619981][ T7676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 676.717383][ T3174] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 676.869136][ T6750] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 676.879766][ T6750] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 676.892136][ T6750] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 676.902373][ T6750] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.915826][ T6750] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 676.934119][ T6750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.981489][ T6750] usb 1-1: invalid MIDI out EP 0 [ 676.988124][ T6750] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 676.998067][ T3174] usb 5-1: Invalid ep0 maxpacket: 16 [ 677.056083][ T7713] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 677.161565][ T3174] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 677.243734][ T6981] usb 1-1: USB disconnect, device number 9 [ 677.443273][ T3174] usb 5-1: Invalid ep0 maxpacket: 16 [ 677.449122][ T3174] usb usb5-port1: attempt power cycle [ 677.529619][ T7730] 9pnet: Insufficient options for proto=fd [ 677.814293][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2132'. [ 677.825312][ T7734] device vlan0 entered promiscuous mode [ 678.054155][ T3174] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 678.201798][ T3174] usb 5-1: Invalid ep0 maxpacket: 16 [ 678.247994][ T30] audit: type=1400 audit(1755554313.534:7231): avc: denied { create } for pid=7742 comm="syz.7.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 678.331973][ T6984] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 678.344607][ T6984] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 678.420691][ T6984] usb 6-1: USB disconnect, device number 30 [ 678.440080][ T3174] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 678.548421][ T3174] usb 5-1: Invalid ep0 maxpacket: 16 [ 678.554243][ T3174] usb usb5-port1: unable to enumerate USB device [ 678.695861][ T7748] loop5: detected capacity change from 0 to 40427 [ 678.975114][ T7767] binder: 7761:7767 ioctl c00c620f 2000000004c0 returned -22 [ 679.363741][ T30] audit: type=1400 audit(1755554314.236:7232): avc: denied { getopt } for pid=7761 comm="syz.1.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 679.389037][ T7767] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 679.399247][ T7767] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 680.310028][ T7773] 9pnet: Insufficient options for proto=fd [ 682.124123][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 682.181062][ T7808] loop5: detected capacity change from 0 to 256 [ 682.379581][ T7806] cgroup: Name too long [ 683.093439][ T30] audit: type=1326 audit(1755554318.001:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.2151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe156c7be9 code=0x0 [ 683.742172][ T7839] selinux_netlink_send: 137 callbacks suppressed [ 683.742196][ T7839] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7839 comm=syz.7.2158 [ 683.800784][ T7839] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7839 comm=syz.7.2158 [ 683.896648][ T7853] netlink: 'syz.0.2159': attribute type 4 has an invalid length. [ 683.908481][ T7853] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2159'. [ 684.554281][ T30] audit: type=1326 audit(1755554319.349:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.1.2164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8930334be9 code=0x0 [ 684.699806][ T30] audit: type=1326 audit(1755554319.478:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 684.747148][ T7863] fuse: Bad value for 'fd' [ 684.762840][ T30] audit: type=1326 audit(1755554319.478:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 684.854478][ T30] audit: type=1326 audit(1755554319.524:7237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 684.886739][ T7856] futex_wake_op: syz.4.2163 tries to shift op by -1; fix this program [ 684.902922][ T7869] 9pnet: Insufficient options for proto=fd [ 684.955339][ T30] audit: type=1326 audit(1755554319.524:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 685.051475][ T30] audit: type=1326 audit(1755554319.524:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 685.087133][ T30] audit: type=1326 audit(1755554319.524:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 685.112664][ T30] audit: type=1326 audit(1755554319.524:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 685.138117][ T30] audit: type=1326 audit(1755554319.524:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 685.718531][ T7885] device veth3 entered promiscuous mode [ 685.734645][ T7886] netlink: 'syz.4.2171': attribute type 5 has an invalid length. [ 685.743392][ T7888] netlink: 'syz.4.2171': attribute type 5 has an invalid length. [ 686.338268][ T3181] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 686.833830][ T7925] fuse: Unknown parameter 'X' [ 686.977513][ T3181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.995301][ T7929] 9pnet: Insufficient options for proto=fd [ 687.627503][ T6981] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 687.707311][ T3181] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 687.716774][ T3181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.725044][ T3181] usb 2-1: Product: syz [ 687.729704][ T3181] usb 2-1: Manufacturer: syz [ 687.735345][ T3181] usb 2-1: SerialNumber: syz [ 687.741459][ T3181] usb 2-1: config 0 descriptor?? [ 688.028543][ T6981] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.046629][ T6981] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 688.068568][ T6981] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 688.253562][ T7950] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 688.266862][ T6981] usb 8-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 688.277544][ T7950] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 688.282049][ T6981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.322771][ T6981] usb 8-1: Product: syz [ 688.323653][ T7950] overlayfs: failed to set xattr on upper [ 688.334760][ T7950] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 688.352726][ T6981] usb 8-1: Manufacturer: syz [ 688.358183][ T6981] usb 8-1: SerialNumber: syz [ 688.376638][ T6981] usb 8-1: config 0 descriptor?? [ 688.601680][ T7976] syz.0.2197[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.602269][ T7976] syz.0.2197[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.624196][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2197'. [ 688.645395][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2197'. [ 689.716700][ T6981] usb 8-1: USB disconnect, device number 19 [ 690.000491][ T3181] usb 2-1: bad CDC descriptors [ 690.006502][ T3181] usb 2-1: unsupported MDLM descriptors [ 690.026020][ T3181] usb 2-1: USB disconnect, device number 35 [ 690.038617][ T7985] 9pnet: Insufficient options for proto=fd [ 690.146664][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 690.146692][ T30] audit: type=1326 audit(1755554324.499:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 690.200861][ T30] audit: type=1326 audit(1755554324.499:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 690.227390][ T30] audit: type=1326 audit(1755554324.499:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 690.253118][ T30] audit: type=1326 audit(1755554324.499:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 690.302923][ T30] audit: type=1326 audit(1755554324.499:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 690.368656][ T30] audit: type=1326 audit(1755554324.499:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 690.417180][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 690.515569][ T7993] incfs: Options parsing error. -22 [ 690.521311][ T7993] incfs: mount failed -22 [ 690.653191][ T7994] syz.7.2204[7994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.928915][ T30] audit: type=1326 audit(1755554324.499:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 691.048625][ T30] audit: type=1326 audit(1755554324.499:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 691.104113][ T30] audit: type=1326 audit(1755554324.499:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 691.134298][ T8007] loop4: detected capacity change from 0 to 512 [ 691.137869][ T30] audit: type=1326 audit(1755554324.499:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 691.398620][ T3162] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 692.059235][ T3162] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.128585][ T3162] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 692.557028][ T6992] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 692.561376][ T3162] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 692.574625][ T3162] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 692.583185][ T3162] usb 8-1: SerialNumber: syz [ 692.968911][ T6992] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 692.992518][ T8062] device bridge0 entered promiscuous mode [ 692.998990][ T6992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.009882][ T8062] device macsec1 entered promiscuous mode [ 693.029550][ T8062] bridge0: port 3(macsec1) entered blocking state [ 693.045664][ T8062] bridge0: port 3(macsec1) entered disabled state [ 693.056335][ T8067] 9pnet: Insufficient options for proto=fd [ 693.064090][ T8062] device bridge0 left promiscuous mode [ 693.121425][ T6992] usb 1-1: config 0 descriptor?? [ 693.164471][ T6992] usb 1-1: selecting invalid altsetting 1 [ 693.171429][ T6992] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 693.196712][ T3162] usb 8-1: bad CDC descriptors [ 693.388983][ T6982] usb 1-1: USB disconnect, device number 10 [ 693.910186][ T8082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.020007][ T3181] usb 8-1: USB disconnect, device number 20 [ 694.317826][ T8112] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2236'. [ 695.232923][ T8124] 9pnet: Insufficient options for proto=fd [ 695.667773][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 695.667791][ T30] audit: type=1326 audit(1755554329.613:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 695.781980][ T30] audit: type=1326 audit(1755554329.613:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 695.819606][ T30] audit: type=1326 audit(1755554329.613:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 695.844303][ T30] audit: type=1326 audit(1755554329.613:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 695.881829][ T30] audit: type=1326 audit(1755554329.613:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 695.938620][ T30] audit: type=1326 audit(1755554329.613:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 695.969998][ T30] audit: type=1326 audit(1755554329.613:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 696.073104][ T30] audit: type=1326 audit(1755554329.613:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 696.101062][ T8140] IPv6: Can't replace route, no match found [ 696.109769][ T8143] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2245'. [ 696.119924][ T30] audit: type=1326 audit(1755554329.613:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 696.146166][ T30] audit: type=1326 audit(1755554329.613:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 696.172867][ T8143] /dev/loop0: Can't open blockdev [ 696.203617][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'. [ 696.214466][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2248'. [ 696.404937][ T8159] overlayfs: failed to clone upperpath [ 696.587474][ T3181] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 696.677794][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.685268][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.697001][ T8165] device bridge_slave_1 left promiscuous mode [ 696.703584][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.713552][ T8165] device bridge_slave_0 left promiscuous mode [ 696.719977][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.870304][ T8169] binder: 8168:8169 ioctl 89f1 200000000640 returned -22 [ 696.886370][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2253'. [ 696.896619][ T3181] usb 1-1: Using ep0 maxpacket: 16 [ 696.912023][ T8169] netem: change failed [ 697.004876][ T8173] loop4: detected capacity change from 0 to 8192 [ 697.455346][ T3181] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 697.482023][ T3181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.583013][ T6982] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 697.599221][ T3181] usb 1-1: Product: syz [ 697.611377][ T3181] usb 1-1: Manufacturer: syz [ 697.624546][ T3181] usb 1-1: SerialNumber: syz [ 697.631189][ T3181] r8152-cfgselector 1-1: config 0 descriptor?? [ 697.943912][ T8221] ------------[ cut here ]------------ [ 697.949709][ T8221] trace type BPF program uses run-time allocation [ 697.956856][ T8221] WARNING: CPU: 1 PID: 8221 at kernel/bpf/verifier.c:11718 check_map_prog_compatibility+0x6cd/0x870 [ 697.968611][ T3181] r8152-cfgselector 1-1: Unknown version 0x0000 [ 697.975291][ T8221] Modules linked in: [ 697.979693][ T8221] CPU: 0 PID: 8221 Comm: syz.5.2269 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 697.990957][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.001522][ T8221] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 698.009504][ T8221] Code: ee ff 48 c7 c6 e0 eb 47 85 4c 8b 65 d0 e9 fd fc ff ff e8 56 4c ee ff c6 05 43 92 6b 05 01 48 c7 c7 40 e8 47 85 e8 a3 e9 24 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 698.009577][ T6982] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 698.031062][ T8221] RSP: 0018:ffffc90002097428 EFLAGS: 00010246 [ 698.040708][ T6982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.047388][ T8221] RAX: 7767424ecedf1000 RBX: 0000000000000001 RCX: ffff88811276e2c0 [ 698.056845][ T6982] usb 8-1: config 0 descriptor?? [ 698.078218][ T8221] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 698.087849][ T8221] RBP: ffffc90002097470 R08: dffffc0000000000 R09: ffffed103ee265e8 [ 698.096319][ T8221] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: ffff8881261b4000 [ 698.104712][ T8221] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888133126000 [ 698.113131][ T8221] FS: 00007efe141306c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 698.125932][ T8221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.133940][ T8221] CR2: 00007fa152301aee CR3: 0000000114a2a000 CR4: 00000000003506b0 [ 698.143109][ T8221] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 698.151848][ T8221] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 698.161266][ T8221] Call Trace: [ 698.165461][ T8221] [ 698.168851][ T8221] resolve_pseudo_ldimm64+0x685/0x11d0 [ 698.175042][ T8221] ? check_attach_btf_id+0xde0/0xde0 [ 698.180759][ T8221] ? __mark_reg_known+0x1b0/0x1b0 [ 698.186363][ T8221] ? security_capable+0x87/0xb0 [ 698.190885][ T3162] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 698.191618][ T8221] bpf_check+0x2c44/0xf330 [ 698.203997][ T8221] ? 0xffffffffa002a000 [ 698.208521][ T8221] ? is_bpf_text_address+0x177/0x190 [ 698.214105][ T8221] ? bpf_get_btf_vmlinux+0x60/0x60 [ 698.220513][ T8221] ? unwind_get_return_address+0x4d/0x90 [ 698.226356][ T8221] ? stack_trace_save+0xe0/0xe0 [ 698.232251][ T8221] ? arch_stack_walk+0xee/0x140 [ 698.237735][ T8221] ? stack_trace_save+0x98/0xe0 [ 698.242732][ T8221] ? __stack_depot_save+0x34/0x480 [ 698.248548][ T8221] ? __kasan_slab_alloc+0x69/0xf0 [ 698.253801][ T8221] ? _find_next_bit+0x1fa/0x200 [ 698.259858][ T8221] ? __kasan_kmalloc+0xec/0x110 [ 698.265172][ T8221] ? __kasan_kmalloc+0xda/0x110 [ 698.270854][ T8221] ? kmem_cache_alloc_trace+0x119/0x270 [ 698.276949][ T8221] ? selinux_bpf_prog_alloc+0x51/0x140 [ 698.283259][ T8221] ? security_bpf_prog_alloc+0x62/0x90 [ 698.289245][ T8221] ? bpf_prog_load+0x97c/0x1550 [ 698.294687][ T8221] ? __sys_bpf+0x4c3/0x730 [ 698.300743][ T8221] ? __x64_sys_bpf+0x7c/0x90 [ 698.306319][ T8221] ? x64_sys_call+0x4b9/0x9a0 [ 698.311999][ T8221] ? do_syscall_64+0x4c/0xa0 [ 698.316723][ T8221] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 698.324137][ T8221] ? check_stack_object+0x81/0x140 [ 698.330161][ T8221] ? memset+0x35/0x40 [ 698.334502][ T8221] ? bpf_obj_name_cpy+0x193/0x1e0 [ 698.339902][ T8221] bpf_prog_load+0x1042/0x1550 [ 698.346322][ T8221] ? __anon_inode_getfd+0x34b/0x3b0 [ 698.352298][ T8221] ? map_freeze+0x360/0x360 [ 698.357122][ T8221] ? selinux_bpf+0xc7/0xf0 [ 698.361854][ T8221] ? security_bpf+0x82/0xa0 [ 698.367049][ T8221] __sys_bpf+0x4c3/0x730 [ 698.367183][ T6984] usb 1-1: USB disconnect, device number 11 [ 698.371334][ T8221] ? bpf_link_show_fdinfo+0x310/0x310 [ 698.383305][ T8221] ? __kasan_check_write+0x14/0x20 [ 698.388899][ T8221] ? switch_fpu_return+0x15d/0x2c0 [ 698.394608][ T8221] __x64_sys_bpf+0x7c/0x90 [ 698.400214][ T8221] x64_sys_call+0x4b9/0x9a0 [ 698.404911][ T8221] do_syscall_64+0x4c/0xa0 [ 698.409397][ T8221] ? clear_bhb_loop+0x50/0xa0 [ 698.414229][ T8221] ? clear_bhb_loop+0x50/0xa0 [ 698.419473][ T8221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 698.425819][ T8221] RIP: 0033:0x7efe156c7be9 [ 698.431571][ T8221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.452771][ T8221] RSP: 002b:00007efe14130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.461584][ T8221] RAX: ffffffffffffffda RBX: 00007efe158eefa0 RCX: 00007efe156c7be9 [ 698.470689][ T8221] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 698.511676][ T8221] RBP: 00007efe1574ae19 R08: 0000000000000000 R09: 0000000000000000 [ 698.521633][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.531988][ T8221] R13: 00007efe158ef038 R14: 00007efe158eefa0 R15: 00007ffc740b6108 [ 698.542427][ T8221] [ 698.546514][ T8221] ---[ end trace edc3892cac3ff3bc ]--- [ 698.732795][ T3162] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 698.745563][ T3162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.768342][ T3162] usb 2-1: config 0 descriptor?? [ 699.072012][ T3162] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 699.079448][ T6982] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 699.097212][ T6982] asix: probe of 8-1:0.0 failed with error -61 [ 700.455490][ T3181] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 700.618359][ T3162] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 700.647537][ T3162] asix: probe of 2-1:0.0 failed with error -71 [ 700.692017][ T3162] usb 2-1: USB disconnect, device number 36 [ 700.845303][ T3181] usb 5-1: device descriptor read/64, error -71 [ 701.060271][ T6984] usb 8-1: USB disconnect, device number 21 [ 701.273550][ T8283] fuse: Bad value for 'fd' [ 701.404885][ T8287] 9pnet: Insufficient options for proto=fd [ 701.470548][ T3181] usb 5-1: device descriptor read/64, error -71 [ 702.004576][ T3181] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 702.051059][ T8283] 9pnet: Insufficient options for proto=fd [ 702.697862][ T3181] usb 5-1: device descriptor read/64, error -71 [ 702.896707][ T6981] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 703.142044][ T3181] usb 5-1: device descriptor read/64, error -71 [ 703.164113][ T6981] usb 2-1: Using ep0 maxpacket: 32 [ 703.294505][ T6981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.296721][ T3181] usb usb5-port1: attempt power cycle [ 703.330605][ T6981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.343070][ T6981] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 703.353434][ T6981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.362775][ T6981] usb 2-1: config 0 descriptor?? [ 703.368721][ T8318] UDC core: couldn't find an available UDC or it's busy: -16 [ 703.376985][ T8318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 703.439339][ T8320] overlayfs: failed to clone upperpath [ 703.593520][ T6981] hub 2-1:0.0: USB hub found [ 703.629664][ T3179] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 703.651352][ T8311] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 703.662194][ T6981] hub 2-1:0.0: 1 port detected [ 703.663733][ T8327] loop4: detected capacity change from 0 to 512 [ 703.976364][ T8311] usb 1-1: Using ep0 maxpacket: 16 [ 704.120645][ T3179] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.131937][ T8311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.144880][ T3179] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.274473][ T8311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.284774][ T8311] usb 1-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00 [ 704.294763][ T8311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.312430][ T8311] usb 1-1: config 0 descriptor?? [ 704.344748][ T3181] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 704.366487][ T3179] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 704.366530][ T6981] hub 2-1:0.0: activate --> -90 [ 704.376074][ T3179] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.389960][ T3179] usb 8-1: SerialNumber: syz [ 704.432065][ T3179] usb 8-1: 0:2 : does not exist [ 704.442284][ T3181] usb 5-1: Using ep0 maxpacket: 32 [ 704.572320][ T3181] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.574717][ T8325] usb 1-1: USB disconnect, device number 12 [ 704.582570][ T3181] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 704.601222][ T3181] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 704.615084][ T3181] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.622870][ T3181] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 704.632269][ T3181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.641713][ T3181] usb 5-1: config 0 descriptor?? [ 704.648190][ T6981] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 704.888551][ T3174] usb 8-1: USB disconnect, device number 22 [ 704.995685][ T3179] usb 2-1: USB disconnect, device number 37 [ 705.137674][ T3181] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 705.359273][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 705.359292][ T30] audit: type=1400 audit(1755554338.547:7628): avc: denied { getopt } for pid=8363 comm="syz.5.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 705.394506][ T3181] hid-thrustmaster 0003:044F:B65D.0015: setup data couldn't be sent [ 705.422954][ T3181] usb 5-1: USB disconnect, device number 25 [ 705.430145][ C1] hid-thrustmaster 0003:044F:B65D.0015: URB to get model id failed with error -71 [ 705.472220][ T30] audit: type=1400 audit(1755554338.649:7629): avc: denied { sys_module } for pid=8367 comm="syz.5.2309" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 705.517045][ T30] audit: type=1400 audit(1755554338.704:7630): avc: denied { map } for pid=8372 comm="syz.7.2310" path="socket:[46929]" dev="sockfs" ino=46929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 705.803195][ T3174] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 705.869086][ T8405] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 706.031021][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2320'. [ 706.189696][ T3174] usb 2-1: Using ep0 maxpacket: 16 [ 706.310509][ T8410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8410 comm=syz.4.2321 [ 706.349207][ T3174] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 706.366447][ T3174] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 17356, setting to 1024 [ 706.380615][ T3174] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 706.397956][ T3174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 706.418279][ T3174] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 706.430560][ T3174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.440447][ T30] audit: type=1326 audit(1755554339.554:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 706.447309][ T3174] usb 2-1: config 0 descriptor?? [ 706.492002][ T30] audit: type=1326 audit(1755554339.581:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 706.521614][ T30] audit: type=1326 audit(1755554339.581:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 706.547819][ T30] audit: type=1326 audit(1755554339.581:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 706.576224][ T30] audit: type=1400 audit(1755554339.581:7635): avc: denied { getopt } for pid=8420 comm="syz.4.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 706.601003][ T30] audit: type=1326 audit(1755554339.581:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 706.604691][ T8424] loop4: detected capacity change from 0 to 1024 [ 706.628138][ T30] audit: type=1326 audit(1755554339.581:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.4.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 706.675647][ T8424] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 706.688316][ T8424] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 706.708107][ T8424] JBD2: no valid journal superblock found [ 706.714662][ T8424] EXT4-fs (loop4): error loading journal [ 706.839546][ T3174] hid (null): global environment stack underflow [ 706.918466][ T3174] hid (null): unknown global tag 0xd [ 706.931087][ T3174] hid (null): unknown global tag 0xcb [ 706.942460][ T3174] hid (null): unknown global tag 0xd [ 706.962883][ T3174] hid (null): invalid report_size 63505 [ 706.980761][ T3174] hid (null): bogus close delimiter [ 708.180708][ T8450] loop4: detected capacity change from 0 to 512 [ 708.847602][ T3179] usb 2-1: USB disconnect, device number 38 [ 708.880423][ T8461] tap0: tun_chr_ioctl cmd 1074025677 [ 708.886874][ T8461] tap0: linktype set to 769 [ 709.287237][ T8470] device veth3 left promiscuous mode [ 709.305061][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 709.351654][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 710.799683][ T3174] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 710.814098][ T8506] 9pnet: Insufficient options for proto=fd [ 711.270578][ T8508] fuse: Unknown parameter '' [ 711.799295][ T3181] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 711.909763][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2351'. [ 712.015391][ T3174] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.025820][ T3174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.034699][ T3174] usb 5-1: Product: syz [ 712.039138][ T3174] usb 5-1: Manufacturer: syz [ 712.044289][ T3174] usb 5-1: SerialNumber: syz [ 712.108276][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 712.108294][ T30] audit: type=1326 audit(1755554344.778:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.140832][ T8529] fuse: Bad value for 'group_id' [ 712.146419][ T3181] usb 1-1: Using ep0 maxpacket: 16 [ 712.152152][ T30] audit: type=1326 audit(1755554344.778:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.176530][ T30] audit: type=1326 audit(1755554344.778:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.201911][ T30] audit: type=1326 audit(1755554344.778:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.227240][ T30] audit: type=1326 audit(1755554344.778:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.252522][ T30] audit: type=1326 audit(1755554344.815:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.277324][ T30] audit: type=1326 audit(1755554344.815:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.303929][ T30] audit: type=1326 audit(1755554344.815:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.308063][ T3181] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.343560][ T30] audit: type=1326 audit(1755554344.815:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.368110][ T30] audit: type=1326 audit(1755554344.815:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 712.403963][ T3181] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.721677][ T3181] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.783668][ T3181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.912833][ T3181] usb 1-1: Product: syz [ 712.956162][ T3181] usb 1-1: Manufacturer: syz [ 713.079750][ T3181] usb 1-1: SerialNumber: syz [ 713.999054][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2355'. [ 714.054084][ T8542] binder: 8541:8542 ioctl 4018620d 0 returned -22 [ 714.101179][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2355'. [ 714.149678][ T3174] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 714.166980][ T3174] cdc_ncm 5-1:1.0: bind() failure [ 714.184153][ T3174] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 714.191974][ T8549] UDC core: couldn't find an available UDC or it's busy: -16 [ 714.211453][ T3174] cdc_ncm 5-1:1.1: bind() failure [ 714.217271][ T8549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.237446][ T3174] usb 5-1: USB disconnect, device number 26 [ 714.260208][ T8517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=8517 comm=syz.0.2343 [ 714.355676][ T3181] usb 1-1: 0:2 : does not exist [ 714.360726][ T3181] usb 1-1: unit 9 not found! [ 714.470375][ T8575] 9pnet: Insufficient options for proto=fd [ 714.604932][ T3181] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 714.622938][ T3181] usb 1-1: USB disconnect, device number 13 [ 714.630369][ T3174] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 715.157506][ T3174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.283241][ T3174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.548283][ T3174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 715.996304][ T3174] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.005773][ T3174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.265443][ T3174] usb 5-1: config 0 descriptor?? [ 719.083004][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 719.083023][ T30] audit: type=1326 audit(1755554351.220:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.1.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7fc00000 [ 719.145416][ T8609] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 719.158429][ T30] audit: type=1326 audit(1755554351.294:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 719.196038][ T30] audit: type=1326 audit(1755554351.313:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 719.290471][ T30] audit: type=1326 audit(1755554351.313:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 719.321714][ T8620] incfs: Options parsing error. -22 [ 719.327300][ T8620] incfs: mount failed -22 [ 719.345881][ T30] audit: type=1326 audit(1755554351.313:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 719.643612][ T30] audit: type=1326 audit(1755554351.313:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 719.686007][ T3174] usbhid 5-1:0.0: can't add hid device: -71 [ 719.692210][ T3174] usbhid: probe of 5-1:0.0 failed with error -71 [ 719.783469][ T30] audit: type=1326 audit(1755554351.313:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 721.029254][ T3174] usb 5-1: USB disconnect, device number 27 [ 721.120901][ T8627] 9pnet: Insufficient options for proto=fd [ 721.128421][ T30] audit: type=1326 audit(1755554351.313:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 721.182932][ T30] audit: type=1326 audit(1755554351.313:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 721.219614][ T8645] xt_TCPMSS: Only works on TCP SYN packets [ 721.227567][ T8647] xt_TCPMSS: Only works on TCP SYN packets [ 721.262425][ T30] audit: type=1326 audit(1755554351.313:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 721.414565][ T8664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.125872][ T8727] loop4: detected capacity change from 0 to 256 [ 722.203015][ T8727] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 722.606188][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2402'. [ 722.626292][ T8736] overlayfs: failed to resolve './file0': -2 [ 722.704791][ T8745] UDC core: couldn't find an available UDC or it's busy: -16 [ 722.720175][ T8745] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.365936][ T8801] loop4: detected capacity change from 0 to 40427 [ 724.390272][ T8803] overlayfs: failed to clone upperpath [ 724.432253][ T8801] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 724.456064][ T8801] F2FS-fs (loop4): invalid crc value [ 724.475473][ T8801] F2FS-fs (loop4): invalid crc value [ 724.481751][ T8801] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 724.638506][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 724.638524][ T30] audit: type=1326 audit(1755554356.352:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.7.2426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd710f87be9 code=0x0 [ 724.695219][ T8812] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2427'. [ 724.705666][ T30] audit: type=1326 audit(1755554356.417:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.7.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 724.752608][ T30] audit: type=1326 audit(1755554356.444:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.7.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 724.781408][ T30] audit: type=1326 audit(1755554356.444:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.7.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd710f87be9 code=0x7ffc0000 [ 724.867206][ T30] audit: type=1326 audit(1755554356.564:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 724.893996][ T30] audit: type=1326 audit(1755554356.583:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 724.919114][ T30] audit: type=1326 audit(1755554356.583:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 724.944988][ T30] audit: type=1326 audit(1755554356.583:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 724.969801][ T30] audit: type=1326 audit(1755554356.583:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 724.994531][ T30] audit: type=1326 audit(1755554356.583:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 725.340242][ T8836] loop4: detected capacity change from 0 to 512 [ 725.412430][ T8836] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 725.430806][ T8836] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.459699][ T8836] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 725.477427][ T8836] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 725.866505][ T8836] EXT4-fs (loop4): This should not happen!! Data will be lost [ 725.866505][ T8836] [ 725.886598][ T8846] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2435'. [ 725.889412][ T8836] EXT4-fs (loop4): Total free blocks count 0 [ 725.909099][ T8836] EXT4-fs (loop4): Free/Dirty block details [ 725.916104][ T8836] EXT4-fs (loop4): free_blocks=39626 [ 725.922772][ T8836] EXT4-fs (loop4): dirty_blocks=1 [ 725.929075][ T8836] EXT4-fs (loop4): Block reservation details [ 725.947390][ T8836] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 726.174054][ T8869] syz.4.2441[8869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.174141][ T8869] syz.4.2441[8869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.305993][ T60] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 726.335905][ T8874] incfs: Error accessing: ./file0. [ 726.342016][ T8874] incfs: mount failed -20 [ 726.495682][ T8878] loop4: detected capacity change from 0 to 1024 [ 727.497119][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2446'. [ 727.511338][ T8878] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 727.524000][ T8878] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 727.638264][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 727.768356][ T60] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.790305][ T60] usb 2-1: config 0 interface 0 has no altsetting 0 [ 727.861657][ T8909] overlayfs: failed to resolve './file1': -2 [ 727.952520][ T8726] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 728.118506][ T60] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 728.128985][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.147716][ T60] usb 2-1: config 0 descriptor?? [ 728.364259][ T8726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 728.375997][ T8726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.387751][ T8726] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 728.397984][ T8726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.408234][ T8726] usb 5-1: config 0 descriptor?? [ 728.519254][ T8911] netlink: 'syz.5.2454': attribute type 3 has an invalid length. [ 728.754373][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 728.760846][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 728.769424][ T60] usb 2-1: USB disconnect, device number 39 [ 728.866917][ T8923] syz.0.2456[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.867467][ T8923] syz.0.2456[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 728.891015][ T8923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.944707][ T8923] 9pnet: Insufficient options for proto=fd [ 729.006689][ T8726] hid-generic 0003:1B1C:1C1E.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1c1e] on usb-dummy_hcd.4-1/input0 [ 729.240385][ T8724] usb 5-1: USB disconnect, device number 28 [ 729.806810][ T6981] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 729.905954][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2458'. [ 729.915977][ T8926] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2458'. [ 729.953425][ T8929] bridge_slave_0: default FDB implementation only supports local addresses [ 729.994618][ T8934] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 730.113390][ T8941] ------------[ cut here ]------------ [ 730.119677][ T6981] usb 8-1: Using ep0 maxpacket: 16 [ 730.125021][ T8941] WARNING: CPU: 0 PID: 8941 at mm/page_alloc.c:5770 __alloc_pages+0x376/0x440 [ 730.134655][ T8941] Modules linked in: [ 730.139683][ T8941] CPU: 0 PID: 8941 Comm: syz.1.2463 Tainted: G W 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 730.145043][ T8949] loop4: detected capacity change from 0 to 256 [ 730.167560][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.178488][ T8941] RIP: 0010:__alloc_pages+0x376/0x440 [ 730.189082][ T8941] Code: ff e8 ae 85 00 03 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 75 fd ff ff 41 89 ff 4c 89 e7 e8 92 c0 04 00 44 89 ff e9 62 fd ff ff <0f> 0b e9 1f ff ff ff 65 8b 05 34 a7 5f 7e 89 44 24 08 c1 e8 06 48 [ 730.210590][ T8941] RSP: 0018:ffffc90002027720 EFLAGS: 00010246 [ 730.217401][ T8941] RAX: ffffc90002027780 RBX: 0000000000000016 RCX: 0000000000000000 [ 730.226785][ T8941] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90002027798 [ 730.241238][ T8941] RBP: ffffc90002027808 R08: dffffc0000000000 R09: ffffc90002027780 [ 730.250761][ T8941] R10: fffff52000404ef3 R11: 1ffff92000404ef0 R12: ffffc90002027760 [ 730.259002][ T8941] R13: dffffc0000000000 R14: 1ffff92000404ee8 R15: 0000000000000000 [ 730.269126][ T8941] FS: 00007f892ed9d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 730.279675][ T8941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.287881][ T8941] CR2: 000000110c2fc0c6 CR3: 000000010faad000 CR4: 00000000003526a0 [ 730.412031][ T8941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 730.454907][ T8941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 730.495883][ T8941] Call Trace: [ 730.513792][ T8941] [ 730.529842][ T8941] ? prep_new_page+0x110/0x110 [ 730.556815][ T8941] kmalloc_order+0x4c/0x160 [ 730.581384][ T8941] kmalloc_order_trace+0x18/0xb0 [ 730.608074][ T8941] __kmalloc+0x199/0x2c0 [ 730.633473][ T8941] ? memset+0x35/0x40 [ 730.662497][ T8941] hashtab_init+0xcd/0x160 [ 730.689239][ T8941] symtab_init+0x40/0x60 [ 730.715886][ T8941] policydb_read+0x9ae/0x2d30 [ 730.741717][ T8941] security_load_policy+0x154/0xf10 [ 730.747991][ T8941] ? irqentry_exit+0x37/0x40 [ 730.753066][ T8941] ? exc_page_fault+0x5e/0xb0 [ 730.758961][ T8941] ? asm_exc_page_fault+0x27/0x30 [ 730.764353][ T8941] ? selinux_policy_commit+0x540/0x540 [ 730.770601][ T8941] ? copy_user_enhanced_fast_string+0xe/0x40 [ 730.776825][ T8941] ? _copy_from_user+0x95/0xd0 [ 730.782935][ T8941] sel_write_load+0x36f/0x5e0 [ 730.788018][ T8941] ? sel_make_dir+0x280/0x280 [ 730.792946][ T8941] ? security_file_permission+0x83/0xa0 [ 730.798563][ T8941] ? sel_make_dir+0x280/0x280 [ 730.803829][ T6981] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 730.803932][ T8941] vfs_write+0x3ee/0xf70 [ 730.812822][ T6981] usb 8-1: config 0 has no interface number 0 [ 730.818031][ T8941] ? file_end_write+0x1b0/0x1b0 [ 730.829016][ T8941] ? __fget_files+0x2c4/0x320 [ 730.833883][ T8941] ? __kasan_check_write+0x14/0x20 [ 730.839916][ T8941] ? mutex_lock+0x95/0x1a0 [ 730.844558][ T8941] ? wait_for_completion_killable_timeout+0x10/0x10 [ 730.852027][ T8941] ? __fget_files+0x2c4/0x320 [ 730.857233][ T8941] ? __fdget_pos+0x2d2/0x380 [ 730.862258][ T8941] ? ksys_write+0x71/0x240 [ 730.867600][ T8941] ksys_write+0x140/0x240 [ 730.872613][ T8941] ? __ia32_sys_read+0x90/0x90 [ 730.879230][ T8941] ? __kasan_check_write+0x14/0x20 [ 730.884567][ T8941] ? switch_fpu_return+0x15d/0x2c0 [ 730.890757][ T8941] __x64_sys_write+0x7b/0x90 [ 730.895600][ T8941] x64_sys_call+0x8ef/0x9a0 [ 730.901322][ T8941] do_syscall_64+0x4c/0xa0 [ 730.906360][ T8941] ? clear_bhb_loop+0x50/0xa0 [ 730.913369][ T8941] ? clear_bhb_loop+0x50/0xa0 [ 730.918283][ T8941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 730.925958][ T8941] RIP: 0033:0x7f8930334be9 [ 730.930973][ T8941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.955432][ T8941] RSP: 002b:00007f892ed9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 730.964441][ T8941] RAX: ffffffffffffffda RBX: 00007f893055bfa0 RCX: 00007f8930334be9 [ 730.973024][ T8941] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 000000000000000d [ 730.982299][ T8941] RBP: 00007f89303b7e19 R08: 0000000000000000 R09: 0000000000000000 [ 731.008125][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.029018][ T8941] R13: 00007f893055c038 R14: 00007f893055bfa0 R15: 00007ffc122510d8 [ 731.121877][ T8941] [ 731.125591][ T8941] ---[ end trace edc3892cac3ff3bd ]--- [ 731.133581][ T8941] SELinux: failed to load policy [ 731.258429][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 731.982914][ T6981] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=da.32 [ 731.992012][ T6981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.000172][ T6981] usb 8-1: Product: syz [ 732.004616][ T6981] usb 8-1: Manufacturer: syz [ 732.009333][ T6981] usb 8-1: SerialNumber: syz [ 732.016182][ T6981] usb 8-1: config 0 descriptor?? [ 732.017538][ T8983] syz.7.2470[8983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 732.021515][ T8983] syz.7.2470[8983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 732.038790][ T6981] usb 8-1: can't set config #0, error -71 [ 732.066264][ T6981] usb 8-1: USB disconnect, device number 23 [ 732.999568][ T8997] syz.5.2476[8997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 732.999661][ T8997] syz.5.2476[8997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 733.104479][ T9003] tipc: Started in network mode [ 733.120484][ T6981] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 733.123335][ T9003] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 733.141517][ T9003] tipc: Enabling of bearer rejected, failed to enable media [ 733.150448][ T448] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 733.521476][ T6981] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.532198][ T6981] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.545495][ T448] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 253, using maximum allowed: 30 [ 733.557406][ T448] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 733.569125][ T448] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.579292][ T448] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 733.592515][ T448] usb 1-1: config 0 interface 0 has no altsetting 0 [ 733.599610][ T448] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 733.609102][ T448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.617994][ T448] usb 1-1: config 0 descriptor?? [ 733.640715][ T6981] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 733.650124][ T6981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 733.658827][ T6981] usb 8-1: SerialNumber: syz [ 733.705879][ T6981] usb 8-1: bad CDC descriptors [ 733.711306][ T6981] usb-storage 8-1:1.0: USB Mass Storage device detected [ 733.720593][ T6981] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 733.821052][ T9008] loop4: detected capacity change from 0 to 512 [ 733.935519][ T6981] usb 8-1: USB disconnect, device number 24 [ 733.948194][ T9016] loop4: detected capacity change from 0 to 512 [ 734.219575][ T9016] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 734.249760][ T9016] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.319899][ T448] usb 1-1: string descriptor 0 read error: -71 [ 735.330729][ T6992] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 735.476686][ T9067] loop4: detected capacity change from 0 to 1024 [ 735.559126][ T9067] EXT4-fs (loop4): Ignoring removed nobh option [ 735.626081][ T9067] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.2486: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 735.648641][ T9067] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2486: couldn't read orphan inode 11 (err -117) [ 735.663665][ T9067] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 735.720959][ T9067] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.2486: Invalid block bitmap block 0 in block_group 0 [ 735.737133][ T9067] __quota_error: 40 callbacks suppressed [ 735.737165][ T9067] Quota error (device loop4): write_blk: dquota write failed [ 735.750571][ T9067] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 735.761065][ T9067] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.2486: Failed to acquire dquot type 0 [ 735.872092][ T30] audit: type=1326 audit(1755554366.708:7877): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.2495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x0 [ 736.392453][ T448] usbhid 1-1:0.0: can't add hid device: -71 [ 736.399000][ T448] usbhid: probe of 1-1:0.0 failed with error -71 [ 736.410392][ T448] usb 1-1: USB disconnect, device number 14 [ 736.500980][ T6992] usb 2-1: Using ep0 maxpacket: 8 [ 736.526866][ T30] audit: type=1400 audit(1755554367.317:7878): avc: denied { lock } for pid=9081 comm="syz.4.2497" path="socket:[50065]" dev="sockfs" ino=50065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 736.712643][ T9091] 9pnet: Insufficient options for proto=fd [ 736.739733][ T6992] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 736.751478][ T6992] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 736.761016][ T6992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.770113][ T6992] usb 2-1: config 0 descriptor?? [ 736.867560][ T9093] overlayfs: failed to resolve './file0': -2 [ 738.381049][ T8725] usb 2-1: USB disconnect, device number 40 [ 738.447331][ T9111] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 739.176695][ T6981] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 739.577920][ T6981] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.609520][ T6981] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.620689][ T6981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 739.627965][ T6981] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 739.638519][ T6981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.648034][ T6981] usb 1-1: config 0 descriptor?? [ 742.006096][ T9158] loop4: detected capacity change from 0 to 1024 [ 745.664699][ T9161] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2521'. [ 745.694060][ T9167] netlink: 'syz.1.2523': attribute type 1 has an invalid length. [ 745.791548][ T9176] 9pnet: Insufficient options for proto=fd [ 745.867839][ T9176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9176 comm=syz.5.2525 [ 745.914533][ T6248] Bluetooth: hci0: Frame reassembly failed (-84) [ 746.147760][ T9187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.155321][ T9187] IPv6: NLM_F_CREATE should be set when creating new route [ 746.171471][ T6981] usbhid 1-1:0.0: can't add hid device: -71 [ 746.177513][ T30] audit: type=1326 audit(1755554376.224:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.204651][ T6981] usbhid: probe of 1-1:0.0 failed with error -71 [ 746.222687][ T6981] usb 1-1: USB disconnect, device number 15 [ 746.261662][ T30] audit: type=1326 audit(1755554376.224:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.355203][ T30] audit: type=1326 audit(1755554376.224:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.448445][ T30] audit: type=1326 audit(1755554376.224:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.544014][ T6980] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 746.557450][ T30] audit: type=1326 audit(1755554376.224:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.640712][ T30] audit: type=1326 audit(1755554376.224:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.736967][ T30] audit: type=1326 audit(1755554376.224:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.821991][ T30] audit: type=1326 audit(1755554376.224:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.855385][ T30] audit: type=1326 audit(1755554376.224:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.881807][ T30] audit: type=1326 audit(1755554376.224:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8930334be9 code=0x7ffc0000 [ 746.965942][ T6981] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 746.982714][ T6981] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 746.992943][ T6980] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 747.008526][ T6980] usb 2-1: config 0 has no interface number 0 [ 747.032165][ T6980] usb 2-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 747.050217][ T6980] usb 2-1: config 0 interface 152 has no altsetting 0 [ 747.269961][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2538'. [ 747.334934][ T6981] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 747.346073][ T6980] usb 2-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 747.356795][ T6980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.364912][ T6980] usb 2-1: Product: syz [ 747.369614][ T6980] usb 2-1: Manufacturer: syz [ 747.374588][ T6980] usb 2-1: SerialNumber: syz [ 747.381136][ T6980] usb 2-1: config 0 descriptor?? [ 747.398880][ T9213] xt_hashlimit: max too large, truncated to 1048576 [ 747.400675][ T9187] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 747.432502][ T448] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 747.594944][ T6981] usb 1-1: Using ep0 maxpacket: 16 [ 747.703422][ T6980] cdc_subset: probe of 2-1:0.152 failed with error -71 [ 747.711822][ T6980] usb 2-1: USB disconnect, device number 41 [ 747.725166][ T6981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.738347][ T6981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.749025][ T6981] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 747.758520][ T6981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.767865][ T6981] usb 1-1: config 0 descriptor?? [ 747.822510][ T448] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 747.836801][ T448] usb 8-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 747.847421][ T448] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 747.862519][ T448] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 747.873452][ T448] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.884727][ T448] usb 8-1: config 0 descriptor?? [ 747.925613][ T9220] xt_bpf: check failed: parse error [ 747.934288][ T448] usb-storage 8-1:0.0: USB Mass Storage device detected [ 747.943675][ T448] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 748.160644][ T448] usb 8-1: USB disconnect, device number 25 [ 748.219495][ T8704] Bluetooth: hci0: command 0x1003 tx timeout [ 748.234172][ T3121] Bluetooth: hci0: sending frame failed (-49) [ 748.353365][ T6981] usbhid 1-1:0.0: can't add hid device: -71 [ 748.360033][ T6981] usbhid: probe of 1-1:0.0 failed with error -71 [ 748.367345][ T6981] usb 1-1: USB disconnect, device number 16 [ 749.122536][ T8704] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 749.382604][ T8704] usb 1-1: Using ep0 maxpacket: 32 [ 749.512689][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.524317][ T8704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.534312][ T8704] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 749.543891][ T8704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.553329][ T8704] usb 1-1: config 0 descriptor?? [ 749.768701][ T9272] 9pnet: Insufficient options for proto=fd [ 750.071952][ T8704] savu 0003:1E7D:2D5A.0019: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 750.412465][ T8704] Bluetooth: hci0: command 0x1001 tx timeout [ 750.425813][ T3121] Bluetooth: hci0: sending frame failed (-49) [ 751.648551][ T9288] tmpfs: Unknown parameter 'nolazytime˙˙' [ 752.032071][ T9290] overlayfs: missing 'lowerdir' [ 752.665330][ T8724] Bluetooth: hci0: command 0x1009 tx timeout [ 752.990341][ T6981] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 753.247733][ T9321] tipc: Enabling of bearer rejected, failed to enable media [ 753.330256][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 753.330278][ T30] audit: type=1326 audit(1755554382.805:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.360781][ T30] audit: type=1326 audit(1755554382.805:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.389335][ T30] audit: type=1326 audit(1755554382.805:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.414766][ T30] audit: type=1326 audit(1755554382.805:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.440678][ T30] audit: type=1326 audit(1755554382.805:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.469269][ T30] audit: type=1326 audit(1755554382.805:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.494151][ T30] audit: type=1326 audit(1755554382.805:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.518952][ T30] audit: type=1326 audit(1755554382.805:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.543688][ T30] audit: type=1326 audit(1755554382.805:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.568656][ T30] audit: type=1326 audit(1755554382.805:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fac31581be9 code=0x7ffc0000 [ 753.672907][ T8724] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 753.965442][ T8724] usb 8-1: device descriptor read/64, error -71 [ 754.031640][ T6264] Bluetooth: hci1: Frame reassembly failed (-84) [ 754.182952][ T448] usb 1-1: USB disconnect, device number 17 [ 754.435975][ T9346] overlayfs: failed to clone upperpath [ 754.485972][ T8724] usb 8-1: device descriptor read/64, error -71 [ 754.778012][ T8724] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 755.070636][ T8724] usb 8-1: device descriptor read/64, error -71 [ 755.666479][ T8724] usb 8-1: device descriptor read/64, error -71 [ 755.797023][ T8724] usb usb8-port1: attempt power cycle [ 756.240783][ T8724] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 756.277700][ T6981] Bluetooth: hci1: command 0x1003 tx timeout [ 756.284294][ T9335] Bluetooth: hci1: sending frame failed (-49) [ 756.446624][ T8724] usb 8-1: device descriptor read/8, error -71 [ 756.695731][ T8724] usb 8-1: device descriptor read/8, error -71 [ 758.472508][ T8704] Bluetooth: hci1: command 0x1001 tx timeout [ 758.481631][ T1289] Bluetooth: hci1: sending frame failed (-49) [ 759.037752][ T9397] overlayfs: failed to resolve './file1': -2 [ 759.350992][ T9432] SELinux: failed to load policy [ 759.477441][ T9434] loop4: detected capacity change from 0 to 40427 [ 759.535510][ T9434] F2FS-fs (loop4): fault_injection options not supported [ 759.544768][ T9434] F2FS-fs (loop4): invalid crc value [ 759.552336][ T9434] F2FS-fs (loop4): Found nat_bits in checkpoint [ 759.584045][ T9434] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 759.598781][ T9434] attempt to access beyond end of device [ 759.598781][ T9434] loop4: rw=2049, want=45104, limit=40427 [ 759.620361][ T5083] attempt to access beyond end of device [ 759.620361][ T5083] loop4: rw=2049, want=45112, limit=40427 [ 759.798845][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 759.798863][ T30] audit: type=1326 audit(1755554388.805:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9441 comm="syz.4.2603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0552b43be9 code=0x0 [ 760.503419][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 760.513728][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 761.183114][ T8724] Bluetooth: hci1: command 0x1009 tx timeout [ 761.226800][ T9487] loop4: detected capacity change from 0 to 256 [ 762.582512][ T30] audit: type=1400 audit(1755554391.371:7974): avc: denied { bind } for pid=9491 comm="syz.7.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 762.643692][ T30] audit: type=1400 audit(1755554391.389:7975): avc: denied { listen } for pid=9491 comm="syz.7.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 762.783944][ T30] audit: type=1400 audit(1755554391.398:7976): avc: denied { read } for pid=9491 comm="syz.7.2618" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 762.839465][ T30] audit: type=1400 audit(1755554391.611:7977): avc: denied { mounton } for pid=9502 comm="syz.1.2622" path="/551/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 762.863353][ T9503] 9pnet: Insufficient options for proto=fd [ 762.890312][ T30] audit: type=1400 audit(1755554391.648:7978): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 762.912558][ T9508] netlink: 'syz.4.2623': attribute type 12 has an invalid length. [ 762.921602][ T30] audit: type=1400 audit(1755554391.685:7979): avc: denied { setopt } for pid=9504 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 763.106310][ T30] audit: type=1400 audit(1755554391.851:7980): avc: denied { create } for pid=9524 comm="syz.4.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 763.196272][ T60] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 763.541673][ T9533] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 763.618981][ T9538] loop4: detected capacity change from 0 to 1024 [ 763.651495][ T9538] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 763.673374][ C1] Illegal XDP return value 16128, expect packet loss! [ 763.692191][ T9538] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 763.724429][ T30] audit: type=1400 audit(1755554392.423:7981): avc: denied { map } for pid=9537 comm="syz.4.2631" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.745080][ T9538] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.2631: Allocating blocks 257-513 which overlap fs metadata [ 764.214961][ T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.226601][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.238969][ T60] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 764.250691][ T60] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 764.261636][ T60] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.453245][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.462863][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.471392][ T60] usb 2-1: Product: syz [ 764.475951][ T60] usb 2-1: Manufacturer: syz [ 764.481046][ T60] usb 2-1: SerialNumber: syz [ 764.529414][ T60] cdc_mbim 2-1:1.0: skipping garbage [ 764.597247][ T9561] loop4: detected capacity change from 0 to 256 [ 764.937779][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 764.946299][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 764.955311][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 764.967293][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 765.895868][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2644'. [ 765.905796][ T9582] netlink: 'syz.5.2644': attribute type 1 has an invalid length. [ 765.917675][ T30] audit: type=1400 audit(1755554394.454:7982): avc: denied { mounton } for pid=9583 comm="syz.7.2645" path="/" dev="ramfs" ino=51817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 765.959069][ T60] cdc_mbim 2-1:1.0: bind() failure [ 765.980776][ T60] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 765.998901][ T9586] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2646'. [ 766.008815][ T9586] netem: unknown loss type 0 [ 766.013429][ T60] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 766.025689][ T60] usb 2-1: USB disconnect, device number 42 [ 767.149825][ T30] audit: type=1400 audit(1755554395.580:7983): avc: denied { create } for pid=9601 comm="syz.1.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 767.247031][ T9614] device xfrm0 entered promiscuous mode [ 767.839179][ T9642] loop4: detected capacity change from 0 to 40427 [ 767.888168][ T9642] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 767.893365][ T30] audit: type=1400 audit(1755554396.272:7984): avc: denied { setopt } for pid=9647 comm="syz.0.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 767.896227][ T9642] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 767.927402][ T9642] F2FS-fs (loop4): invalid crc value [ 767.935502][ T9642] F2FS-fs (loop4): Found nat_bits in checkpoint [ 767.990304][ T9642] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 767.998513][ T9642] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 768.399797][ T6264] attempt to access beyond end of device [ 768.399797][ T6264] loop4: rw=1, want=45168, limit=40427 [ 768.627892][ T9688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2676'. [ 768.648845][ T9688] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2676'. [ 768.667501][ T9688] netlink: 'syz.0.2676': attribute type 6 has an invalid length. [ 768.686591][ T9688] netlink: 'syz.0.2676': attribute type 5 has an invalid length. [ 768.710844][ T9688] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2676'. [ 768.924899][ T9709] 9pnet: Insufficient options for proto=fd [ 768.926818][ T30] audit: type=1400 audit(1755554397.223:7985): avc: denied { shutdown } for pid=9706 comm="syz.4.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 769.263401][ T60] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 769.761877][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 769.891881][ T60] usb 5-1: config 8 has an invalid interface number: 57 but max is 0 [ 769.909526][ T60] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 769.932681][ T60] usb 5-1: config 8 has no interface number 0 [ 769.947003][ T60] usb 5-1: config 8 interface 57 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 769.980533][ T60] usb 5-1: config 8 interface 57 has no altsetting 0 [ 770.141472][ T9740] device ip6tnl1 entered promiscuous mode [ 770.162808][ T60] usb 5-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44 [ 770.172321][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.183667][ T60] usb 5-1: Product: syz [ 770.188292][ T60] usb 5-1: Manufacturer: syz [ 770.193217][ T60] usb 5-1: SerialNumber: syz [ 770.540447][ T9759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 770.547935][ T9759] IPv6: NLM_F_CREATE should be set when creating new route [ 770.625627][ T9761] syz.7.2696[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.625734][ T9761] syz.7.2696[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.650297][ T60] usb 5-1: MIDIStreaming interface descriptor not found [ 770.672635][ T9761] syz.7.2696[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.672723][ T9761] syz.7.2696[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.690460][ T60] usb 5-1: USB disconnect, device number 29 [ 770.780604][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2697'. [ 770.946401][ T9771] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2700'. [ 770.961301][ T9771] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2700'. [ 771.060549][ T9782] xt_socket: unknown flags 0x8 [ 771.426612][ T9783] x_tables: duplicate underflow at hook 1 [ 771.451771][ T30] audit: type=1400 audit(1755554399.549:7986): avc: denied { create } for pid=9792 comm="syz.5.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 771.476083][ T9791] netlink: 'syz.4.2705': attribute type 16 has an invalid length. [ 771.487174][ T9791] netlink: 'syz.4.2705': attribute type 17 has an invalid length. [ 771.504096][ T30] audit: type=1326 audit(1755554399.595:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.535034][ T9791] IPv6: ADDRCONF(NETDEV_CHANGE): sit2: link becomes ready [ 771.555030][ T30] audit: type=1326 audit(1755554399.595:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.606180][ T9799] syz.7.2707[9799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 771.606275][ T9799] syz.7.2707[9799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 771.614224][ T30] audit: type=1326 audit(1755554399.595:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.678851][ T30] audit: type=1326 audit(1755554399.595:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.706086][ T30] audit: type=1326 audit(1755554399.595:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.731498][ T30] audit: type=1326 audit(1755554399.595:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.795568][ T30] audit: type=1326 audit(1755554399.595:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.839294][ T9799] kernel read not supported for file /policy (pid: 9799 comm: syz.7.2707) [ 771.883072][ T30] audit: type=1326 audit(1755554399.595:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 771.945534][ T9811] kvm: pic: non byte write [ 771.965054][ T30] audit: type=1326 audit(1755554399.595:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.5.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 772.022694][ T9802] loop4: detected capacity change from 0 to 40427 [ 772.082994][ T9802] F2FS-fs (loop4): fault_injection options not supported [ 773.077782][ T9802] F2FS-fs (loop4): invalid crc value [ 773.246148][ T8704] kernel write not supported for file bpf-prog (pid: 8704 comm: kworker/1:2) [ 773.278907][ T9802] F2FS-fs (loop4): Found nat_bits in checkpoint [ 773.762561][ T9802] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 773.782338][ T9802] attempt to access beyond end of device [ 773.782338][ T9802] loop4: rw=2049, want=45104, limit=40427 [ 773.810549][ T5083] attempt to access beyond end of device [ 773.810549][ T5083] loop4: rw=2049, want=45112, limit=40427 [ 775.383029][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2724'. [ 775.397412][ T9869] tipc: Enabled bearer , priority 0 [ 775.405800][ T9869] device syzkaller0 entered promiscuous mode [ 775.418169][ T9869] tipc: Resetting bearer [ 775.435552][ T9868] tipc: Resetting bearer [ 775.445530][ T9868] tipc: Disabling bearer [ 775.532978][ T9879] syz.4.2728[9879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.533068][ T9879] syz.4.2728[9879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.607647][ T9898] loop4: detected capacity change from 0 to 256 [ 775.688756][ T9898] exfat: Unknown parameter './file0' [ 775.796020][ T9910] loop4: detected capacity change from 0 to 512 [ 775.862862][ T9910] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 776.050847][ T9918] APIC base relocation is unsupported by KVM [ 776.098362][ T9925] loop4: detected capacity change from 0 to 512 [ 776.144036][ T9925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 776.172851][ T9925] EXT4-fs (loop4): 1 truncate cleaned up [ 776.179411][ T9925] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000068,quota,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: writeback. [ 776.288807][ T8728] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 776.307388][ T9939] loop4: detected capacity change from 0 to 256 [ 776.349389][ T9939] exfat: Bad value for 'fmask' [ 776.609363][ T8728] usb 2-1: Using ep0 maxpacket: 16 [ 776.793950][ T8728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.877122][ T8728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.912347][ T8728] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 776.937719][ T8728] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 776.948562][ T8728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.961672][ T8728] usb 2-1: config 0 descriptor?? [ 776.967887][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2747'. [ 776.999660][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 776.999676][ T30] audit: type=1326 audit(1755554404.680:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.5.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 777.038657][ T30] audit: type=1326 audit(1755554404.699:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.5.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 777.072333][ T30] audit: type=1326 audit(1755554404.708:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.5.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 777.108967][ T30] audit: type=1326 audit(1755554404.708:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.5.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 777.141492][ T30] audit: type=1326 audit(1755554404.708:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.5.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 777.181822][ T30] audit: type=1326 audit(1755554404.708:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.5.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe156c7be9 code=0x7ffc0000 [ 777.213934][ T9964] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 777.223918][ T9964] SELinux: security_context_str_to_sid(root) failed for (dev cgroup2, type cgroup2) errno=-22 [ 778.137594][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.192109][ T9973] overlayfs: failed to clone upperpath [ 778.408909][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2755'. [ 778.428728][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2755'. [ 778.531836][ T9983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9983 comm=syz.5.2757 [ 778.559151][ T8728] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 778.569181][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.576949][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.584437][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.613348][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.621371][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.645851][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.653866][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.856059][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.863941][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.872008][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.880192][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.889029][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.898457][ T8728] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 778.993045][ T8728] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 779.002962][ T8728] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 779.003880][ T9993] overlayfs: failed to clone upperpath [ 779.028610][ T8728] microsoft 0003:045E:07DA.001A: no inputs found [ 779.036245][ T8728] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 779.056798][ T8728] usb 2-1: USB disconnect, device number 43 [ 779.360367][ T9998] syz.0.2762[9998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 779.360468][ T9998] syz.0.2762[9998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 779.373906][ T9998] overlayfs: './file0' not a directory [ 779.410161][T10007] loop4: detected capacity change from 0 to 128 [ 779.430628][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 779.481863][T10007] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 779.497389][T10007] FAT-fs (loop4): FAT read failed (blocknr 255) [ 779.557166][T10017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10017 comm=syz.5.2768 [ 779.589076][T10020] input: syz1 as /devices/virtual/input/input23 [ 779.595624][T10020] input: failed to attach handler leds to device input23, error: -6 [ 779.647666][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 779.659252][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 779.674518][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2770'. [ 779.819980][T10042] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2777'. [ 779.846095][T10044] netem: change failed [ 779.853685][T10046] loop4: detected capacity change from 0 to 256 [ 780.155824][ T30] audit: type=1400 audit(1755554407.588:8090): avc: denied { setattr } for pid=10008 comm="syz.1.2765" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 780.817730][T10055] overlayfs: missing 'lowerdir' [ 781.373576][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 782.213735][T10082] 9pnet: Insufficient options for proto=fd [ 782.232098][ T60] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 782.242797][ T30] audit: type=1326 audit(1755554409.498:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 782.307244][ T30] audit: type=1326 audit(1755554409.498:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 782.332718][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2789'. [ 782.333494][ T30] audit: type=1326 audit(1755554409.508:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0552b43be9 code=0x7ffc0000 [ 782.474325][T10096] binder: 10095:10096 ioctl c0306201 2000000003c0 returned -14 [ 782.485924][T10096] binder: 10095:10096 ioctl 81f8943c 200000000740 returned -22 [ 782.611137][ T60] usb 2-1: Invalid ep0 maxpacket: 16 [ 782.676212][ T8728] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 782.773676][ T60] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 782.860352][ T6981] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 783.033771][ T60] usb 2-1: Invalid ep0 maxpacket: 16 [ 783.041024][ T60] usb usb2-port1: attempt power cycle [ 783.066308][ T8728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.078393][ T8728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.089410][ T8728] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 783.099025][ T8728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.109132][ T8728] usb 5-1: config 0 descriptor?? [ 783.270406][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2803'. [ 783.305095][T10121] device gretap1 entered promiscuous mode [ 783.550723][ T6981] usb 1-1: config 4 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 783.562262][ T6981] usb 1-1: config 4 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.566948][T10125] xt_hashlimit: max too large, truncated to 1048576 [ 783.572470][ T6981] usb 1-1: config 4 interface 0 has no altsetting 0 [ 783.586002][ T6981] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 783.595267][ T6981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.629617][ T60] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 783.630857][ T8728] elo 0003:04E7:0030.001B: unknown main item tag 0x0 [ 783.645935][ T8728] elo 0003:04E7:0030.001B: item fetching failed at offset 3/7 [ 783.654347][ T8728] elo 0003:04E7:0030.001B: parse failed [ 783.660437][ T8728] elo: probe of 0003:04E7:0030.001B failed with error -22 [ 783.727129][ T60] usb 2-1: Invalid ep0 maxpacket: 16 [ 783.848457][ T8728] usb 5-1: USB disconnect, device number 30 [ 783.889662][ T60] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 783.998070][ T60] usb 2-1: Invalid ep0 maxpacket: 16 [ 784.003739][ T60] usb usb2-port1: unable to enumerate USB device [ 784.161578][ T6981] holtek_mouse 0003:04D9:A067.001C: unknown main item tag 0x0 [ 784.169304][ T6981] holtek_mouse 0003:04D9:A067.001C: unknown main item tag 0x3 [ 784.178352][ T6981] holtek_mouse 0003:04D9:A067.001C: unknown main item tag 0x3 [ 784.186744][ T6981] holtek_mouse 0003:04D9:A067.001C: item fetching failed at offset 4/8 [ 784.197161][ T6981] holtek_mouse 0003:04D9:A067.001C: hid parse failed: -22 [ 784.205129][ T6981] holtek_mouse: probe of 0003:04D9:A067.001C failed with error -22 [ 784.380303][ T8704] usb 1-1: USB disconnect, device number 18 [ 784.509220][T10197] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2838'. [ 784.541708][T10201] netlink: 'syz.4.2840': attribute type 3 has an invalid length. [ 784.549792][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 784.559598][T10201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2840'. [ 784.569090][T10201] netlink: 'syz.4.2840': attribute type 1 has an invalid length. [ 784.686619][T10229] device batadv_slave_0 entered promiscuous mode [ 784.703788][T10228] device batadv_slave_0 left promiscuous mode [ 784.713701][T10231] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2855'. [ 784.827865][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 784.827883][ T30] audit: type=1400 audit(1755554411.898:8108): avc: denied { read } for pid=10256 comm="syz.1.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 784.831292][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2868'. [ 785.203709][T10292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10292 comm=syz.0.2884 [ 785.279073][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'. [ 785.288886][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2887'. [ 785.686337][ T30] audit: type=1400 audit(1755554412.692:8109): avc: denied { create } for pid=10309 comm="syz.4.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 785.801698][ T30] audit: type=1326 audit(1755554412.803:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.4.2900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0552b43be9 code=0x0 [ 785.964249][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.971888][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.979534][T10335] device bridge_slave_0 entered promiscuous mode [ 785.987472][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.994821][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.002904][T10335] device bridge_slave_1 entered promiscuous mode [ 786.014740][ T6248] tipc: Left network mode [ 786.077250][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.085161][T10335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.093625][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.100782][T10335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.137615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 786.146292][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.154901][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.165259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 786.174186][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.181578][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.205310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 786.214642][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.222396][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.255365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 786.302557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 786.342466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 786.362867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 786.372867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 786.381009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 786.390832][T10335] device veth0_vlan entered promiscuous mode [ 786.418795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 786.434497][T10335] device veth1_macvtap entered promiscuous mode [ 786.454365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 786.474651][T10370] ================================================================== [ 786.483640][T10370] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 786.493821][T10370] Read of size 1 at addr ffff88811b0c43f8 by task syz.0.2915/10370 [ 786.502381][T10370] [ 786.504735][T10370] CPU: 0 PID: 10370 Comm: syz.0.2915 Tainted: G W 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 786.516627][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.527314][T10370] Call Trace: [ 786.531270][T10370] [ 786.534300][T10370] __dump_stack+0x21/0x30 [ 786.538651][T10370] dump_stack_lvl+0xee/0x150 [ 786.543338][T10370] ? show_regs_print_info+0x20/0x20 [ 786.548628][T10370] ? load_image+0x3a0/0x3a0 [ 786.553435][T10370] ? unwind_get_return_address+0x4d/0x90 [ 786.559217][T10370] print_address_description+0x7f/0x2c0 [ 786.565281][T10370] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 786.572014][T10370] kasan_report+0xf1/0x140 [ 786.576455][T10370] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 786.583055][T10370] __asan_report_load1_noabort+0x14/0x20 [ 786.588964][T10370] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 786.595399][T10370] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 786.602084][T10370] ? xfrm_netlink_rcv+0x72/0x90 [ 786.606967][T10370] ? netlink_unicast+0x876/0xa40 [ 786.612327][T10370] ? netlink_sendmsg+0x86a/0xb70 [ 786.617292][T10370] ? ____sys_sendmsg+0x5a2/0x8c0 [ 786.622439][T10370] ? ___sys_sendmsg+0x1f0/0x260 [ 786.627395][T10370] ? x64_sys_call+0x4b/0x9a0 [ 786.632123][T10370] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 786.638711][T10370] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 786.645069][T10370] xfrm_policy_inexact_insert+0x70/0x1130 [ 786.651103][T10370] ? __get_hash_thresh+0x10c/0x420 [ 786.656440][T10370] ? policy_hash_bysel+0x110/0x4f0 [ 786.661981][T10370] xfrm_policy_insert+0x126/0x9a0 [ 786.667359][T10370] ? xfrm_policy_construct+0x54f/0x1f00 [ 786.673110][T10370] xfrm_add_policy+0x4d1/0x830 [ 786.677984][T10370] ? xfrm_dump_sa_done+0xc0/0xc0 [ 786.683027][T10370] xfrm_user_rcv_msg+0x45c/0x6e0 [ 786.687986][T10370] ? xfrm_netlink_rcv+0x90/0x90 [ 786.693052][T10370] ? avc_has_perm_noaudit+0x460/0x460 [ 786.699511][T10370] ? x64_sys_call+0x4b/0x9a0 [ 786.704559][T10370] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 786.710708][T10370] netlink_rcv_skb+0x1e0/0x430 [ 786.716036][T10370] ? xfrm_netlink_rcv+0x90/0x90 [ 786.721912][T10370] ? netlink_ack+0xb60/0xb60 [ 786.726885][T10370] ? wait_for_completion_killable_timeout+0x10/0x10 [ 786.733719][T10370] ? __netlink_lookup+0x387/0x3b0 [ 786.739180][T10370] xfrm_netlink_rcv+0x72/0x90 [ 786.744046][T10370] netlink_unicast+0x876/0xa40 [ 786.749072][T10370] netlink_sendmsg+0x86a/0xb70 [ 786.753892][T10370] ? netlink_getsockopt+0x530/0x530 [ 786.759211][T10370] ? sock_alloc_file+0xba/0x260 [ 786.764189][T10370] ? security_socket_sendmsg+0x82/0xa0 [ 786.769960][T10370] ? netlink_getsockopt+0x530/0x530 [ 786.775509][T10370] ____sys_sendmsg+0x5a2/0x8c0 [ 786.780737][T10370] ? __sys_sendmsg_sock+0x40/0x40 [ 786.785888][T10370] ? import_iovec+0x7c/0xb0 [ 786.790405][T10370] ___sys_sendmsg+0x1f0/0x260 [ 786.795370][T10370] ? __sys_sendmsg+0x250/0x250 [ 786.800435][T10370] ? __fdget+0x1a1/0x230 [ 786.804778][T10370] __x64_sys_sendmsg+0x1e2/0x2a0 [ 786.809938][T10370] ? ___sys_sendmsg+0x260/0x260 [ 786.814998][T10370] ? __kasan_check_write+0x14/0x20 [ 786.820251][T10370] ? switch_fpu_return+0x15d/0x2c0 [ 786.825594][T10370] x64_sys_call+0x4b/0x9a0 [ 786.830411][T10370] do_syscall_64+0x4c/0xa0 [ 786.834844][T10370] ? clear_bhb_loop+0x50/0xa0 [ 786.840197][T10370] ? clear_bhb_loop+0x50/0xa0 [ 786.844908][T10370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 786.851612][T10370] RIP: 0033:0x7fac31581be9 [ 786.856333][T10370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.877723][T10370] RSP: 002b:00007fac2ffea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.886942][T10370] RAX: ffffffffffffffda RBX: 00007fac317a8fa0 RCX: 00007fac31581be9 [ 786.895229][T10370] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 786.903831][T10370] RBP: 00007fac31604e19 R08: 0000000000000000 R09: 0000000000000000 [ 786.911818][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.919883][T10370] R13: 00007fac317a9038 R14: 00007fac317a8fa0 R15: 00007ffec7b57ec8 [ 786.927964][T10370] [ 786.931081][T10370] [ 786.933498][T10370] Allocated by task 10370: [ 786.937937][T10370] __kasan_kmalloc+0xda/0x110 [ 786.942642][T10370] __kmalloc+0x13d/0x2c0 [ 786.947612][T10370] sk_prot_alloc+0xed/0x320 [ 786.952228][T10370] sk_alloc+0x38/0x430 [ 786.956662][T10370] pfkey_create+0x12a/0x660 [ 786.961177][T10370] __sock_create+0x38d/0x7a0 [ 786.965777][T10370] __sys_socket+0xec/0x190 [ 786.970201][T10370] __x64_sys_socket+0x7a/0x90 [ 786.975071][T10370] x64_sys_call+0x8c5/0x9a0 [ 786.979594][T10370] do_syscall_64+0x4c/0xa0 [ 786.984146][T10370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 786.990490][T10370] [ 786.992914][T10370] Last potentially related work creation: [ 786.998723][T10370] kasan_save_stack+0x3a/0x60 [ 787.003425][T10370] __kasan_record_aux_stack+0xd2/0x100 [ 787.009390][T10370] kasan_record_aux_stack_noalloc+0xb/0x10 [ 787.015705][T10370] call_rcu+0x105/0xfe0 [ 787.019958][T10370] qdisc_destroy+0x166/0x270 [ 787.024647][T10370] dev_shutdown+0x198/0x580 [ 787.029440][T10370] unregister_netdevice_many+0x95d/0x1990 [ 787.035376][T10370] unregister_netdevice_queue+0x31c/0x360 [ 787.041951][T10370] __tun_detach+0xca6/0x1450 [ 787.047080][T10370] tun_chr_close+0x92/0x140 [ 787.052178][T10370] __fput+0x20b/0x8b0 [ 787.056316][T10370] ____fput+0x15/0x20 [ 787.060527][T10370] task_work_run+0x127/0x190 [ 787.065521][T10370] exit_to_user_mode_loop+0xd0/0xe0 [ 787.071019][T10370] exit_to_user_mode_prepare+0x5a/0xa0 [ 787.076937][T10370] syscall_exit_to_user_mode+0x1a/0x30 [ 787.082698][T10370] do_syscall_64+0x58/0xa0 [ 787.088041][T10370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.093988][T10370] [ 787.096433][T10370] Second to last potentially related work creation: [ 787.103655][T10370] kasan_save_stack+0x3a/0x60 [ 787.108355][T10370] __kasan_record_aux_stack+0xd2/0x100 [ 787.114476][T10370] kasan_record_aux_stack_noalloc+0xb/0x10 [ 787.120400][T10370] call_rcu+0x105/0xfe0 [ 787.124656][T10370] qdisc_destroy+0x166/0x270 [ 787.129340][T10370] dev_shutdown+0x198/0x580 [ 787.133861][T10370] unregister_netdevice_many+0x95d/0x1990 [ 787.140280][T10370] unregister_netdevice_queue+0x31c/0x360 [ 787.146306][T10370] __tun_detach+0xca6/0x1450 [ 787.151546][T10370] tun_chr_close+0x92/0x140 [ 787.156428][T10370] __fput+0x20b/0x8b0 [ 787.160439][T10370] ____fput+0x15/0x20 [ 787.164522][T10370] task_work_run+0x127/0x190 [ 787.169153][T10370] exit_to_user_mode_loop+0xd0/0xe0 [ 787.174688][T10370] exit_to_user_mode_prepare+0x5a/0xa0 [ 787.180947][T10370] syscall_exit_to_user_mode+0x1a/0x30 [ 787.187073][T10370] do_syscall_64+0x58/0xa0 [ 787.191894][T10370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.197876][T10370] [ 787.200215][T10370] The buggy address belongs to the object at ffff88811b0c4000 [ 787.200215][T10370] which belongs to the cache kmalloc-1k of size 1024 [ 787.215191][T10370] The buggy address is located 1016 bytes inside of [ 787.215191][T10370] 1024-byte region [ffff88811b0c4000, ffff88811b0c4400) [ 787.229679][T10370] The buggy address belongs to the page: [ 787.235703][T10370] page:ffffea00046c3000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b0c0 [ 787.246550][T10370] head:ffffea00046c3000 order:3 compound_mapcount:0 compound_pincount:0 [ 787.255153][T10370] flags: 0x4000000000010200(slab|head|zone=1) [ 787.261537][T10370] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043080 [ 787.270546][T10370] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 787.279228][T10370] page dumped because: kasan: bad access detected [ 787.286004][T10370] page_owner tracks the page as allocated [ 787.291809][T10370] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 0, ts 81633720783, free_ts 69616584570 [ 787.312537][T10370] post_alloc_hook+0x192/0x1b0 [ 787.317411][T10370] prep_new_page+0x1c/0x110 [ 787.322109][T10370] get_page_from_freelist+0x2cc5/0x2d50 [ 787.328129][T10370] __alloc_pages+0x18f/0x440 [ 787.333303][T10370] new_slab+0xa1/0x4d0 [ 787.338118][T10370] ___slab_alloc+0x381/0x810 [ 787.343111][T10370] __slab_alloc+0x49/0x90 [ 787.347733][T10370] __kmalloc_track_caller+0x169/0x2c0 [ 787.353921][T10370] __alloc_skb+0x21a/0x740 [ 787.358558][T10370] alloc_skb_with_frags+0xa8/0x620 [ 787.364398][T10370] sock_alloc_send_pskb+0x853/0x980 [ 787.370054][T10370] sock_alloc_send_skb+0x32/0x40 [ 787.375094][T10370] __ip6_append_data+0x252e/0x37e0 [ 787.380589][T10370] ip6_append_data+0x1d0/0x330 [ 787.386250][T10370] icmp6_send+0xeb8/0x14c0 [ 787.390781][T10370] ip6_link_failure+0x85/0x320 [ 787.395738][T10370] page last free stack trace: [ 787.400585][T10370] free_unref_page_prepare+0x542/0x550 [ 787.406138][T10370] free_unref_page+0xa2/0x550 [ 787.411091][T10370] __free_pages+0x6c/0x100 [ 787.415515][T10370] __free_slab+0xe8/0x1e0 [ 787.420048][T10370] __unfreeze_partials+0x160/0x190 [ 787.425456][T10370] put_cpu_partial+0xc6/0x120 [ 787.430234][T10370] __slab_free+0x1d4/0x290 [ 787.434752][T10370] ___cache_free+0x104/0x120 [ 787.439351][T10370] qlink_free+0x4d/0x90 [ 787.443612][T10370] qlist_free_all+0x5f/0xb0 [ 787.448380][T10370] kasan_quarantine_reduce+0x14a/0x170 [ 787.453852][T10370] __kasan_slab_alloc+0x2f/0xf0 [ 787.458802][T10370] slab_post_alloc_hook+0x4f/0x2b0 [ 787.463942][T10370] kmem_cache_alloc+0xf7/0x260 [ 787.469372][T10370] __alloc_skb+0xe0/0x740 [ 787.473727][T10370] alloc_skb_with_frags+0xa8/0x620 [ 787.479115][T10370] [ 787.481550][T10370] Memory state around the buggy address: [ 787.487727][T10370] ffff88811b0c4280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.496189][T10370] ffff88811b0c4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.504979][T10370] >ffff88811b0c4380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 787.513338][T10370] ^ [ 787.521418][T10370] ffff88811b0c4400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 787.529569][T10370] ffff88811b0c4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 787.537765][T10370] ================================================================== [ 787.546098][T10370] Disabling lock debugging due to kernel taint [ 787.558205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 787.572564][ T30] audit: type=1400 audit(1755554414.418:8111): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[427]" dev="pipefs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 787.625577][ T30] audit: type=1400 audit(1755554414.427:8112): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 787.714123][ T30] audit: type=1400 audit(1755554414.427:8113): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.814197][ T30] audit: type=1400 audit(1755554414.427:8114): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 787.838482][ T30] audit: type=1400 audit(1755554414.427:8115): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 787.862108][ T30] audit: type=1400 audit(1755554414.427:8116): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 787.888691][ T30] audit: type=1400 audit(1755554414.547:8117): avc: denied { remove_name } for pid=9436 comm="syz.1.2598" name=".index" dev="loop1" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 787.997768][ T6248] device veth1_macvtap left promiscuous mode [ 788.004437][ T6248] device veth0_vlan left promiscuous mode [ 788.846715][ T6248] tipc: Disabling bearer [ 788.853989][ T6248] tipc: Disabling bearer [ 788.860367][ T6248] tipc: Left network mode [ 788.868452][ T6248] tipc: Left network mode [ 789.578351][ T6248] device bridge_slave_1 left promiscuous mode [ 789.584719][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.593165][ T6248] device bridge_slave_0 left promiscuous mode [ 789.600211][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.608461][ T6248] device bridge_slave_1 left promiscuous mode [ 789.614875][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.623511][ T6248] device bridge_slave_0 left promiscuous mode [ 789.629965][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.640096][ T6248] device bridge_slave_1 left promiscuous mode [ 789.646713][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.654860][ T6248] device bridge_slave_0 left promiscuous mode [ 789.661956][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.671500][ T6248] device veth1_macvtap left promiscuous mode [ 789.678460][ T6248] device veth0_vlan left promiscuous mode [ 789.685562][ T6248] device veth1_macvtap left promiscuous mode [ 789.692054][ T6248] device veth0_vlan left promiscuous mode [ 789.699417][ T6248] device veth1_macvtap left promiscuous mode [ 789.705632][ T6248] device veth0_vlan left promiscuous mode [ 789.712724][ T6248] device veth1_macvtap left promiscuous mode